Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: JeePMfHsOX2WsaC+SIsJLyNI40fKfCCxMlnxnUknqZ4=
Subject key identifier: 09:60:66:A9:67:E7:34:38:DD:FA:EA:DA:2F:2A:E4:A6:E7:FF:FA:43
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 0194BC3C7C0C24D4AFD209BA52EF9A758C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: slqrkndsYaVEBWPVUnKcXY4A131fqiZ4qLRdKp/plfM=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:0c:24:d4:af:d2:09:ba:52:ef:9a:75:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=096066a967e73438ddfaeada2f2ae4a6e7fffa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:b3:4d:ec:09:aa:a5:d9:11:55:83:37:83:
e4:4b:c9:8e:f4:45:8a:a6:57:e5:ca:9b:3e:0d:12:
09:4f:34:92:ce:32:8b:00:2b:18:7e:0f:40:6f:3f:
5c:23:72:cc:a6:22:dd:e9:2e:e1:05:8b:95:07:73:
ba:07:2d:41:9f:be:bc:0c:88:96:9a:39:e0:06:3c:
4a:31:55:50:98:63:ae:57:8d:33:1d:08:03:c8:38:
a7:7f:27:f8:9b:64:ff:eb:1b:d8:2f:c2:42:45:bf:
e1:be:7d:48:10:94:15:7f:86:f4:ce:62:e9:f0:31:
d6:4e:6f:a9:d0:5b:9f:9f:1c:f5:79:b2:45:16:58:
d3:90:88:2d:cc:a2:22:df:da:b5:95:30:3f:7a:88:
f4:fd:79:63:e7:b2:93:1c:77:19:09:6a:01:a3:fa:
5c:a9:c2:88:f8:8e:89:d9:d1:9d:16:d0:d6:42:37:
fd:07:4f:cb:1a:b2:b7:f2:25:99:eb:b6:bc:89:27:
ca:3e:8b:db:af:0c:56:5d:cb:db:ad:36:40:d7:ff:
e3:e0:84:17:0f:c5:5f:39:de:74:2f:40:d2:de:88:
80:e5:6d:ad:54:4f:fb:30:c0:c0:47:ae:33:33:34:
f3:4e:e0:44:dc:f6:7f:50:b0:d1:7f:a2:4b:4b:37:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:66:A9:67:E7:34:38:DD:FA:EA:DA:2F:2A:E4:A6:E7:FF:FA:43
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:c8:f8:31:aa:18:15:24:5e:17:ce:b6:d3:f5:9f:3d:56:
5d:89:8b:31:41:a3:e6:e4:08:70:fe:c7:35:73:d2:58:4f:2b:
b1:30:af:4f:72:71:2a:74:54:96:fa:d0:cd:41:9c:1e:e9:6e:
d4:66:25:c6:8a:d6:2c:52:30:ea:f9:de:6c:00:cc:eb:52:c6:
43:f9:a1:b9:e5:53:b2:be:5b:14:af:2e:88:be:f5:7a:d3:f0:
40:31:8e:99:ac:98:27:a6:64:19:8b:4e:d7:25:2e:b8:ff:63:
ee:cf:9d:03:c2:c6:ef:0d:70:24:c5:91:da:1d:f4:e6:5a:38:
06:f3:03:53:ad:74:36:9f:48:20:fe:1f:ff:7b:22:9c:2b:03:
23:c2:6d:53:33:18:94:96:b2:e7:60:11:61:5f:af:bd:e0:4d:
94:b0:a7:fd:c3:d1:af:9d:80:61:07:40:a6:35:f4:52:b7:61:
bc:8f:2a:14:da:a8:a9:9e:db:31:b5:b4:24:45:8d:7b:ff:1d:
01:73:9d:8d:51:ed:99:21:f1:c8:6b:a5:42:c0:32:53:32:0d:
a1:26:fd:62:ca:ac:2c:4e:f3:61:2c:95:0b:71:65:f2:96:df:
d8:07:a9:fa:93:05:0b:d9:1d:e3:e9:5d:cd:14:47:c5:15:f6:
3e:f8:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client