Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
File: 7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft (raw, json)
Hash identifier: 4L34ak4ty8IxMfQC1BbsEUS2DaeJv2s+m8H71gzBfTU=
Subject key identifier: 82:3A:9E:50:26:B1:5D:94:A5:0C:4E:8C:5C:5F:09:CC:42:76:87:C0
Authority key identifier: EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
Certificate issuer: /CN=ee720dfe6719724e230102e3425c6c2df247d879
Certificate serial: 0194BCE07E33AF1EC52B6555F91F3DDB6587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl (hash: dXAtRcmr4+Gh2WCLZ12EqEUqwALl2Kua8WzxqNRjijw=)
2: eEU3n6TnMbJK4m_cpI79DREXXss.roa (hash: /Y4u8pK/zpaeGgWa+MttJ6f/RKbBe0vkUpCyQaR261k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:33:af:1e:c5:2b:65:55:f9:1f:3d:db:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee720dfe6719724e230102e3425c6c2df247d879
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=823a9e5026b15d94a50c4e8c5c5f09cc427687c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:1a:d7:b9:69:30:fa:77:81:20:5b:38:14:
0e:65:78:75:64:93:0c:c9:11:33:b0:8c:5d:b7:16:
dc:cc:e9:14:4e:f3:e5:cf:62:bb:ec:9b:82:80:e7:
f5:40:f7:13:9f:ec:3c:74:06:ff:a8:02:d2:14:79:
10:70:b2:a4:3e:99:bb:76:81:94:11:9d:01:c3:70:
c3:af:27:02:19:25:c3:e5:67:b4:b9:40:1b:52:9f:
12:73:97:87:b1:cc:09:fd:92:ff:e8:49:58:85:0e:
a1:30:6b:16:fe:13:dd:34:ac:28:49:24:0d:7e:56:
37:5f:24:1c:06:49:91:e4:29:3a:77:09:ac:98:e0:
ff:0f:7c:11:93:69:0c:1c:7f:3f:a6:5a:87:ea:fb:
08:51:41:1e:2d:90:92:e8:d4:6f:71:04:f1:a3:b8:
2a:d9:93:8f:2d:8e:53:98:ff:28:29:fc:fd:c7:08:
ae:c3:ac:77:c8:fb:ce:ac:3e:8f:5b:15:3a:26:97:
cf:6e:eb:4a:a2:ec:72:7d:0b:ef:9d:66:9d:05:35:
db:11:8c:75:4e:44:d2:ab:91:07:4a:64:67:f5:56:
c0:f3:3e:a1:b6:98:55:d9:4d:cf:64:89:41:41:99:
c8:cc:e7:c1:70:a9:98:87:97:49:b5:f7:af:eb:61:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:9E:50:26:B1:5D:94:A5:0C:4E:8C:5C:5F:09:CC:42:76:87:C0
X509v3 Authority Key Identifier:
keyid:EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:aa:e4:11:5b:73:e7:9b:f0:b4:31:79:d2:51:54:e5:d4:
ef:f0:f1:19:62:dd:ec:5a:35:2f:95:2e:74:22:3b:d9:59:7a:
2e:95:44:6e:4b:fc:3d:e8:d2:20:aa:a1:86:12:d6:d0:77:64:
32:a0:6b:b4:8f:b3:4f:01:6b:48:1b:d9:cd:4b:53:90:d9:bd:
47:fc:77:08:91:d5:cf:08:7b:d0:92:7c:23:ca:b8:3d:14:e1:
c1:ca:4c:bd:70:cf:17:a6:1e:bf:d9:e6:db:a3:81:12:47:f6:
2a:15:97:74:ff:7e:f6:1c:ae:c7:2b:04:f5:5a:3a:28:09:58:
7a:96:f5:f4:ca:e5:03:79:b3:ed:f0:a1:7d:21:dd:50:be:fe:
53:87:94:10:a6:fe:c6:49:cd:f2:7e:4e:bf:d2:7c:1c:2c:18:
98:41:8a:9a:f7:4b:ed:76:c7:ca:dc:91:a2:9b:8c:d6:60:d4:
ea:a8:88:57:e0:47:38:2d:77:0a:c6:d0:bb:1f:2d:b0:a6:8b:
82:fb:c5:98:82:94:2e:9e:65:ff:21:c5:75:17:d8:75:13:a2:
e3:b7:f1:41:14:5d:7c:76:e5:fc:42:d6:7d:95:99:3a:35:04:
bd:c6:57:b6:db:2a:10:e5:0b:bc:a3:4c:ed:7a:3a:3a:ba:be:
07:3c:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:06 2025 by rpki-client