
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: YYMGbSl7dctwDx/lhTFMZCljNWKw5iknIQv67pdvjGc=
Subject key identifier: 5C:30:FA:A4:EC:25:69:91:E3:BA:03:82:0E:08:56:C1:C8:17:4E:E5
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 0194BCAA03C0DF62663A13E3833DFD827616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 0BCA
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: +tOx2NaLGsJSRr7u+/InCBdXAhWC2FO1NYpgbZcok4Y=)
2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:03:c0:df:62:66:3a:13:e3:83:3d:fd:82:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=5c30faa4ec256991e3ba03820e0856c1c8174ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:da:db:93:f6:4f:ba:fc:4f:b8:95:a5:ad:
a0:3a:2a:7d:e9:c0:eb:0c:d3:c0:b2:33:da:35:3a:
0b:0a:4a:b7:74:69:27:1e:36:16:bb:f2:57:e4:38:
5c:50:99:c6:a7:a0:8b:7b:18:58:ba:2b:eb:06:db:
b8:1e:a1:02:3c:c3:af:08:6d:95:b5:5b:41:c7:7f:
02:7f:ba:82:3c:dc:4b:d9:38:60:b5:dd:85:22:1d:
b4:44:e2:82:10:90:80:a4:43:41:2f:c8:42:a2:e9:
bc:07:18:fb:d8:e3:fb:35:ef:2d:49:cb:e6:96:ee:
70:0e:39:ef:a5:8a:0b:71:8f:c2:f0:18:f9:ec:f0:
02:76:ca:00:a9:f9:85:fc:86:25:e6:db:15:09:ba:
d3:bc:14:b4:54:4b:2d:2a:9b:8e:25:65:0b:fe:63:
71:5d:5f:7e:85:16:86:4f:ee:89:c4:14:62:2b:3a:
3a:c9:14:ff:4b:62:de:13:ab:e8:d7:4b:20:d4:bf:
37:46:57:6a:ee:ca:6f:5d:d8:74:63:28:ee:0d:1b:
c4:7b:d2:d6:95:22:9f:42:d6:76:47:1a:5d:3f:6f:
bf:aa:c2:2b:e6:89:6e:b4:48:fc:0d:b9:d3:9a:1f:
99:6c:25:27:a1:11:c9:6c:d6:b3:8a:45:4b:5d:19:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:FA:A4:EC:25:69:91:E3:BA:03:82:0E:08:56:C1:C8:17:4E:E5
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:f8:28:6d:68:a7:0c:20:78:34:01:05:59:56:1b:6c:3c:
f8:3f:2d:ee:67:53:a9:aa:d5:ff:e1:5f:1f:52:fb:8a:e6:ee:
74:ed:4c:0d:e9:c8:b9:bd:42:f1:c6:18:f8:3c:c8:7e:b8:1c:
7f:3f:9b:60:fa:36:de:e8:8d:ef:8a:f7:ad:9e:4c:0c:5f:96:
b4:67:c6:27:a4:67:1f:b6:34:ff:31:f4:e4:a3:54:0a:94:5b:
02:03:bd:00:76:4e:63:1b:1b:2a:59:6f:9c:a6:d5:5c:b3:50:
3a:8d:ac:5f:2b:4d:ab:c4:02:a9:09:7f:e9:54:2b:1d:2e:5f:
24:93:61:3d:5c:e2:98:68:03:d3:c2:58:ec:96:1b:86:f9:61:
52:b1:93:63:4a:28:53:d7:cc:3c:5d:49:ef:82:47:37:fe:c5:
51:17:b6:cf:d7:b2:a6:24:ce:81:56:13:9a:73:d5:a3:8a:e3:
08:92:3e:df:d5:80:00:94:fb:b9:2d:27:46:ba:2a:b1:3c:2c:
4f:23:00:fb:15:05:56:56:de:56:a9:fe:4c:8a:28:66:ab:42:
30:18:d3:3d:4b:8e:3d:5f:c7:2c:d5:12:ad:78:f4:73:aa:37:
1b:0c:d2:2b:3f:d9:ef:ab:92:8f:53:9a:4b:89:81:1c:e4:92:
08:c5:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:39 2025 by rpki-client