Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: +qccsAS6Z9B6Ak+HlSFEK568H2lYgG7TmJ7n4IypXgU=
Subject key identifier: A7:6D:58:F0:99:FC:D5:FA:5F:C4:BA:2D:0B:7E:D8:44:DC:FB:18:B1
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0194BD8562CA79235AD044090211FF11B5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: dfuiNWcVCnrIvnAIM4YNSOmW8qu7nNt8VULyLZHsVTo=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:ca:79:23:5a:d0:44:09:02:11:ff:11:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=a76d58f099fcd5fa5fc4ba2d0b7ed844dcfb18b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:96:17:23:12:83:b2:af:50:dd:c1:73:89:
57:d5:18:0f:c9:e6:ef:f0:c3:a4:f1:ec:56:5f:d2:
0e:ab:b5:02:f3:ca:da:55:22:95:b0:5b:d2:54:7d:
47:98:31:48:61:9c:ac:fd:06:ff:47:ad:cb:b4:df:
75:fd:e9:12:cb:b9:72:f0:d2:3d:8c:18:4c:f4:1d:
85:7e:80:44:1f:52:d2:51:5a:a2:00:99:7e:b3:33:
e7:42:61:f2:4a:2a:0d:8b:a3:dc:0a:a8:0d:d6:a6:
b3:48:2d:30:39:95:bf:36:77:3e:af:e5:c4:9e:66:
89:a6:3c:8f:db:15:c9:5c:dc:26:66:82:3b:eb:6c:
0a:3d:bf:d8:5c:f9:02:2f:86:d0:96:a4:a3:18:b6:
46:be:17:1d:c9:fa:b5:bb:d4:bf:cc:6b:22:21:8a:
59:44:ee:0f:1f:a1:b1:cc:f6:3c:a7:ba:02:19:df:
79:e9:5d:b4:03:9c:0d:a1:c3:9b:da:04:c7:76:5f:
5c:28:18:24:e6:63:a3:63:0e:1f:1b:9e:cd:0d:05:
8f:16:67:31:8a:16:6e:00:a0:00:a3:45:be:e6:82:
4f:dd:a6:c6:19:2b:cb:cf:cb:4d:e6:fd:9f:62:d5:
57:a2:0b:68:9f:cf:7c:19:e2:14:c8:fb:32:bf:19:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:58:F0:99:FC:D5:FA:5F:C4:BA:2D:0B:7E:D8:44:DC:FB:18:B1
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:f6:c5:0a:21:37:cc:d9:b9:0f:97:b5:64:59:99:9d:0c:
79:a9:7c:33:a8:98:64:b8:36:d6:9f:c5:be:6e:84:90:4b:b9:
18:73:0d:4d:8a:6a:6a:3f:e3:3e:37:ac:38:75:c6:ac:93:7a:
b7:92:50:1e:91:2d:a4:3d:ef:c3:be:8a:13:bd:3b:4a:5a:33:
df:98:3d:a9:50:1b:ae:21:2d:ba:a2:97:f8:a1:2b:2b:47:f2:
bf:69:39:1a:7f:96:2f:ec:ca:35:c4:98:f6:95:14:4b:b9:2b:
3a:54:57:91:7b:50:a6:ca:6b:a3:75:12:60:2e:79:15:44:cb:
0f:23:c5:44:d5:56:b3:08:55:4c:f9:6d:fd:87:b5:c1:8d:db:
0d:96:e1:7f:88:ce:31:76:f7:05:f7:74:fc:7f:28:cd:03:2c:
17:46:da:33:50:32:88:ce:e0:27:93:c0:49:e5:aa:be:b8:84:
7d:56:ae:d0:3b:83:f7:2c:be:94:bd:53:19:55:93:8d:41:1d:
76:cb:74:2b:21:26:a1:b7:53:68:78:87:b9:77:19:9c:54:22:
9a:80:e1:80:42:2b:0c:65:0e:5c:4a:92:14:df:0f:dc:ec:a5:
69:ee:dc:34:b9:18:66:4d:cd:68:d1:62:fa:56:3d:be:e9:b7:
ef:ac:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:23 2025 by rpki-client