Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: A151pVQw+Oh7yNLPHQRCcH+dv36bIYbJErZx6ZAj9bg=
Subject key identifier: DD:4B:29:51:31:3E:EB:3D:F9:12:50:A9:A7:CB:E0:04:27:F0:9F:B2
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 0194BD17E49115D1CB274E57F62006F109A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0AD7
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: hojzEicsCDj3mNhb51yrOAYFMkMJmAVVqmehuv7Ylyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:91:15:d1:cb:27:4e:57:f6:20:06:f1:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=dd4b2951313eeb3df91250a9a7cbe00427f09fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:b1:ad:df:c4:65:6b:4c:3d:4d:26:28:f1:
fc:ec:6e:72:47:dd:b4:d8:ba:ca:79:2e:60:d5:da:
3a:70:13:c8:82:35:f8:ff:df:cc:4e:a2:6a:b3:1a:
71:30:2f:a0:00:cd:fe:b7:b4:33:60:b1:24:f6:cd:
15:8b:18:ee:66:b1:2e:c0:70:68:7b:1c:b9:39:aa:
67:fd:75:77:ce:7d:77:cd:03:ae:bd:7b:d8:b1:e9:
a0:ff:1a:9e:b9:d0:fa:ce:0c:af:ad:34:ca:b1:1f:
b4:92:43:04:bf:00:f1:16:a0:b5:bf:a8:76:69:71:
a2:09:02:db:ec:13:78:00:a2:7c:95:db:d3:c5:ac:
b1:bb:f1:ae:b7:29:f8:07:2d:84:db:6f:11:d6:1b:
d4:0a:51:1c:31:7d:d9:1e:3d:00:fe:8e:3d:6e:91:
ba:62:ff:48:08:9a:08:76:82:07:a0:68:0a:79:78:
85:a8:54:63:c6:cc:73:7b:e7:a3:77:ac:c5:34:e4:
12:c0:f8:d2:fe:42:53:50:f7:7c:e5:a9:1d:75:e3:
2e:6a:04:32:fc:28:4d:78:e1:43:6a:5b:f8:65:9c:
36:71:4e:8a:ea:34:c2:53:14:71:d4:3c:68:77:50:
af:a7:7f:ca:f4:d7:bd:a8:43:d8:5c:db:60:ef:0b:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:29:51:31:3E:EB:3D:F9:12:50:A9:A7:CB:E0:04:27:F0:9F:B2
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:50:3c:af:98:3e:b6:6d:38:e9:0d:8e:c5:73:b4:3e:50:
e6:2c:2c:c0:ba:62:bd:6f:31:d6:88:ba:02:26:08:18:db:70:
24:c5:63:59:36:9a:7a:a8:a1:69:f0:5a:68:1f:46:2a:92:83:
1c:98:93:c5:4e:0b:ef:11:b9:cb:9f:59:32:e0:5f:4b:66:da:
ae:cc:8f:ad:27:82:8a:6e:bf:1f:33:fd:fc:ad:23:1a:3f:13:
ce:b9:03:6c:7a:19:ba:41:1c:72:67:e1:6d:03:e3:9e:c5:52:
08:6c:cf:62:e9:57:85:54:7c:97:5e:d4:21:5c:5b:a8:b4:5f:
62:0d:03:06:35:d0:36:49:8e:7c:1a:61:df:e9:c9:4c:d8:aa:
98:10:fb:b5:bb:cc:4b:19:95:f0:a0:35:8d:ee:22:3c:a4:5b:
97:ac:83:ae:f5:10:0a:44:3b:f6:35:12:51:d8:41:e6:e3:cb:
f1:59:14:47:46:4b:f7:62:6a:81:d7:1f:56:de:7e:55:44:d1:
6e:e3:5a:33:4a:64:8c:46:c0:2f:64:85:15:dc:68:b3:66:a7:
b3:17:ee:b6:b8:8c:5e:f6:e1:5d:19:da:91:bd:5a:31:34:2d:
41:5f:b7:c6:69:3a:a5:97:97:a8:66:a9:13:54:11:b5:71:27:
81:79:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client