Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: R/cDfOm60wGu6OeCKd1I5HqXGhX4Tb7yqG6SD8cN+o8=
Subject key identifier: BF:67:FA:4E:43:5F:6E:81:59:56:3E:AA:23:85:90:AA:99:6F:53:D1
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 0194BBCE64414F8488C3519722CF5E6A8211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: vP5Gyk69SpQGypzYPC6EWvJbs2smh2130YbH239YDRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:41:4f:84:88:c3:51:97:22:cf:5e:6a:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=bf67fa4e435f6e8159563eaa238590aa996f53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:0d:48:e2:23:4d:5b:13:fd:8d:5d:74:73:
25:60:9d:ad:61:1d:d3:e7:de:4f:64:d7:ed:e5:f0:
a6:8f:99:85:d4:97:89:e4:82:4c:3d:b7:b2:4b:62:
8f:76:1d:20:db:7b:46:77:d5:55:e5:1e:45:62:64:
07:b4:e0:eb:c8:14:1e:c8:04:8e:15:0d:b9:09:80:
58:af:fb:4e:53:7b:2e:7c:4a:1d:2b:52:56:38:56:
56:55:3c:89:ff:f1:8e:55:cc:14:f4:4f:a9:46:11:
4b:14:c8:0a:6f:26:5f:d5:95:7d:3d:0c:fb:90:7d:
05:c0:a2:21:bb:0e:89:d8:9a:6b:65:46:78:59:cf:
3d:58:20:36:26:8d:8d:ce:a2:c3:b4:5e:8b:06:76:
62:27:73:80:b3:08:b8:78:fd:ca:b9:d8:ed:6d:e4:
33:62:9c:45:15:89:5c:a4:eb:4e:ae:e8:a1:50:ed:
2f:02:35:5e:00:23:cc:6d:60:ab:3c:b1:4a:37:7a:
06:b9:20:03:da:a1:ee:e1:0f:76:6c:28:01:a1:5b:
6e:65:b8:0b:66:fc:42:e2:63:e0:06:b1:d7:49:0c:
ae:0f:a0:4f:67:f2:cf:4b:d3:00:aa:a0:7d:b0:55:
ad:7e:5a:79:7d:f6:0d:c4:16:00:0c:1f:0f:ff:10:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:FA:4E:43:5F:6E:81:59:56:3E:AA:23:85:90:AA:99:6F:53:D1
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:49:00:5b:4a:fc:e4:b4:4d:c3:89:6d:3f:d8:ce:03:97:
0f:cb:78:0b:99:70:6a:a9:17:39:f8:48:4f:18:de:80:4b:3b:
90:56:22:db:2d:22:bb:25:9c:56:1d:22:37:59:7e:07:e2:3b:
4e:f0:c8:33:fa:cb:96:40:ae:11:50:3c:f1:14:60:d8:e2:92:
23:3f:36:f5:38:26:85:96:63:9d:09:2b:e2:b7:78:19:bc:d2:
d5:ed:4f:ac:45:47:ee:e5:80:7b:f0:bc:dd:f5:bc:b5:d7:5b:
cc:1a:6e:fa:ba:32:fd:30:2c:95:5f:77:98:cd:77:6e:68:c1:
27:44:00:44:d0:b6:27:75:06:ff:ae:f6:63:56:ec:10:8e:7f:
b4:9c:8f:f2:e4:ce:b8:26:1b:ed:ee:d4:21:00:5b:21:8d:d1:
1f:9e:21:ae:4b:83:df:a9:d8:a4:02:27:03:04:dd:89:ce:82:
ea:87:f2:03:02:ce:c9:5c:dc:e2:cc:62:31:0c:fd:96:2a:70:
d1:99:45:02:7d:42:da:8b:17:a9:58:1c:73:62:31:bd:57:16:
6d:48:a5:4b:71:6a:fd:2d:93:be:c2:24:b2:fc:a6:8b:86:6b:
c8:a2:6f:8d:50:52:6b:57:2f:5d:b2:80:eb:e4:cb:9c:b1:cd:
b7:b3:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client