Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 2I9DdiF/+3gk4CvslGClfIXoErQgJ0fE/SsQ3pMxfRo=
Subject key identifier: 7C:CA:B7:23:9D:E8:72:7F:65:2E:90:92:07:BE:66:52:B3:D5:A9:E5
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 0194BC3BD81DBF1BE0A60A074A7FA6C83C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: vUnIBMI57bFyt6gE52DVfXpAnd6ky1VNXmU/JjMG40c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:1d:bf:1b:e0:a6:0a:07:4a:7f:a6:c8:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=7ccab7239de8727f652e909207be6652b3d5a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:e2:83:61:f0:05:f4:6f:7a:9c:54:e9:87:
4a:2e:24:84:4a:67:21:b7:ba:a8:c3:8e:70:3a:d6:
bb:49:79:e7:fb:2a:9b:fd:98:97:c5:15:40:4a:b3:
f4:ce:17:71:e2:b9:16:a2:4f:88:69:21:0e:c1:09:
8e:7e:5b:66:e9:73:81:ae:25:ec:ff:f3:e4:1a:3e:
31:4f:2b:6b:8a:ab:f9:f3:84:c3:b7:b5:70:b2:33:
bf:ae:05:e0:ee:5e:48:b7:05:b7:1a:6a:17:9b:fc:
e6:7d:21:e4:34:11:09:5c:55:af:09:2c:63:61:70:
b2:d7:9f:af:ba:f7:85:11:80:58:d2:97:b2:3a:3f:
08:65:1a:80:6f:50:bb:56:44:ad:51:17:5c:47:a3:
19:ea:c4:df:7e:80:a4:82:88:63:c2:6a:a0:58:43:
f4:0e:ed:db:99:5f:b3:fd:28:a7:d3:7d:6d:ab:b1:
b6:c9:af:c2:e1:eb:96:d4:4d:76:99:7f:e6:a9:7d:
1d:70:c0:22:be:c0:cd:67:30:29:68:9f:65:38:b3:
ff:f1:6f:41:f0:22:91:7c:c8:ad:9b:d3:60:d7:82:
70:0b:46:f0:d0:d5:97:47:88:2b:cb:9b:19:99:5e:
43:d9:c3:49:eb:ee:8f:87:cf:d9:d0:97:85:dd:9b:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:B7:23:9D:E8:72:7F:65:2E:90:92:07:BE:66:52:B3:D5:A9:E5
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4f:45:80:dd:5b:b9:74:39:2c:2d:fd:89:53:d9:c6:25:2e:
02:11:4f:b0:6d:81:ca:bf:89:c3:97:30:84:90:79:aa:22:6f:
d2:1b:07:cd:28:29:90:35:85:91:a3:92:2e:5c:2e:4e:c0:2f:
0f:91:a9:e8:49:5b:be:fb:86:fc:94:82:91:e4:78:94:e2:04:
aa:d6:00:61:d1:fa:9a:61:30:b1:36:2c:9e:7c:01:3a:c4:17:
81:cd:e7:7c:26:bd:c9:c8:d6:b2:24:78:81:18:0f:ee:70:6a:
fc:32:f3:72:e9:54:48:da:df:7f:30:f8:43:94:6a:58:5b:76:
dd:a1:e7:43:b7:88:dd:a4:8f:08:88:cd:2b:4f:d0:ee:b3:a3:
c6:4d:e1:69:d5:85:64:36:84:4b:28:ba:d7:9d:e6:6b:cc:a6:
e9:b2:84:0b:b7:58:a0:0a:90:57:de:8b:9a:a0:9d:db:fd:ac:
fc:99:43:50:85:9a:25:a8:33:45:5d:2e:9b:34:f7:2a:fa:09:
63:b6:0d:19:57:3d:80:80:d0:54:2d:78:db:ed:20:23:e0:f4:
ea:fb:29:1c:8b:a2:01:8a:d4:64:ae:ac:fc:5c:ab:3b:50:d6:
05:78:2f:2d:df:5e:bb:e6:ac:70:c9:0d:ce:48:dd:95:09:e1:
58:35:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:29 2025 by rpki-client