Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: wlp0kVCl2KWJI/nONJFr61xc5wT0jnRlrj7JOmpOy1U=
Subject key identifier: 76:3B:92:95:73:BA:DA:A0:BC:C3:E3:67:20:FE:A1:86:B5:46:D6:7D
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 0194BCA9BC21C93381792299E5FD3DED629A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0BFF
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: bJB84PtvW1UpKhu0NPNZPBzSWbBkpraAxFh+peDcmlk=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:21:c9:33:81:79:22:99:e5:fd:3d:ed:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=763b929573badaa0bcc3e36720fea186b546d67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:09:51:32:cc:6d:f5:e7:f3:a8:64:e6:88:
bb:05:05:38:02:de:e0:36:2f:07:ce:79:5a:2b:82:
60:4f:91:d3:9c:10:f5:08:2d:53:a0:25:ba:f4:de:
db:f0:64:b6:fd:ff:2d:7e:1f:66:df:a3:ae:e0:7a:
09:c6:7a:20:8a:52:34:88:b3:60:fb:cb:16:79:be:
64:7d:c0:8a:23:2a:21:fc:4a:fa:30:79:27:bc:a2:
23:ff:a9:ac:8a:57:fd:5b:b7:90:72:f9:23:16:d4:
69:82:82:f6:61:1f:43:69:37:30:92:e3:3b:db:14:
1d:e1:ec:3f:65:1b:37:fb:37:8d:17:ce:cc:ce:49:
ad:30:91:13:49:e6:83:3a:d3:58:07:ad:45:9c:50:
03:e9:06:0f:46:fd:72:19:b8:5d:c1:28:8e:93:8b:
0d:cc:cd:27:e7:29:a2:d6:a0:61:4b:54:33:c8:8b:
0b:ec:f7:6c:28:03:69:be:61:db:d5:b3:60:81:e7:
c9:7e:26:48:4e:5d:f6:70:63:56:d5:3a:60:60:b0:
6c:a0:f2:d5:46:ae:27:c6:03:2a:fb:bf:f2:5f:b8:
a6:48:ef:6d:66:29:81:14:53:31:ee:fd:eb:67:22:
f1:40:3f:c5:73:97:7d:58:2f:1e:a1:08:72:5f:0d:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:92:95:73:BA:DA:A0:BC:C3:E3:67:20:FE:A1:86:B5:46:D6:7D
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:a4:ec:e5:19:5e:9e:b3:fd:bf:2a:76:1f:3f:f9:5d:68:
e7:99:ec:c8:3a:80:36:ed:a7:de:79:7b:e0:be:2e:31:1e:2c:
0f:bc:3d:85:37:57:86:e0:fa:d1:d6:72:69:98:f9:a8:fd:5a:
43:25:e5:33:3e:00:3c:9a:94:58:5a:7d:e0:d5:5c:94:5b:bf:
76:1f:88:8e:4e:33:28:70:a5:b7:3d:8c:28:0a:8a:8e:ca:b0:
5a:b1:5a:cd:8a:80:13:78:33:6b:a6:fc:70:ed:43:e6:07:e3:
70:13:2f:72:90:1f:3e:e6:85:e3:79:6d:ae:43:75:88:bf:07:
02:40:39:d8:5c:d6:1e:3e:05:fe:2f:86:a2:e2:2c:3a:5f:1c:
3d:db:07:a2:c6:a7:26:d0:51:d0:61:ba:16:a4:5a:17:15:52:
d4:fd:2b:cc:26:4e:5f:e0:55:33:b8:5d:a3:17:83:17:57:0e:
59:a1:69:9a:35:66:04:c1:b3:e7:76:13:50:6f:0c:79:07:f9:
a1:7f:1a:c8:31:ec:4b:c0:2f:3e:e7:3e:c8:37:0d:1b:7f:e5:
7c:d7:57:f6:77:61:71:3d:c5:fd:3d:f4:c9:3b:68:36:23:a0:
9e:a5:55:71:05:1b:27:e7:d7:e1:5c:db:67:73:82:5c:69:8a:
4e:fe:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:17 2025 by rpki-client