Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: 9X/orActK15ykMy9//NAd/2dlpTa4+rzeLL54LbhNw0=
Subject key identifier: F0:C4:58:9C:19:91:A5:4C:59:48:47:B6:56:34:24:F5:80:C0:86:37
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 0194BC7327F19A1B4E92FC416E4B231D148E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 11CD
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: AGvJYkidre80qoBImcHJyhaHVPLdvHFORVCTo8iH/FA=)
2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:f1:9a:1b:4e:92:fc:41:6e:4b:23:1d:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=f0c4589c1991a54c594847b6563424f580c08637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:a8:6c:6c:71:00:67:5d:32:e8:ba:5c:4a:
cb:28:db:49:f1:68:c7:7b:78:d2:39:3c:7c:b5:50:
08:94:ca:4f:21:33:fb:96:0f:b4:8e:1a:71:61:0d:
fa:67:fa:f3:5e:47:75:d9:77:9c:b7:67:a8:f6:53:
44:2c:3a:8a:06:cd:f1:24:8d:1c:d3:ad:ea:d1:38:
6a:79:30:04:a0:05:a8:24:5c:49:2a:3d:e7:d0:16:
53:de:36:c5:dc:49:81:1f:aa:ea:01:6e:21:d6:86:
d7:9b:7e:aa:66:0b:01:a2:64:0f:7d:b3:9e:dd:b8:
34:22:38:77:0c:17:91:e7:4b:0e:e4:18:00:5e:5b:
70:4e:91:45:b0:64:22:0d:f1:ae:a2:7b:2a:3a:3f:
13:af:00:26:e5:32:96:52:7f:bf:ee:b2:a2:7a:30:
e0:6d:1d:44:b1:7c:e4:e3:1e:eb:a7:06:a5:c8:ee:
5b:0f:15:30:e2:62:fb:f2:c3:28:05:95:53:d2:e7:
6c:f7:a6:c5:9c:c2:8a:60:22:a7:bd:40:45:f0:d5:
f1:78:b4:c2:53:81:cb:4c:fe:e6:52:76:d2:64:1e:
83:f4:47:69:0c:3c:a0:b1:7e:f7:69:f1:5a:34:26:
5a:ae:82:40:eb:47:07:c1:a5:22:c4:0c:82:2b:84:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:58:9C:19:91:A5:4C:59:48:47:B6:56:34:24:F5:80:C0:86:37
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:88:a8:d2:cc:6d:b1:55:92:08:3c:ec:87:02:81:7b:ff:d1:
85:08:c5:7a:1c:dd:e0:9c:b9:e7:38:c5:53:e6:61:1b:da:e2:
98:ed:31:5b:ea:f0:6c:58:a1:6f:99:86:08:d4:19:00:f7:0e:
a5:21:76:32:c0:02:a6:ad:32:fa:6a:6a:62:52:1b:70:cd:23:
ff:d4:6e:20:01:f8:61:54:7a:c4:0d:61:c3:79:3b:3e:43:88:
fc:1c:b9:7e:a3:72:d4:f0:6e:13:a0:ae:49:a7:01:85:b6:98:
28:c9:97:a0:51:da:7c:ed:94:13:f2:e8:4d:7b:6e:84:3b:d2:
ad:bf:9e:75:a9:fe:58:94:97:b8:24:15:fb:e1:f5:a1:01:b5:
ce:98:a6:5a:31:eb:e5:02:a7:af:b0:43:47:39:f3:a2:01:20:
c5:e3:ac:1a:1e:7c:48:3e:7b:01:1f:4b:9a:ec:65:42:59:59:
1d:1e:aa:42:1b:68:8d:1a:9d:2c:e8:f3:2b:34:49:7e:f3:10:
e0:00:ad:db:c4:8a:9f:a0:f6:32:5f:71:c4:46:82:c4:cd:14:
d2:4b:5c:9a:13:e7:0b:b6:f1:15:c0:1f:ab:84:f0:60:82:9b:
c6:fa:9c:4c:a3:2c:b2:cd:ee:1b:e5:4d:84:41:e8:ef:f7:35:
2b:00:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:33 2025 by rpki-client