Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
File: r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft (raw, json)
Hash identifier: Fu+7pkr81RKRjQC6E3ElQdqk7TGH8GxEg4sKAwZyZ94=
Subject key identifier: 09:12:23:36:7A:8D:C9:35:6D:B8:13:26:18:35:C2:B0:04:D1:17:AF
Authority key identifier: AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
Certificate issuer: /CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Certificate serial: 01909CBB9912E7857025DB01BC5AB1F37172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
Manifest number: 0CC7
Signing time: Wed 10 Jul 2024 13:00:58 +0000
Manifest this update: Wed 10 Jul 2024 13:00:58 +0000
Manifest next update: Thu 11 Jul 2024 13:00:58 +0000
Files and hashes: 1: 30dt85dzsK5hiPQQKO6L6zwWJn0.roa (hash: 60eMaChme3kJQ6bD0OvFwucjUKUoui0q6xBZTiHUaJs=)
2: r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl (hash: /njMqeAgybMAzM5NqMhbnICbSfXkW/B6y+VkG5i1Ei8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:bb:99:12:e7:85:70:25:db:01:bc:5a:b1:f3:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Validity
Not Before: Jul 10 13:00:58 2024 GMT
Not After : Jul 11 13:00:58 2024 GMT
Subject: CN=091223367a8dc9356db813261835c2b004d117af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:3f:7b:80:96:68:7b:d9:f9:d9:37:5d:10:
38:12:aa:97:2f:3d:3a:27:f4:55:15:8b:57:2f:14:
de:41:b5:10:03:99:be:d3:a3:00:ec:e7:33:87:da:
0f:c6:57:a7:eb:93:7b:f9:1a:f8:06:10:48:01:a0:
fe:f8:14:bb:4c:05:87:a0:22:be:49:91:ef:ea:a8:
39:36:86:da:b1:53:75:8b:ea:0b:c9:15:3b:d3:4b:
c6:0d:cb:c0:44:6b:b1:b5:f3:35:01:e7:d2:7d:fa:
a5:18:a7:e7:f6:0e:35:5c:4b:85:08:b6:2f:6b:52:
ee:7e:a4:60:83:2a:f3:74:cc:57:b1:00:2e:73:9f:
a1:b4:41:2e:7d:15:df:e6:be:3d:d6:49:b4:09:ad:
31:b4:48:ba:65:c8:3e:0f:86:f9:66:e4:79:c0:3c:
0f:9a:24:b5:39:95:a1:21:03:f3:5d:00:a1:f1:05:
ff:2c:cc:5f:c0:fe:17:9d:c0:46:df:12:69:73:13:
06:e5:83:21:3c:53:09:82:79:ad:89:84:8b:11:90:
c3:d4:23:29:8d:5b:fb:fe:d7:85:c4:72:d1:86:8f:
f5:17:18:e3:18:25:f2:b0:f7:b5:eb:7c:1b:8d:9f:
b4:44:2f:af:38:34:b8:87:43:56:b9:f0:e0:29:fc:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:23:36:7A:8D:C9:35:6D:B8:13:26:18:35:C2:B0:04:D1:17:AF
X509v3 Authority Key Identifier:
keyid:AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:da:4d:97:05:cd:70:e1:c2:c8:71:da:12:68:1a:00:80:63:
3e:50:64:cf:91:90:40:70:43:f3:de:fa:09:05:89:2c:1d:67:
67:69:8f:2e:c4:be:4d:47:bc:8c:7b:3a:26:3e:49:dc:8b:a2:
e5:33:ab:a8:49:a9:2e:ef:48:a9:c5:7c:a4:4a:db:2d:db:52:
3c:96:69:b5:f9:0e:54:41:fa:45:2c:fa:83:2d:62:77:42:8b:
6f:48:3d:9e:6b:ef:85:c6:a8:f9:a7:af:5c:10:23:c8:5f:c5:
14:83:ea:eb:d6:86:2a:19:d1:58:0f:57:eb:37:5a:c2:65:22:
f1:14:5a:63:37:cd:cf:e3:36:02:31:d4:44:90:7f:c0:28:70:
cf:a9:d1:e2:a3:a3:01:87:36:d6:58:75:ee:c5:01:18:2a:c1:
5c:8e:1f:62:94:18:c6:54:4f:a3:39:d0:a0:17:fa:f7:15:a9:
f1:04:29:a1:7f:5c:51:46:21:5c:38:7b:d2:d8:1f:d9:1e:6c:
37:4a:6a:07:5d:bb:5e:1d:85:01:09:8d:93:14:23:ce:fa:e7:
2c:dd:41:14:85:aa:50:e0:cc:07:6c:54:14:c2:a3:10:b3:21:
e6:00:fc:91:20:40:59:67:77:c0:47:05:85:08:03:2b:ac:33:
2a:d0:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:18 2025 by rpki-client