Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: sFuq46H3Si8BqDuvLuLiE+lECGtGAr2vkjpWsBLDn70=
Subject key identifier: 1E:EA:E4:70:E6:FA:F6:30:53:EA:7D:14:AE:6B:1C:95:F7:D6:16:4B
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0194BD4EC88C8F3336E1B0B383B9E924E567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 07EC
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: Yu9/2UCnJ/bRylFO0IuHAOvQiW9nVjxrnd4Br334pdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c8:8c:8f:33:36:e1:b0:b3:83:b9:e9:24:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=1eeae470e6faf63053ea7d14ae6b1c95f7d6164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:cd:12:4c:a9:cb:8e:a5:aa:04:9a:06:ce:
a3:d7:15:46:de:b8:e8:e7:ff:d0:42:7b:43:a7:dc:
b3:5d:b7:a5:9d:2a:e7:c0:4d:3a:81:19:3b:86:8f:
f6:5e:ce:d8:04:91:68:97:49:24:2a:47:85:15:91:
1e:a9:db:2f:d7:a4:fc:d7:74:f1:e1:20:ab:6c:00:
62:9b:ce:26:8d:da:18:31:b1:93:6a:c5:d6:ea:3a:
54:39:b0:3a:b4:aa:1d:71:8d:83:bf:01:78:66:7f:
4e:0e:a0:c3:41:72:e5:df:3d:ca:4d:06:d2:09:3b:
aa:69:ee:63:ca:d1:1d:52:c1:35:a6:c6:ef:f1:79:
72:be:f2:f7:bb:6d:fd:c9:24:77:a2:59:58:58:ca:
45:7f:02:ad:62:57:f4:3b:e8:e0:b2:b7:02:ed:dd:
8e:1d:df:ed:fa:a5:f4:46:bf:c6:bc:c2:ad:ec:96:
a1:57:5a:d1:d1:0f:05:62:7a:5a:cd:ea:0d:22:31:
8a:7d:bb:28:de:83:5d:65:66:aa:82:72:6d:24:b9:
7e:5c:38:0a:ad:07:92:00:f1:ab:8e:f0:80:a0:06:
fb:37:1e:9f:62:9b:52:6f:5e:23:33:df:39:76:d0:
d5:e5:1c:ac:0b:13:cb:76:34:5f:3f:71:20:90:21:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:E4:70:E6:FA:F6:30:53:EA:7D:14:AE:6B:1C:95:F7:D6:16:4B
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:99:d1:40:ed:21:19:24:15:96:22:49:ef:db:48:71:ca:
eb:99:e5:1e:7e:48:51:29:ac:bf:f6:de:5d:8e:44:45:25:59:
8a:97:2c:36:21:c0:66:2d:52:80:b4:79:95:54:05:21:10:f5:
bd:6b:c3:04:23:e8:99:d3:8c:29:fd:94:cd:84:ff:25:ed:3c:
f6:38:f0:fe:d2:71:25:13:bf:1d:0e:02:0c:20:26:6a:85:e1:
85:99:df:a2:bf:40:10:2c:5e:1e:04:ed:44:5e:14:75:83:54:
5d:b6:77:14:84:f0:2a:48:20:40:f9:40:12:e0:58:d0:68:b6:
c6:09:3d:f3:9f:c2:cc:3c:86:e9:60:16:68:1e:21:97:3b:5d:
71:d3:da:14:2c:e7:a2:55:d4:e1:fc:81:5b:7a:33:7a:bc:16:
7c:f7:81:73:7f:42:76:31:1a:8e:65:d7:4f:a0:d0:95:43:24:
67:c5:d9:9f:31:17:5f:2c:85:2d:bd:f9:3f:c9:99:c9:d6:4b:
d0:20:2e:af:d9:08:3b:e9:3b:0b:18:59:85:eb:52:24:cf:d5:
3d:d2:4a:38:d2:25:2f:ae:ee:d8:b3:17:67:d4:7b:33:cf:de:
b1:b7:c8:9f:9d:0f:a8:04:0e:01:9d:60:95:e9:7e:38:b5:c8:
fa:b0:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:55 2025 by rpki-client