Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: NpW9omE7wbDY+pQFsKXwl+fgW6Lr+WsvkyetGafXMcY=
Subject key identifier: B0:DB:83:D0:16:6E:5B:92:20:2D:99:95:57:FE:4A:AA:40:CF:8F:AF
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 0194BC3BC26736B5E7E8771A89D60BD44CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: WzUjfciNmedOy5E5PpWvhaHAKiPCupvg9Fv2henGKiU=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:67:36:b5:e7:e8:77:1a:89:d6:0b:d4:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=b0db83d0166e5b92202d999557fe4aaa40cf8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:ed:db:75:88:19:d0:9b:1b:a1:25:8f:0d:
f7:87:3d:74:67:95:28:34:64:60:61:48:d2:b2:9f:
a2:9e:24:09:d2:2d:e2:4f:67:30:e3:4d:aa:c8:92:
dc:4e:44:97:a1:a5:a5:0c:24:39:84:e4:d0:73:73:
df:0c:7a:02:61:ed:6f:cd:28:0d:a6:20:83:21:06:
80:63:a4:64:17:9e:ac:43:e7:4a:a4:44:07:47:ae:
3b:b1:c5:b0:30:a1:77:28:41:d3:e1:18:0c:ab:4d:
39:19:93:2f:7e:f7:25:03:ae:d0:e5:73:2d:19:c0:
d7:cb:50:4d:03:e6:b7:dd:78:bb:fe:ad:62:52:dc:
21:9a:a0:a1:89:af:15:3b:2c:5a:5e:cf:25:0d:2f:
41:eb:0b:96:86:4c:d5:77:01:30:79:52:b2:31:28:
b4:d1:f4:b9:d6:cd:56:2c:b9:e1:c8:76:cd:ee:f0:
b3:17:fc:5d:d2:e1:a0:d2:38:3a:9c:0c:b5:ab:c9:
d6:65:66:d3:a3:5a:27:a6:c5:cf:67:dc:4d:4d:58:
40:40:18:7f:b3:23:34:27:f2:d5:89:5c:51:ef:a1:
a0:94:8b:5b:10:d3:f6:6d:bd:95:b3:74:b4:26:cb:
46:f6:f8:a8:e4:41:be:63:56:30:2f:43:58:b9:c3:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DB:83:D0:16:6E:5B:92:20:2D:99:95:57:FE:4A:AA:40:CF:8F:AF
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8d:e4:ae:93:e3:de:a8:28:cb:50:d2:8e:fa:62:d9:c7:1f:
12:9d:84:c8:94:ff:dc:a2:10:bf:47:52:a3:66:ed:1e:01:76:
6d:03:48:75:05:62:79:7a:b1:9e:85:7b:08:16:af:c8:0d:f9:
5e:d2:5d:64:71:d0:5e:1b:dd:e4:b5:95:d6:91:35:0f:fb:1e:
2e:e5:46:42:ec:af:b2:37:33:d0:fc:ac:36:cc:48:3b:bc:d0:
df:7e:81:9c:84:61:f6:7e:d5:88:1c:e6:16:44:84:87:45:1e:
d4:92:22:d4:d2:7c:1f:bb:2a:b3:25:93:fe:a0:be:10:7d:5a:
9f:a0:21:79:81:ee:a7:46:20:42:09:b2:3a:45:09:7d:7c:00:
71:a8:60:52:d8:fb:f7:ab:52:6d:81:ca:23:a2:45:34:88:13:
46:f8:1f:46:a1:92:a8:8e:40:ed:4a:8f:f4:2b:ff:3d:52:c5:
58:6c:ba:0a:ad:8a:79:c0:4c:76:f8:65:b0:cf:c6:ab:17:41:
58:ad:2d:66:00:f4:34:57:fe:f9:67:f1:4b:c6:8f:11:74:9e:
2a:cf:db:56:e0:8b:27:0a:01:5b:68:d1:dc:a4:e2:8b:4e:04:
fa:e9:64:ba:cd:c6:78:1c:87:8f:db:11:20:1b:a6:47:92:48:
dd:b6:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:09 2025 by rpki-client