Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier: dkXH/i/aJoYzOCGFjAg3Xy1A+0db4Ct+V/B7HQ4ALOA=
Subject key identifier: D9:6A:9C:A2:6D:54:2B:9A:D6:79:11:07:C8:D0:2F:2B:AA:75:95:23
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 0194BC72D5E6D8B4B315881A1392E2493767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: de/GdLLxYJFWya+S3s2CD5OhSkVGIXgzbvvJFsUwVYo=)
2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:e6:d8:b4:b3:15:88:1a:13:92:e2:49:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=d96a9ca26d542b9ad6791107c8d02f2baa759523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:9b:bb:d5:5b:01:18:b0:16:33:e7:1c:29:
5a:33:27:ae:f6:5d:ae:83:a4:c1:0e:cd:ce:1c:bb:
63:bd:af:83:62:ef:35:5b:8b:f3:79:8b:f2:10:af:
df:25:12:5e:06:5f:6a:7d:66:1c:58:0c:80:6d:5c:
21:ec:76:26:be:08:62:b0:2a:6a:e4:e2:b0:96:4d:
7b:79:19:79:a2:d8:08:3b:76:53:47:92:2a:96:80:
e6:b1:e5:61:66:17:db:26:80:3b:37:15:f8:3d:cb:
7c:9c:b7:aa:97:98:c9:c9:10:75:e0:e2:11:0b:5b:
5d:82:50:69:61:16:65:ac:60:9d:35:1d:45:9a:f9:
10:90:ba:be:b7:21:58:0d:98:53:ad:a4:c6:6b:6a:
fc:58:1b:18:78:b3:f7:1c:9e:1a:c9:f7:b0:c0:87:
20:a4:e5:d9:08:a7:5e:59:86:6e:45:39:22:32:bc:
70:17:a2:b3:a5:93:61:39:0d:82:8a:11:3b:58:86:
82:36:b4:c7:7f:cc:9d:5b:d3:39:9b:63:f0:c3:4a:
a4:7c:8f:87:b6:30:5a:ce:fb:15:0a:d5:52:85:87:
4b:0d:4d:d6:01:82:c6:01:29:75:2a:77:72:1e:7d:
fd:2f:32:f9:cf:8e:6d:79:5d:3c:c5:25:c1:8b:d6:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:9C:A2:6D:54:2B:9A:D6:79:11:07:C8:D0:2F:2B:AA:75:95:23
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1b:5e:45:3d:a8:bf:6a:25:b2:84:d2:ca:65:36:45:8c:bd:
a8:e6:9d:d4:a3:24:2e:af:08:2a:b1:33:55:b3:2e:2a:23:74:
d9:65:63:b7:04:9d:59:73:2b:e0:b1:e2:6e:71:67:27:58:c0:
21:fc:4f:74:01:31:b7:c1:00:5b:bd:14:1b:69:cc:02:1f:33:
8e:7d:46:a5:2b:72:a9:e9:d4:50:fe:a9:7b:23:1f:30:ed:80:
fa:e5:08:66:de:c7:0d:2e:72:cd:74:1e:2e:c2:45:f1:28:d7:
f3:be:a9:94:84:5c:93:a6:da:05:69:9f:87:e4:91:a6:a3:23:
2e:36:6f:16:37:db:92:7d:f6:35:2b:1b:8b:ff:4c:96:0f:f3:
6c:7b:cb:aa:35:c7:a0:8d:c1:f4:70:1c:e9:cc:1e:c6:73:8c:
71:07:9a:e0:f8:ce:cc:2c:36:46:66:d4:29:73:86:0c:b9:09:
f8:62:91:ba:3d:de:9b:bd:41:90:ff:81:a0:a7:39:76:6c:93:
12:34:bd:6a:29:f5:8c:f0:12:e5:c9:54:3b:34:cc:68:01:b2:
87:10:68:5f:df:f7:41:ad:c2:6d:32:19:11:7c:cb:36:92:d1:
50:f0:3e:cf:fa:3b:73:41:b1:45:94:00:06:d5:9d:d6:69:69:
16:ad:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:25 2025 by rpki-client