Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: v3cTVOJAyYTBT5anNKMvQbfXRQME/Co2kGGa4gVBh6M=
Subject key identifier: D0:9B:AF:86:07:E1:A2:4B:9D:4E:D5:CD:7B:7F:A4:41:6C:4B:C4:B5
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0194BD1789C957E7A5080D05B58207CCFB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 122F
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: raZBJbRIP6DHLBY1udX6eSQWcYjLxncfW6C2RAJI6xg=)
2: DoWPZtpC_HWnwGYFf_FzalBO300.roa (hash: WIbVE4iIQHDloWZiobD5nOBiotUirQnxdqGFBtG1XvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:c9:57:e7:a5:08:0d:05:b5:82:07:cc:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=d09baf8607e1a24b9d4ed5cd7b7fa4416c4bc4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:41:65:f8:23:4f:5c:2e:a2:d8:d5:d5:d6:
85:29:74:c6:6c:86:5e:00:92:67:04:53:34:28:d0:
21:51:91:eb:bf:21:1f:e5:8a:2e:98:11:f7:48:ef:
57:a9:cb:5c:ae:ee:1d:37:8d:c2:47:3d:3f:79:9a:
9a:4f:fa:44:7d:12:cb:d9:98:52:7a:37:ee:c9:7f:
53:2f:ef:3e:a5:7a:11:eb:60:c0:57:ad:79:ce:98:
5e:f7:4f:38:5e:53:fa:2b:c2:c9:23:de:01:73:6e:
ab:5e:ed:7f:09:b5:9b:b3:7b:7b:22:24:fc:04:02:
86:be:d1:ce:80:f5:c8:2f:21:d2:9c:fc:9c:10:87:
46:60:88:fd:78:c9:29:2e:68:ad:fb:1b:02:93:01:
e5:6a:14:fa:74:1a:e0:6b:8b:8b:ef:9c:3d:34:7c:
76:6d:27:79:02:47:b4:3a:fc:f8:82:7d:ac:04:b1:
aa:a5:23:d0:5d:5d:41:1a:66:c2:05:91:e3:25:5e:
ae:63:63:5a:1c:a0:e2:f7:48:1b:7f:d6:75:03:19:
20:b1:78:e6:30:83:e9:c8:e4:24:3d:c6:55:4b:c2:
a5:d9:9c:6c:e0:c1:9a:15:0c:ec:96:78:c5:07:67:
58:c6:f4:a5:83:f9:a2:1a:c6:0b:05:f5:97:98:c9:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:AF:86:07:E1:A2:4B:9D:4E:D5:CD:7B:7F:A4:41:6C:4B:C4:B5
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:70:29:92:a0:c0:0f:2e:dc:8d:ab:81:23:d3:39:02:58:fd:
9b:e7:bb:87:e7:e4:d5:fa:ef:dc:91:7e:02:f9:f3:38:8d:f5:
73:85:7a:32:15:8f:4b:16:cc:5d:c9:2c:1c:28:45:0a:68:e5:
c2:d4:54:06:00:4b:4d:bf:97:7c:0b:1a:78:3f:7b:67:91:c3:
41:08:c7:d7:56:aa:05:53:64:fd:a6:db:a8:8f:aa:30:a4:40:
29:35:65:31:1a:9c:08:f8:b9:a2:b3:b4:fe:b2:59:6b:7e:d5:
fa:5a:ed:2d:9f:c5:0b:41:d1:f3:11:cc:c7:20:65:1c:d0:d3:
3e:8d:92:b0:d8:11:fc:fd:fd:7a:ba:fe:8b:b7:0a:35:7e:e0:
ea:75:67:a4:c7:e0:92:eb:a5:b2:d8:c6:eb:84:89:0d:35:eb:
07:43:5b:2d:fe:b1:2d:ad:fc:91:14:dd:85:0a:2f:c2:f2:c6:
f4:ea:0d:5c:a8:67:be:b9:20:fb:0f:13:e7:e5:be:6f:26:99:
44:dc:b8:6f:23:30:dc:94:b5:e4:4f:9f:27:fe:d5:48:24:c6:
79:87:c5:f6:bb:f3:df:79:04:56:04:13:fd:08:7e:8c:36:dd:
81:dd:ee:b5:99:7a:58:32:98:19:cf:90:27:9a:9b:f6:f9:8c:
e1:87:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:33 2025 by rpki-client