Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier: 6UqEVmn+dVETvG1SKiY+4uyTnbdSWV0QWBZ4SMHPDEc=
Subject key identifier: 20:0E:41:EC:71:EA:C6:53:F0:2E:E8:DE:0A:36:17:B5:2C:E4:3B:3F
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 0194BD4EAFC35964B3B6A9718BB0A187D128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number: 0DC2
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: Ulp4Dt2hl9McwNjFn6F2SCF1UxU6fCb7DCBtTVPx8os=)
2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:c3:59:64:b3:b6:a9:71:8b:b0:a1:87:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=200e41ec71eac653f02ee8de0a3617b52ce43b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:37:64:06:2c:7b:cb:89:2b:c6:4f:27:24:
b8:5e:b2:b5:0d:55:fe:9d:c8:33:54:ff:62:51:b3:
80:51:54:8f:9c:aa:ad:6e:2b:64:b3:12:b0:08:cf:
02:3e:8f:31:e8:28:9d:5f:04:89:e9:e4:25:f7:66:
b8:52:72:45:79:59:4f:21:a4:8c:cd:69:35:77:f2:
f1:c5:33:ae:36:c2:30:f8:19:a4:fc:af:53:2b:fc:
b8:3d:93:d3:15:a0:1e:86:2a:da:1e:93:e1:e3:83:
81:9e:c3:c0:bc:d8:52:88:72:4d:f9:87:81:4d:0a:
ba:63:a9:11:8c:c5:dc:07:6d:eb:8b:78:db:d6:f7:
d0:73:e4:ab:90:25:ba:b3:06:e3:d8:c9:86:84:ca:
c1:e9:f2:75:30:7b:38:ca:d6:53:50:0c:3b:e4:35:
28:06:3f:6f:a1:05:3c:cb:32:e3:0c:7f:c6:74:7b:
7a:f6:30:a2:9a:33:42:76:d8:4d:fe:ed:61:47:4b:
03:7a:80:dc:42:d5:9e:a6:fb:c9:60:06:ac:02:b6:
c1:f3:d2:79:aa:88:37:3f:91:ea:03:ab:25:7f:02:
2d:a2:65:62:dd:12:c6:9a:35:19:dd:e5:ff:0a:02:
77:94:ff:b6:76:db:27:01:a3:e4:d1:e3:23:05:fd:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:41:EC:71:EA:C6:53:F0:2E:E8:DE:0A:36:17:B5:2C:E4:3B:3F
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:39:0a:71:9e:05:5c:0a:8c:42:3a:73:f3:49:e1:98:a2:51:
d4:da:b5:b6:89:c3:ca:a1:0a:2b:7c:64:75:af:34:cc:cf:f1:
1d:ca:ee:8a:ea:95:26:8c:b0:c3:8f:32:84:82:60:cf:f0:d7:
ac:7e:0e:4e:f4:90:ef:5b:cb:2b:a8:f4:d8:3b:4f:28:27:65:
88:68:09:90:e7:30:0c:a2:0e:cb:e5:af:72:dc:55:d1:ad:80:
ce:ab:da:38:50:75:94:d0:19:1c:b3:cf:e2:85:0c:97:63:8f:
36:c9:60:85:46:ff:32:d7:62:c7:b1:d9:60:30:d1:34:97:76:
38:46:b9:ab:c8:d7:8b:07:45:6d:d0:bf:65:15:49:1c:f3:5c:
1e:b4:f9:e4:ee:92:c6:12:0c:3b:32:d4:21:a0:e8:4f:68:f2:
8c:17:8a:95:54:1a:9c:2e:92:1a:68:e7:0e:ad:a2:e1:62:c7:
8e:39:5b:fe:0f:90:4c:3f:35:74:74:7f:7b:a1:70:dd:e9:e1:
77:67:32:d5:4a:8d:38:03:40:33:31:a1:7c:dc:52:55:d5:c7:
e0:9f:64:10:c3:73:7a:05:d4:6d:a1:0c:10:7e:1a:d0:5c:90:
a7:5a:84:ac:bd:6a:3a:f3:a2:a3:cd:05:bb:d8:0a:e6:3d:9a:
3e:96:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:18 2025 by rpki-client