Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: TnymzRbPpo39RaDrdLSeHelCJYeNwyltn0cMLb+iaZU=
Subject key identifier: 01:5E:7B:EC:8C:FA:94:65:F9:6B:AD:05:C8:F8:47:5E:3F:21:12:72
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0194BC052245BFB5704543C91B9F6924D580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: Xt531QVBk68w8QmowKJUYMFR7GGYJ6Y/3U63b7CsuEE=)
2: h9ZHm6iijOLE1hURiKvmNTt6ch8.roa (hash: H21hU2yBrXT1TzHXxYlexjgXRRrD66fdVGibNF1cS04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:45:bf:b5:70:45:43:c9:1b:9f:69:24:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=015e7bec8cfa9465f96bad05c8f8475e3f211272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:64:53:bb:1e:0c:a2:5b:1e:ac:34:f5:c5:
cb:08:91:4e:26:9d:a7:f1:d5:42:a0:af:95:fa:e9:
7c:01:0f:ee:b6:18:a2:7e:1c:42:7c:ea:23:02:5e:
2c:82:f0:7e:46:05:5d:e2:71:1b:44:5c:e1:13:52:
dc:37:21:0d:04:15:20:4b:25:8a:8e:6f:3f:50:be:
0e:28:6b:8b:17:d2:47:db:e7:07:24:65:ca:ec:ec:
24:9d:c2:01:51:a0:5a:b3:4f:a1:68:d2:32:fa:c6:
44:9e:63:93:cd:fa:c1:23:00:24:88:d1:99:98:c2:
38:e2:90:24:c4:8c:1d:db:b2:2f:13:fa:24:62:25:
f6:bb:1a:d3:c8:f6:91:62:fb:d4:f3:61:fb:96:03:
a7:3e:a1:18:c8:95:f1:1d:88:bc:e5:63:1e:f3:98:
e4:d9:8d:c5:e1:3a:c2:d3:b5:0e:db:51:7e:09:10:
c4:d5:7f:44:9c:9e:46:28:2f:67:88:84:10:b2:1b:
65:47:cd:7a:00:39:98:28:7c:23:2d:51:f3:5b:1a:
02:f7:10:6a:c8:4f:71:0a:ed:cd:84:32:75:1f:65:
4f:21:25:7f:64:15:6a:25:c8:d3:c9:62:4d:ed:33:
fd:30:f4:67:ca:33:7e:4d:a8:04:86:f0:85:10:90:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:7B:EC:8C:FA:94:65:F9:6B:AD:05:C8:F8:47:5E:3F:21:12:72
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f4:86:16:5e:89:11:03:6e:5d:bb:0d:1d:60:11:1a:47:ef:
9c:1b:54:7a:65:82:ea:17:2a:cb:ca:43:33:d1:2b:54:3b:4c:
e7:f3:60:41:4c:e1:68:76:c7:8f:9b:14:35:71:f0:5a:4d:97:
13:63:15:34:7c:21:79:41:1d:4d:57:b7:7b:21:7f:62:45:f4:
1c:5d:bf:ce:37:6a:57:54:0f:7e:15:75:e1:88:0b:49:43:8a:
ff:ba:d8:1a:60:df:96:73:ef:cf:04:d4:67:c0:a7:43:0b:c1:
84:86:cf:46:ee:a8:8e:5a:7a:35:e2:db:97:c6:4e:de:d6:03:
b5:0d:bd:c5:d1:9e:67:2d:81:c3:94:65:3e:90:52:88:2f:ac:
0b:67:9b:ed:f7:0d:4a:84:4d:2b:40:b9:82:8c:16:13:29:6a:
34:ed:e6:4e:c2:a6:8c:9f:31:3c:9c:92:27:3e:9b:cd:9a:c4:
15:69:7a:31:61:57:d1:b3:40:16:8f:fa:9b:fb:a4:47:57:e8:
8d:3c:2c:15:7e:2f:88:c1:ae:09:1a:f0:e2:e1:b9:a1:e5:c9:
f1:36:31:83:5c:58:f4:0e:86:b0:f7:ce:1f:f4:1a:fd:ab:f7:
37:4f:59:59:a1:e2:63:52:2d:f8:91:74:9a:e8:f4:2d:75:24:
34:43:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:58 2025 by rpki-client