Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier: bQkuv3t8Kz1Axf0yveGmfVsV6i7H1T6bctBFTzKE/2A=
Subject key identifier: A7:44:CE:6A:1E:68:B8:DD:56:41:3D:9F:5F:85:0F:AB:23:95:F2:86
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial: 0194BBCDBC21035A6CE65F262B44FCE459FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number: 0CEA
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: Nu8SamSalilP1LglKhnLQUoiLyQ5DMOZVMSoVi78PMs=)
2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bc:21:03:5a:6c:e6:5f:26:2b:44:fc:e4:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=a744ce6a1e68b8dd56413d9f5f850fab2395f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:6d:32:72:fb:34:69:45:9f:dc:b4:53:0d:
b8:b8:cd:0d:f6:8c:1d:67:cb:82:5b:2e:c9:cc:9a:
d7:dd:bb:84:31:33:33:38:80:ce:32:1d:c0:03:48:
70:d8:dd:b3:86:3c:5b:1e:49:12:5a:8c:65:3b:26:
bf:9d:b7:fb:ce:05:73:52:da:0a:60:64:bd:d5:78:
89:7b:b7:31:b7:86:a3:44:56:ea:e2:c3:5e:51:61:
09:ef:30:a6:99:e4:dd:25:85:62:73:37:e2:f0:a3:
48:63:1c:3b:69:7e:b4:a6:7c:98:8f:27:77:68:45:
22:78:27:01:43:70:e0:7e:f6:90:6a:db:e8:5a:51:
c3:59:47:7b:d1:ef:3b:3e:18:ac:f1:d0:a5:53:83:
50:17:58:6e:4d:c4:f3:b5:fb:25:14:fc:32:f3:ac:
b3:25:df:8c:f7:56:51:c2:d9:c7:5d:12:9d:f0:32:
c6:4f:8f:9e:f9:07:a7:b6:26:4c:82:47:ed:e2:ba:
bb:aa:37:fb:2a:5c:4d:6d:a7:fc:c8:a1:a7:83:56:
6d:5a:62:ed:bc:60:ce:a2:5f:82:97:5d:d4:10:e6:
b1:81:03:c7:79:72:14:7e:16:8a:99:ca:d6:5b:94:
ba:32:a0:c1:21:03:f8:5b:dd:22:57:52:5a:33:24:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:CE:6A:1E:68:B8:DD:56:41:3D:9F:5F:85:0F:AB:23:95:F2:86
X509v3 Authority Key Identifier:
keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d2:45:0a:b3:c0:4e:ba:2d:2c:b4:50:50:13:fd:45:cd:96:
bb:17:95:a4:0d:4a:d0:10:9d:0a:b2:0c:1d:07:11:35:96:3e:
aa:b8:74:cd:30:fc:53:50:ec:f2:39:64:58:e6:63:09:27:82:
64:5b:3d:57:8b:4a:60:f0:55:45:6c:cf:44:f7:c5:45:64:85:
4a:77:e4:7d:95:3b:14:1f:67:c9:46:97:23:42:3e:7b:46:d6:
0e:31:b9:ce:b7:0c:40:c7:02:5d:cb:0b:05:ed:7b:6a:83:3a:
94:2d:f5:0f:0c:74:69:48:36:48:44:bd:48:eb:1c:44:b7:1a:
c4:9b:fc:84:73:43:2f:65:1b:1f:6e:d5:f2:27:30:cd:a1:64:
9b:ce:97:5e:c7:8e:98:db:e4:05:9d:6f:3c:1a:84:b3:6e:04:
e7:d1:bd:04:44:cf:dc:00:b8:4d:63:cd:29:58:35:90:41:97:
34:56:0a:34:5f:98:6f:40:95:f7:cd:1a:12:2d:07:4e:38:fc:
9b:c3:4c:06:86:1e:1c:cd:c0:29:c1:03:8d:06:57:ea:6f:56:
58:63:2c:e1:40:6f:75:e0:94:52:64:0b:1f:cc:8d:db:35:8b:
19:00:36:3c:cf:0f:66:22:a9:40:b3:bb:2b:3f:39:84:e6:4c:
5e:91:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:51:53 2025 by rpki-client