Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: c7wm8GAUOw0FZXLbaB1X+Bp/efONoN96iqCMVs190/c=
Subject key identifier: C6:D7:F5:07:BA:6C:45:D9:88:56:9B:77:F8:B6:84:5C:01:FB:D5:2D
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 0194BD17C2F3FD5D83ACC8AFC0E9A66B541C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: ee3bDZvZOVJqkTTQJkwuZEIV9jp0ENIb93BABw4NBig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:f3:fd:5d:83:ac:c8:af:c0:e9:a6:6b:54:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=c6d7f507ba6c45d988569b77f8b6845c01fbd52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:b3:df:41:fd:85:5c:87:d7:0b:d6:4e:85:
c4:30:47:12:fe:7c:fd:70:3e:3a:2e:0e:52:1c:1d:
da:e1:3f:ef:43:54:ce:21:1f:aa:b1:e5:86:9e:7b:
cd:bc:d7:00:ca:d7:1d:65:56:dc:c2:9a:ba:bc:5b:
35:aa:5b:b7:3e:a0:58:86:0f:10:56:e3:45:34:07:
64:77:ce:6a:e2:37:14:65:dd:a4:2d:d2:82:89:81:
6a:7b:35:67:c4:0f:06:bf:17:ff:c3:59:2c:a7:f0:
76:e8:53:07:6b:67:70:e9:30:77:ad:69:5a:8b:8b:
46:07:dc:f5:f5:30:e8:bf:8d:90:d1:7d:6f:65:7c:
c5:46:81:70:f6:c5:dd:8d:53:88:3c:2e:69:11:27:
68:c9:b7:57:35:6b:5a:f9:3d:ef:5c:ab:e9:be:dd:
ee:e0:2a:72:d2:b4:1b:77:7d:6e:8c:fe:c5:86:95:
40:c7:10:12:ba:d3:44:b4:c3:e9:a1:0a:a1:d4:c0:
d2:46:bf:e8:98:ce:61:15:7d:af:f9:83:50:21:64:
c8:2b:88:30:85:63:7b:fb:07:aa:09:a8:f1:10:ae:
a8:f6:e3:74:04:10:6b:fd:5f:e8:ae:43:22:00:71:
49:c8:2d:ce:1d:64:1e:0e:c3:3a:5a:93:fc:c0:f9:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:F5:07:BA:6C:45:D9:88:56:9B:77:F8:B6:84:5C:01:FB:D5:2D
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:20:16:8f:68:c2:d2:d9:40:36:fa:72:e1:a5:52:54:60:ca:
ee:9a:cf:87:9c:f4:80:33:f7:cf:f4:4e:c8:eb:84:bf:c4:7f:
fd:b5:b8:1a:40:a9:29:8c:48:8a:82:e4:30:5f:c5:a5:8a:b8:
03:b6:54:73:fc:90:b0:51:d2:77:da:57:5e:ab:68:50:82:d1:
f3:6f:90:bc:93:67:b8:a1:58:2d:df:82:8e:75:b2:6c:a5:50:
ca:64:1e:ed:d8:dc:0d:4a:eb:bc:16:5f:ea:95:59:4e:72:23:
66:b1:49:f1:60:26:b7:f9:bf:19:bf:25:b5:ca:f1:b4:8b:7f:
1b:ba:7a:92:b3:f1:d1:a1:06:bc:cb:e1:02:f5:98:6a:6b:bc:
b5:0b:4c:2e:11:c7:c3:95:96:c6:b9:a8:fc:57:42:2e:07:0a:
e2:62:23:c4:29:45:ce:a4:69:43:6d:2e:e8:1d:8c:f4:fd:0a:
ce:36:3b:60:e0:5d:e3:3a:9f:b0:29:e3:8f:56:61:b6:94:3e:
0d:40:a0:c0:f2:63:10:54:bd:45:60:5f:96:c1:af:f2:4d:b5:
8e:54:4f:a1:46:75:75:4f:7e:66:15:fc:e9:e3:0f:b7:ac:ed:
cf:07:b8:42:1b:48:3d:24:46:c1:2c:b7:d4:06:5c:48:47:33:
ee:04:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:37 2025 by rpki-client