Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier: gdPGiY5CH+sVOu8L/wF5NOWagdB6THY+CK0Q4YC16A8=
Subject key identifier: 9A:6A:D3:6E:CE:0F:D6:73:4F:B6:7F:15:00:2D:0F:F4:CE:7D:C9:A1
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial: 0194BC051B8FDC49CF3411416B81DF4C0828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: Lk7+AKh6HI0Mql0vJJ25zMIhNrhrZ6LGZk6qIlQIcuk=)
2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1b:8f:dc:49:cf:34:11:41:6b:81:df:4c:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=9a6ad36ece0fd6734fb67f15002d0ff4ce7dc9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:c7:34:eb:15:98:6f:c1:cc:b3:a8:39:da:
dc:b7:2c:de:71:e2:1c:44:68:88:e6:07:9b:7d:5a:
ba:65:d5:2a:42:c3:cd:72:31:01:93:a2:48:2a:c9:
ed:3b:68:41:be:f2:10:41:ba:53:95:fb:ba:74:88:
a4:00:14:a0:12:39:24:0d:62:70:5c:8a:c1:ee:d7:
d8:57:47:fb:5b:4a:56:85:24:00:20:8e:69:e6:7d:
53:0e:66:27:ba:bc:8f:1b:2a:23:ec:7a:8e:de:c2:
43:67:eb:10:be:e6:f6:f1:28:ec:4a:bf:a7:68:84:
5f:68:49:e9:72:d9:49:ba:66:8e:92:71:30:0b:47:
5b:59:ac:13:b6:85:4a:a6:48:e9:81:a9:89:f3:a3:
0c:07:2a:7a:4a:e3:63:fa:39:41:a4:bf:00:94:b0:
eb:3b:05:e1:c4:a5:b3:bb:a4:aa:4a:49:f8:07:f8:
ef:ac:9e:34:ae:f6:de:79:ef:4c:f6:63:00:72:fc:
ab:5f:8f:3a:a7:59:c7:9f:f7:0b:9a:08:0e:e3:bd:
6d:40:7a:39:bb:a8:aa:f1:3e:99:a9:ee:2a:b6:b7:
99:d7:74:f5:c3:60:88:69:62:8e:a5:9b:d2:e3:7b:
1b:cd:a7:63:eb:b4:0d:27:a7:b6:e8:17:f4:cf:c1:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:D3:6E:CE:0F:D6:73:4F:B6:7F:15:00:2D:0F:F4:CE:7D:C9:A1
X509v3 Authority Key Identifier:
keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:ce:28:e7:54:b4:34:5e:03:32:58:a8:43:7e:ab:2e:36:
46:b5:ef:cb:bc:1e:02:ad:59:5c:80:02:e2:2d:98:78:a8:b3:
e0:e1:94:91:10:23:fd:9d:da:ab:29:e5:d5:dd:51:3e:27:fc:
29:6f:c1:cf:da:9e:46:60:22:07:37:92:b8:cd:79:23:51:55:
17:e2:97:5f:3c:14:ca:63:f9:36:5f:28:bb:24:5e:b6:68:3b:
ba:43:df:b9:8e:80:f7:36:90:df:57:9b:db:f0:94:c7:0b:3c:
f5:43:32:a0:7c:7a:16:03:95:1a:e0:e0:5c:d7:f7:a8:c4:ed:
81:64:be:cd:42:48:7d:9a:54:31:5e:29:58:ad:82:0c:5a:cc:
e4:f8:61:cb:07:4e:de:be:0f:f6:db:6f:de:8b:ee:e3:17:2f:
82:73:f0:30:08:67:8d:61:a9:9c:7c:4f:24:8d:63:62:08:63:
ba:7b:a8:19:33:4c:18:67:99:a1:f6:1c:33:ef:2e:33:b2:24:
0b:5d:eb:56:a3:ee:31:0e:cd:97:2d:78:da:91:70:52:d6:e2:
e1:05:09:c6:94:30:73:57:e2:27:a5:64:0b:21:73:3c:5f:98:
e1:3a:b8:3c:db:98:39:32:57:93:d1:52:66:37:2b:8a:89:3f:
f9:dc:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:46 2025 by rpki-client