Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: i0IKUze3NI76s5NANN/1Sc6cF9CNaZ6f+sYd6irPZzY=
Subject key identifier: C1:6C:E0:B1:E4:13:18:9F:E5:2C:51:B3:60:57:D3:E4:61:7F:65:A8
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0194BC7314BB1893C8672E27959C411DF699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: gnw+f3WSnJf2+a5BbUy3PT28ZZ7Hu1X3Nul5nURyBE8=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:bb:18:93:c8:67:2e:27:95:9c:41:1d:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=c16ce0b1e413189fe52c51b36057d3e4617f65a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:60:f9:17:46:76:76:ac:b5:ab:82:c2:bc:
b9:c5:ae:f3:79:0b:fa:01:3d:17:43:18:12:a2:b8:
da:f4:2c:49:51:06:ec:a6:9f:4b:f5:4d:6f:87:dc:
88:58:c1:ef:6b:ee:25:de:a6:ad:07:d0:22:3f:a5:
5d:e1:46:93:6e:f7:8d:fa:f0:11:51:06:42:f3:dc:
9b:fa:4d:fd:35:7e:c9:02:25:93:b3:02:59:3e:56:
29:3e:6f:00:b9:9f:3b:b4:8c:84:a8:91:05:38:fe:
3f:8f:a6:f2:1d:ed:84:49:17:35:06:f6:da:22:19:
da:ce:41:79:33:aa:58:ff:ff:b9:9e:0e:f4:41:a9:
91:d2:ae:ae:93:e2:c1:ce:25:77:d8:cf:d8:b8:2d:
17:e1:1e:6b:63:89:a7:fe:9a:d9:b0:65:9c:f7:87:
1b:e1:b0:52:ae:1e:af:ea:31:b8:d4:9d:08:85:5b:
c0:4a:ce:35:46:77:71:99:03:b3:c7:a5:8b:16:72:
60:32:af:b7:3f:cd:78:27:76:73:e1:74:f9:9a:fd:
fc:bf:8c:21:2b:a7:9b:49:b2:b0:d4:63:1a:44:d2:
9c:0d:06:af:e1:04:4b:4c:c6:37:58:34:b2:07:39:
ce:37:d4:34:2f:d2:5d:ce:e5:4c:a9:4a:3a:43:bb:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:E0:B1:E4:13:18:9F:E5:2C:51:B3:60:57:D3:E4:61:7F:65:A8
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d9:5e:ac:f7:cc:ca:2f:8b:62:3d:75:cf:43:a1:b6:94:1f:
89:d7:06:b0:b5:5a:8e:26:d8:d6:38:af:38:59:a2:6e:e8:58:
9d:5e:60:c4:3a:a6:29:72:eb:1c:67:bc:ad:e9:94:53:90:de:
7d:0a:59:9d:19:dc:1e:30:fa:8a:fb:1e:a9:e4:68:a0:0e:e4:
f4:71:fe:cf:53:31:08:c1:bf:6f:dd:19:ad:e1:c5:6c:9b:52:
97:73:60:9b:01:40:8c:1d:ae:47:ea:5b:b5:b7:fd:34:6c:97:
61:2e:08:d0:36:1f:ba:db:e5:44:55:59:13:19:c8:dc:51:c6:
6c:c9:50:5d:90:62:8c:35:d6:e9:21:8c:71:0b:a8:46:20:78:
13:3d:6e:8c:70:57:15:2d:ab:0a:8f:a5:9e:68:94:3f:74:09:
1b:fe:31:c0:a9:54:7b:a4:ee:4b:74:c1:50:8e:1c:fa:d1:60:
04:21:71:d1:5e:b2:99:17:46:41:42:36:61:f8:55:f1:df:17:
4c:77:29:2a:39:a1:45:ea:5b:22:6f:12:11:83:d6:11:2f:55:
2c:66:14:ae:e5:39:a1:af:3d:07:16:cc:36:46:c0:1d:2b:cc:
1b:15:a9:e4:39:40:9b:13:10:d7:6d:c8:8c:ae:87:a4:1f:d6:
22:f6:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client