Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: qX4YGvZN+SAv5j3WQN0PE/uQdQV6UUuf0WWpLXM/ej8=
Subject key identifier: 7C:DF:88:6A:50:33:78:5A:AD:AD:3F:65:55:05:E4:CB:11:E0:7A:E5
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0194BD17B3F9A5F57692FD635136979BFF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0869
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: rPwEE7ak3f/yKBFfL+AtTfYpdUBjUvPGEZsjIj3I1lE=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:f9:a5:f5:76:92:fd:63:51:36:97:9b:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=7cdf886a5033785aadad3f655505e4cb11e07ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:a2:13:95:21:c0:1b:ba:eb:d6:03:4d:d3:
93:9c:f2:22:44:e5:17:ff:4c:68:8b:48:6a:7d:5f:
f2:7a:95:a6:47:74:4f:12:ae:c9:09:7a:11:9f:6f:
f6:ae:52:50:ab:a0:03:92:02:4c:4e:43:14:cc:81:
4d:0e:f0:0a:12:41:d0:69:30:c8:34:e6:78:1f:b3:
e2:12:bb:06:13:eb:af:6b:4a:95:ac:ba:0c:2b:dc:
3c:1d:e5:be:02:97:45:a4:6f:cf:6f:65:ac:31:4a:
e4:f9:d4:c8:3f:39:31:22:ae:5a:fe:85:a0:7c:dc:
d7:6d:f3:ea:86:5f:45:da:03:40:af:38:d5:4d:6c:
5b:03:e7:58:e7:62:37:4a:e1:77:f9:33:0d:43:ba:
07:ae:73:c0:a0:25:e7:2a:ad:56:8c:ef:53:bd:c0:
2e:7c:7f:02:af:c0:8f:c2:56:3f:cf:9b:8b:09:a2:
8e:99:60:de:35:cf:88:4c:b2:49:8f:61:78:0a:e3:
b1:e8:ba:4b:93:32:08:93:61:8e:ac:2f:62:71:74:
93:e5:7e:7e:5b:39:f1:44:9f:08:67:09:98:f5:6a:
6a:08:e9:96:8a:f4:92:bc:eb:f2:9c:b3:73:55:85:
f4:5a:a4:87:76:c8:b2:0a:c1:f1:31:51:9d:33:22:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:88:6A:50:33:78:5A:AD:AD:3F:65:55:05:E4:CB:11:E0:7A:E5
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:59:b3:fc:e3:7d:a9:16:81:61:a7:c0:6e:8f:f3:ce:af:7e:
49:6d:6d:eb:b9:ec:8f:87:63:bc:0a:2f:8f:b4:dd:bd:4d:0d:
4a:97:3b:cf:02:d2:5f:c8:c6:0b:9f:51:40:63:51:11:a4:58:
f1:36:28:c2:4e:d0:b6:fa:89:f7:5e:1a:52:42:93:a6:20:ca:
62:89:07:0b:0a:11:87:39:3b:89:81:93:e8:29:cb:fb:90:a0:
49:57:ff:51:fa:69:86:57:ed:3e:86:a7:58:09:ba:49:47:8c:
a7:3a:b3:21:1d:be:8e:0e:c3:81:b7:94:92:cf:ca:17:9a:eb:
50:68:f8:21:66:08:1a:39:f2:3f:08:dc:b5:f6:87:f5:c9:1e:
fc:7c:b7:ea:23:56:27:af:fa:3a:a7:04:61:21:bb:e7:6d:3c:
2f:4b:82:97:56:ee:2c:f3:71:b0:b5:62:69:c4:83:5a:82:be:
7a:ed:8e:eb:79:5b:8d:69:53:54:99:ca:83:f0:bd:7f:46:9f:
87:58:07:fe:cd:2e:70:a7:47:e8:60:2f:a1:8e:cf:dd:dd:fb:
cc:48:a9:2d:18:8a:c3:7b:fe:d1:93:da:45:d7:22:08:10:6e:
1c:d1:3c:88:8b:e0:26:32:a1:b0:73:4d:fe:c7:94:e9:10:09:
77:1a:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client