Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: Hq7T4Sdu1XeKShSR5uV1o2DvvpVZ4b7JytB2DWEWsc4=
Subject key identifier: 5E:8C:3E:B2:4B:96:28:C7:76:81:DA:18:8F:E1:E1:6A:74:2A:6A:D1
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 0194BD4E7DA227061FBA5B5852CE5178007B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: DF
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: tRLJkUlgwZryDEbzAWeuIkk6leAWadWNS/TXoOblRHQ=)
2: _M5AIVuzgXvHBKWny-Hh6G3pi1U.roa (hash: kH4DLz70GCvpi7gNL0YvgZWTRLs57t6MIq2nfE5Mbu8=)
3: tv7BOR__D8ThJMIcJAUdIAlKkwg.roa (hash: jM8tfHRUbeU3G9E4ngQ7Zof6H/32R+jTu43wcHiKIrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:a2:27:06:1f:ba:5b:58:52:ce:51:78:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=5e8c3eb24b9628c77681da188fe1e16a742a6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:8f:50:4c:79:e7:6d:9e:9f:94:9f:03:da:
57:69:3d:f6:1c:67:a4:2d:f8:01:7c:c7:cb:46:2a:
72:0c:ed:23:09:62:a1:17:e5:b6:3a:91:27:f1:0a:
4c:82:00:ac:60:96:6f:fb:0c:a3:8e:c9:f6:ad:22:
60:83:ba:a5:d5:c6:3b:b9:24:c2:2e:a8:76:f3:b4:
4d:3b:c4:c6:e3:a2:26:bb:06:49:ee:0e:9a:ee:33:
db:33:34:ee:ae:55:59:5b:b8:c7:2e:7b:4f:62:0a:
a6:ce:c1:96:cd:1f:1b:e7:ba:d7:6a:e0:8e:a3:c3:
66:73:a9:a1:35:a1:b3:1b:32:da:1d:69:f4:66:34:
41:70:53:ac:f4:26:3f:60:63:85:4c:1d:18:f1:ab:
52:db:a2:57:99:2d:e5:69:08:b4:42:68:bb:3d:08:
58:d5:68:41:19:fb:00:44:87:f1:97:77:0e:b8:c7:
f6:2a:96:24:9c:8f:3e:63:5a:99:86:3d:8e:ea:ba:
8d:49:5f:b9:be:53:b6:f3:6b:cf:06:15:03:18:cd:
45:e3:55:9d:ff:08:5b:88:8b:c1:44:54:19:32:49:
79:a9:5a:c9:a6:14:63:4c:14:ad:c9:51:af:6d:2c:
02:b2:62:07:64:fa:6d:1e:bb:15:f5:05:d2:99:2e:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:3E:B2:4B:96:28:C7:76:81:DA:18:8F:E1:E1:6A:74:2A:6A:D1
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:8f:5d:06:62:8d:5f:03:3a:db:3c:02:16:d9:f1:a8:09:
25:9b:a9:f5:72:cf:b5:31:32:22:80:d2:9c:8f:4d:64:81:b1:
49:b8:4c:85:42:8c:fa:63:6a:7d:bd:0b:91:5e:a3:8a:31:6e:
cc:99:54:38:bf:07:a0:5e:6a:c4:29:24:4e:40:63:dc:4f:52:
21:50:cc:8b:93:a5:14:a5:06:ac:06:17:c6:e2:46:3b:12:3a:
3b:36:fb:0d:dc:7a:7f:fb:12:3c:bf:38:a7:83:ab:75:62:ea:
39:b3:e7:44:82:97:55:f1:22:cf:f6:f8:01:fa:eb:57:3d:1c:
ea:8e:65:37:17:7e:7b:e9:94:4b:31:ea:fd:85:5a:6d:50:ec:
98:c5:bf:54:2e:70:7b:09:b6:6a:7c:0a:6e:67:0a:ae:8b:ae:
9b:bf:f1:df:6d:12:fb:33:ba:48:b0:d1:24:de:b2:b9:0d:80:
bf:ac:5c:50:7b:c9:57:52:71:f1:1a:e6:cc:3e:1f:f3:2e:ce:
29:01:06:30:d3:27:3a:7e:e0:ff:04:23:58:d9:02:45:80:c1:
17:c6:a9:d2:25:94:36:97:2b:1e:fd:83:c1:cc:78:8f:3b:2d:
9b:93:a1:81:6d:56:5a:a7:0a:e1:43:88:2f:eb:dd:c2:f2:17:
6c:84:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:08 2025 by rpki-client