Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: xnuHU5bu4rZ5IKpeiV/AweYbNAnv5CCtjyGbMWi70RM=
Subject key identifier: A1:F6:8C:10:1E:E8:33:65:B8:48:01:29:70:40:C9:83:D3:A9:34:43
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 0194BBCDD0F1AC1A674BA4681CDC246970B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: 3jcS6LrOyOmAyy3ObM27cON/AN/ydkrQfuLUNtqRfNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:f1:ac:1a:67:4b:a4:68:1c:dc:24:69:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=a1f68c101ee83365b84801297040c983d3a93443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:a4:23:80:6c:c2:3a:3b:5a:04:0f:59:00:
a4:3f:16:73:85:00:9d:84:73:8b:b8:f5:b3:2b:e2:
f1:98:17:ba:7e:4a:eb:1b:4d:fb:81:80:f4:1d:63:
86:58:d8:90:39:11:e7:e8:c2:29:83:58:6c:53:fe:
a7:1d:36:bc:41:67:4d:ef:e6:80:6f:9e:8c:02:25:
8f:8b:76:89:d9:92:e4:8e:55:b7:5e:6e:a1:eb:9a:
3a:3f:c7:86:ab:a2:26:43:4b:1b:77:ee:4f:66:b5:
33:98:46:a5:ce:ba:22:be:61:b1:b6:f5:21:a7:f4:
ad:ea:ab:ad:b9:11:35:37:b0:31:f9:42:5c:f2:1e:
83:4e:23:ec:fd:bc:0b:44:c4:4c:1d:5c:1f:c8:ed:
59:7a:ed:73:81:a5:85:45:58:d3:db:c9:6c:c6:22:
4d:ce:49:92:54:44:d0:5a:7b:8a:07:01:31:3c:20:
b1:02:ca:51:37:1e:9a:e7:1f:54:f1:77:be:b7:eb:
65:44:6d:77:98:d8:f0:e7:f1:0f:81:d9:0c:7f:6e:
eb:b7:c9:2c:ec:1b:36:39:c9:13:5b:c8:02:76:54:
06:39:36:30:cc:e6:11:5c:b7:e1:42:7c:ad:e0:0c:
5b:8d:b1:2f:b9:6e:e8:f7:cf:10:53:bf:e6:8f:da:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F6:8C:10:1E:E8:33:65:B8:48:01:29:70:40:C9:83:D3:A9:34:43
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:67:25:0e:a0:d2:ef:b9:b2:cb:d6:9e:a4:50:3f:e3:2a:
30:c9:ce:94:97:f6:33:59:81:43:b8:96:d3:36:ac:fd:d1:f9:
56:d9:51:31:4c:67:4c:5d:c6:30:13:59:29:cc:f9:0a:43:3b:
57:03:df:90:34:4d:4e:9c:91:0d:52:1c:81:0a:0a:d3:16:1a:
81:40:60:be:c1:fc:3e:37:ab:9c:6e:47:08:ff:84:fb:e8:34:
ba:95:f0:c4:6d:5b:7e:40:60:e7:9d:38:97:bd:20:18:74:eb:
37:c8:d7:4a:6e:2d:cc:bc:fc:e7:54:65:8b:15:71:5e:c0:04:
10:d2:c4:2c:09:a1:28:1d:a3:19:60:b6:17:7c:a3:85:af:a6:
d0:04:db:c9:d0:e7:73:35:63:fd:e9:6a:5d:9e:20:58:3f:90:
db:aa:7f:7b:22:c6:50:f5:8d:9b:ee:1c:6a:05:f8:6e:d1:38:
cb:c5:b9:5c:7e:7d:f7:5a:f8:f1:20:1a:1b:3c:1e:5a:ae:79:
96:b1:ac:61:66:04:93:e3:4a:19:df:86:76:f6:d0:05:ed:13:
9f:ac:d6:c4:f0:43:45:08:68:36:d0:f1:d8:6d:82:95:3d:e6:
18:21:7b:9c:41:5b:64:0f:be:4b:e1:10:cb:67:85:db:f8:c0:
f7:67:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:31 2025 by rpki-client