Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: Ip3Ha2P9wxnEcvr7H1us9RuOkJCvjbhfXtRO777lxe0=
Subject key identifier: C9:43:32:D7:D4:D5:2F:9C:CE:DB:42:8F:F3:25:C6:82:58:AF:98:B1
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 0194BC73320992F008FA47910EA3DA971F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 9mVgruAoMeV7kKUifHTHuFoRcd6wTlG7MOICgkOTxB8=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:32:09:92:f0:08:fa:47:91:0e:a3:da:97:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=c94332d7d4d52f9ccedb428ff325c68258af98b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:c4:f0:09:ec:65:06:97:ed:0a:64:71:42:
c1:39:c9:f3:fb:b7:0d:a7:8a:35:c4:26:49:af:9a:
d8:80:91:86:57:20:4e:89:d8:42:46:a9:44:18:b0:
df:9b:b1:02:bd:38:93:43:6d:35:be:b8:f6:54:c1:
53:cd:8b:ad:4e:43:1b:fc:3e:b6:fc:a2:f0:be:10:
4c:1b:67:f5:64:3d:14:c6:f3:fa:e4:3f:16:8f:19:
d0:65:12:64:fc:b5:c7:6e:3d:8a:eb:98:21:30:de:
5a:6e:45:92:49:c7:a4:9e:3b:3f:2b:3c:b0:e1:19:
80:96:dd:e2:97:d9:e1:c1:11:05:9b:f0:c8:ff:b1:
0e:a5:55:99:30:a5:65:92:cc:87:42:15:3d:b8:43:
6f:3d:3b:6f:ed:84:eb:44:38:b8:b9:64:80:7a:b8:
75:a5:2c:59:67:92:6e:65:86:71:d0:6a:8f:70:5f:
da:39:0e:3b:75:bc:73:21:45:1b:1b:0a:07:eb:ff:
28:e9:2e:a4:43:1e:aa:6b:0a:9c:a3:89:03:36:0b:
70:1f:ab:68:41:09:7a:ef:6e:da:46:84:e6:b2:96:
79:0c:f6:a9:97:7d:48:9d:b6:e1:8e:86:ff:e8:0c:
b0:15:cd:dc:f0:5b:d2:0d:fe:16:f5:29:e7:76:95:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:32:D7:D4:D5:2F:9C:CE:DB:42:8F:F3:25:C6:82:58:AF:98:B1
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:62:ae:8b:60:2a:2f:6a:a9:dc:51:f1:5e:bf:41:63:ee:
b4:b0:a9:38:00:6d:fe:49:79:ef:79:dd:d5:14:af:02:ef:43:
08:9c:41:0a:47:66:0f:45:e3:a0:83:e0:73:63:77:a9:b7:e8:
6c:8f:f3:65:9a:82:27:e0:a6:9f:ef:36:38:bd:4f:7e:e9:13:
f9:06:56:93:65:cd:93:6d:f4:7d:5f:eb:5c:7c:04:e6:91:7c:
86:bb:4c:19:a6:b2:4c:eb:48:ee:34:ee:f2:30:c5:a6:0e:d4:
dd:d2:93:c8:ae:6d:c6:62:63:f2:5d:b8:35:b9:8c:47:60:9a:
c5:1d:54:20:2b:9e:a0:de:63:e7:0d:dc:f1:95:76:b4:6f:02:
00:9b:a0:36:96:e0:e3:d6:75:b6:a8:01:a6:24:98:c3:65:a0:
5b:ed:d4:93:9f:5f:94:72:77:6b:51:0b:1f:39:ff:38:01:14:
63:d7:04:38:a9:de:ef:3e:73:b3:87:fb:8e:24:14:40:7d:99:
78:fb:8c:be:bb:78:f5:c1:38:56:ba:d8:21:06:fe:cf:02:8a:
53:96:d8:5c:3e:c2:89:e6:ac:f1:cd:8a:d5:a9:97:0f:97:13:
4e:82:3d:7a:b3:19:79:3d:34:58:93:03:bb:a2:ef:94:3a:7c:
8d:ec:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:38 2025 by rpki-client