Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: 3Aei9r/oQTldDPt2PjDj+h5JUc7G21zf0PGQT6/vGls=
Subject key identifier: 98:01:7A:C9:B7:C7:91:84:69:C1:91:4E:61:CF:77:29:0F:61:22:59
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 0194BCA9F1384D9E7103833660FF858C9867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 027E
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: JDu/FM9+aQVxjnsmJJ+Qz/WdJGZQWmsMRH7NV6+Mwlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:38:4d:9e:71:03:83:36:60:ff:85:8c:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=98017ac9b7c7918469c1914e61cf77290f612259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:2b:fe:fd:c5:55:0b:ab:12:bd:e0:7d:15:
b9:84:25:48:9f:65:a8:d1:db:9d:82:ad:4b:44:d2:
a3:1b:81:7f:a2:c1:f9:fb:a3:a3:60:84:12:4d:03:
b6:98:50:e2:35:5f:80:cd:04:58:5c:ba:3a:ad:cd:
cb:6f:c8:7e:72:dc:70:11:c4:61:dd:b5:19:e6:69:
24:91:6e:db:90:d0:4b:96:50:83:7b:51:c6:70:1c:
c0:3d:4d:b7:cc:6c:33:ba:8b:09:00:8a:ef:5d:a5:
f4:39:c8:e9:c0:e7:28:ef:a9:c3:7e:78:33:2d:e3:
30:c6:d2:db:8e:0d:6b:94:62:01:22:08:a0:00:28:
33:32:07:38:1d:1b:88:71:d9:ed:79:fe:ce:6b:96:
73:7f:a7:8e:92:d4:d3:bf:67:c8:94:64:6d:4c:1a:
f8:e0:fc:54:a5:f9:46:4b:d6:fc:58:9a:f9:b2:f0:
8f:64:ba:63:51:1e:89:09:1f:63:ef:59:bb:b3:d8:
ef:da:fc:a0:be:80:ca:7a:d6:1b:12:28:75:20:43:
84:7c:46:ea:d0:e7:30:58:d1:7a:da:3b:df:d7:0d:
ba:61:92:15:b3:6c:42:29:a4:2a:dc:a4:88:30:6d:
3d:0c:f0:0a:e2:ee:79:58:c9:b9:fd:84:89:95:75:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:7A:C9:B7:C7:91:84:69:C1:91:4E:61:CF:77:29:0F:61:22:59
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:61:2f:7f:4a:b3:03:60:8e:4c:c0:8e:ad:ec:74:c6:cf:e0:
86:c0:0e:de:5b:3d:f6:e8:c7:d2:b1:7c:d4:ff:4c:fa:a6:fe:
5d:35:f0:e5:53:52:49:ad:64:ca:36:3e:7e:66:b5:4a:bf:2d:
f8:19:10:a2:b1:8f:cd:e1:dc:c2:69:41:0d:92:db:50:26:f5:
fe:bb:3a:db:7a:a9:c3:55:33:f9:42:6e:49:cd:a8:fc:43:a7:
38:f5:72:e1:d1:be:0c:5a:7b:3a:f8:31:d0:6b:a5:69:84:78:
3f:c8:f3:93:97:34:c6:85:d6:52:a3:8b:2f:5c:9f:d6:5f:12:
e5:2a:fc:b0:78:fb:c1:73:ca:8f:6a:06:ef:ec:40:25:eb:5f:
00:6e:bc:0c:b6:d4:0f:6a:56:6a:66:32:4d:0d:c2:40:0f:0a:
07:81:6a:b1:51:9f:43:cd:3f:b2:96:0d:c1:52:ac:2e:10:3c:
12:28:a6:13:4e:7b:14:09:5a:4f:80:6e:35:7f:0e:c4:69:cf:
39:f1:de:53:92:64:29:a6:e5:68:39:9d:55:92:a8:06:38:b1:
1d:bb:76:18:13:6b:14:44:37:ed:4c:a3:74:06:e8:fb:9a:e0:
65:92:7c:2e:07:63:5d:4e:3c:a9:59:64:89:6f:72:28:7a:cc:
3a:60:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client