Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: TePU0hEgxznlrkAW9PG3ahpx8qUJOixW4OQ61oa8bPM=
Subject key identifier: E3:EE:03:91:36:ED:7D:9B:23:23:3B:07:78:3F:FD:25:73:7E:F9:0D
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 0194BCAA0A36B8041843E3944F4457FB11E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0C90
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: a3nnsRK5eRtt00Ghof4YUAiXjQu53L2qz6X/2QqUI9Q=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:36:b8:04:18:43:e3:94:4f:44:57:fb:11:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=e3ee039136ed7d9b23233b07783ffd25737ef90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:e8:80:9a:87:ae:c7:29:79:d9:37:f0:e6:
3d:95:56:24:06:48:a3:a7:fc:2f:df:c4:ad:e4:39:
b1:92:cf:ed:ea:e0:39:9c:01:5c:72:d4:6b:34:ae:
57:cf:10:27:d4:43:7f:39:67:a5:13:cb:d7:cf:1f:
95:75:ca:f1:e0:b7:89:4d:cc:5d:0a:be:af:4c:80:
23:60:a3:1d:d5:3a:09:65:80:ad:69:47:72:94:39:
59:98:6e:5f:8f:9f:e8:51:94:08:19:9e:03:47:63:
18:6a:67:9d:06:b1:da:db:41:2b:20:a5:df:63:7c:
83:f5:d2:12:d9:10:13:33:d4:9b:b9:97:96:fe:5c:
1c:64:5f:73:a5:72:12:c3:77:d8:44:62:8e:13:85:
75:cb:0d:77:72:9a:bb:ad:cf:b3:f4:b8:ef:a5:c5:
7d:29:e8:be:d6:86:b9:14:0d:6e:bb:b8:e2:1e:79:
06:b7:33:b2:a5:31:35:80:a8:0f:e2:28:44:2d:bd:
e3:96:7c:23:bb:da:4b:c1:6b:e4:f5:9d:29:67:c4:
14:a3:3b:0e:89:dd:2b:23:c0:8c:ba:d7:8a:be:1e:
73:5f:59:59:10:fc:98:9b:12:61:a6:45:be:a3:31:
6c:2f:e5:d1:1c:40:ff:9e:4d:74:5d:68:68:e2:f2:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:03:91:36:ED:7D:9B:23:23:3B:07:78:3F:FD:25:73:7E:F9:0D
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a9:7f:57:60:3d:a7:eb:ff:8a:d8:55:39:20:15:97:68:ce:
f5:e9:4c:5a:a9:b1:4e:2b:4a:89:bb:fc:84:70:23:ca:8c:87:
27:bd:56:66:0c:10:10:ce:e5:74:55:e0:47:ca:61:a2:e9:92:
cd:ad:8b:3f:66:33:77:09:30:a9:25:c4:be:df:fe:9a:b2:f2:
1e:f3:70:d3:16:91:6d:31:38:87:ef:35:c7:be:3c:e1:d5:11:
00:3c:d3:72:8a:1c:22:1d:f5:88:87:34:55:9e:b8:3c:37:5b:
69:c4:c4:23:d8:40:39:1b:85:be:cf:55:2e:23:ee:1e:d1:0b:
d9:05:db:92:75:e1:54:1f:cf:06:4d:a9:a3:23:80:49:b4:94:
12:18:68:24:fe:a3:69:02:3b:b9:bf:52:fa:f5:3d:b4:d2:bb:
37:d0:8b:58:dd:b8:49:ea:1f:c8:c2:31:bd:7a:92:a8:41:0c:
db:b2:e6:8a:34:03:05:e8:9f:e0:f1:ad:49:2e:9b:22:30:76:
36:e9:f7:4f:24:44:b9:22:83:01:90:5a:e5:a8:a1:e9:ba:2e:
9f:d0:4f:7f:fe:4d:d4:2b:f4:f0:26:f3:f6:73:57:0e:40:2c:
4c:56:8f:db:d1:da:0b:1d:f0:08:7c:87:84:c0:02:eb:34:a3:
5b:06:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:26 2025 by rpki-client