Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: FjtsLR3Ymoeom4frd26UAInTBxrPMm+fXAemsIXszGA=
Subject key identifier: 80:52:89:A8:10:9A:12:2D:67:76:45:9E:CC:AA:07:19:79:B9:BE:A9
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0194BD4EA58CDB0339CBAB4863182C300144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: Dc1yIIlEj5wx+hNSt0ufDzU1pKGeOd2NkGKbxXiQsLo=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:8c:db:03:39:cb:ab:48:63:18:2c:30:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=805289a8109a122d6776459eccaa071979b9bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:5d:c6:39:a4:91:69:fb:44:35:f3:29:00:
e4:ba:ed:49:c1:18:31:c0:f3:7d:82:d3:25:6e:24:
99:b0:48:19:f1:78:4f:75:92:32:2e:eb:e8:c8:ce:
39:0c:34:9a:78:89:f4:8e:74:60:1d:94:c0:47:58:
79:9f:f2:d4:55:47:77:f6:69:b6:45:61:65:fb:5b:
01:ff:16:ef:67:b3:27:fa:71:dc:f5:e7:ab:0d:69:
cb:3c:3a:e6:69:04:9e:cc:db:be:2c:10:ef:70:22:
ca:81:bd:74:d6:be:26:c9:22:84:d2:57:a5:5a:14:
ab:70:fe:5e:6f:11:f6:40:8b:4a:83:e7:ad:ce:96:
4f:c5:d1:67:2a:b5:b5:9e:5e:75:84:e7:49:17:6d:
e4:f2:81:54:d2:31:27:1b:c5:86:1d:9b:49:39:64:
42:26:ba:cf:16:62:e3:b8:2b:74:7d:01:17:33:ca:
99:48:82:f2:d8:7b:87:b4:47:a6:b6:65:55:ae:57:
22:e3:71:09:88:ab:3b:42:51:c5:31:b6:33:c5:11:
30:d5:9c:4c:3a:99:a5:3a:05:dd:b5:62:60:18:62:
06:bf:50:9f:29:90:02:9e:d1:3f:9a:00:3e:de:0e:
91:75:d8:21:1f:e1:83:23:aa:fe:44:9d:ac:20:01:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:89:A8:10:9A:12:2D:67:76:45:9E:CC:AA:07:19:79:B9:BE:A9
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:97:ce:e1:a1:b8:c0:94:79:e8:01:de:a8:45:ad:3d:01:
71:38:53:8a:5d:78:2a:4a:1e:00:79:c6:ef:00:b5:2a:bc:63:
b7:c3:b8:29:a7:06:fe:27:12:84:91:68:6f:3b:b6:1f:0e:0a:
68:42:97:d4:25:54:a0:82:f8:8c:20:eb:86:e8:86:87:33:36:
f6:b7:2d:fc:8e:7f:a4:56:5e:30:3d:41:49:2b:f2:a9:ad:23:
71:d7:c3:68:11:ad:c8:e0:32:70:cb:f4:e1:48:33:2c:58:37:
07:b6:c4:8a:35:e6:e6:bb:f7:75:45:a5:0d:42:f5:f2:54:98:
53:15:9b:7c:57:a0:21:87:9a:bf:05:13:f3:32:1d:d5:56:f8:
6d:57:4c:2c:7c:fc:9b:60:c6:59:4d:b9:b5:bd:fa:f9:cc:cc:
01:d2:22:67:7c:86:39:6a:5a:c9:95:c1:7d:46:81:4e:b3:12:
f8:5e:31:8b:80:7b:b3:42:01:f5:69:de:ff:e9:3e:29:ed:09:
ad:4b:35:00:5b:81:48:4d:fc:14:2a:a1:a4:cc:be:c7:ac:ec:
c0:47:d5:c8:2d:2b:30:a2:60:af:f1:2b:93:44:3e:05:91:d7:
c3:e9:de:c3:6a:d4:aa:2d:31:1a:00:ba:d3:9d:00:8f:d4:4b:
8a:92:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:40:37 2025 by rpki-client