Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: YXDacKm076zf3oKgN9nzxLHAfrUfp1fCZqPrii1Ga+w=
Subject key identifier: CF:23:2D:8D:4E:91:A4:42:AE:72:6B:3A:41:6F:E4:BD:57:46:B6:25
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0194BD174A89D35FF5833FC1D3F3CE6BEEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 02DF
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 3-sSJoZSPekx4Aa1OQXl_rwnCgE.roa (hash: pUzH+yyfi1mC0E9a+KrNmmC+qEMzcBTviDyMsSj8qaU=)
2: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: jJ94mK5QDvTGElnA1Bm3dKvzXEKD5IQh4CxW8EfchdY=)
3: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4a:89:d3:5f:f5:83:3f:c1:d3:f3:ce:6b:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=cf232d8d4e91a442ae726b3a416fe4bd5746b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:e4:11:c0:a4:d1:99:ff:1e:82:a2:ee:97:
cc:25:3b:f0:a7:a1:cb:3f:54:07:ad:2c:f2:3f:fa:
da:c3:9e:49:29:4e:44:74:52:10:ef:ce:10:f5:89:
5d:b8:ab:6c:5e:e3:8d:63:d5:c5:b7:64:5d:de:34:
4a:bc:92:09:dd:de:04:f9:79:fc:25:d7:66:2c:ce:
8e:42:43:8f:3d:9c:2c:2d:51:2b:67:09:dc:b6:4e:
c1:b4:46:d9:b5:ca:56:1d:5c:32:7c:03:f4:e2:2b:
d8:ce:ae:1b:94:ce:7b:da:88:4b:87:1d:2d:af:e0:
43:f3:27:3b:71:5c:a2:c9:0d:e4:e7:a9:0b:da:59:
e2:ba:c1:28:9d:2f:e9:0d:e5:06:6e:80:0f:3d:e6:
e9:b0:9c:d9:e2:26:83:13:d5:ba:e5:26:c9:4d:52:
3d:d2:33:3c:19:c6:bb:ed:87:42:26:f8:be:fe:7b:
73:75:80:b8:c8:f3:d9:da:25:a4:0e:13:e6:07:9f:
95:0d:fa:fc:7c:73:c9:9e:50:c7:7b:f9:f9:07:1b:
1f:75:d4:cf:40:0d:d6:c8:8e:d3:39:27:92:02:8b:
4e:13:b5:1f:18:4e:1f:f3:95:dd:4c:18:6b:7a:05:
9a:ad:3d:e6:19:2f:c7:5a:83:6f:6b:d5:a6:31:88:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:2D:8D:4E:91:A4:42:AE:72:6B:3A:41:6F:E4:BD:57:46:B6:25
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a4:fd:2c:b4:94:cc:49:36:4c:b8:81:5f:70:e1:0f:56:cc:
71:51:60:02:b4:4e:17:85:16:d1:9d:df:f9:14:27:f8:60:80:
e8:4e:21:de:08:5c:85:5e:ad:b6:11:1e:95:77:8e:c1:74:50:
1c:4b:28:b8:96:1b:69:e3:59:8d:86:1a:c6:5c:47:89:3d:2a:
49:97:7e:e4:b6:81:00:6b:ef:21:d7:32:d3:07:f2:12:e0:33:
17:72:e8:e4:ee:f2:8e:cf:95:16:e3:d6:1f:59:d9:89:f5:c4:
d2:4d:db:22:93:c7:68:71:fd:d7:d7:32:8a:e2:48:40:a8:2c:
af:26:04:b7:82:5a:df:57:a9:cb:89:2a:f4:93:28:20:be:01:
03:f1:6d:6d:a1:cf:31:75:98:2e:0b:7f:42:83:38:c7:02:b6:
74:f7:48:94:03:56:db:97:3f:60:d1:8e:97:82:4f:df:2c:d4:
40:a1:f4:05:b8:18:f7:6c:b4:d5:55:af:0f:7b:7d:49:d1:da:
fe:09:ec:76:6f:7a:e9:6f:f3:0f:0b:0c:61:1b:7a:a0:20:97:
3f:ee:a0:e4:56:08:28:e6:58:2f:9b:12:35:f7:9c:91:49:c3:
70:dd:e9:9e:ea:89:4b:8a:93:63:e8:29:1a:4b:47:45:dd:98:
a5:62:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:50 2025 by rpki-client