Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: 6HPApIaEyuNxYAE98chuXOHUX2TqQHddzvyTUkfirXw=
Subject key identifier: 13:66:DA:57:E8:B1:BE:FB:99:FB:D6:94:11:20:E3:62:4A:8C:70:BA
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0195E15A1B8836EB9C90B916360C1E0361C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 0F47
Signing time: Sat 29 Mar 2025 10:02:13 +0000
Manifest this update: Sat 29 Mar 2025 10:02:13 +0000
Manifest next update: Sun 30 Mar 2025 10:02:13 +0000
Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: qtSrnvLq2zbPWBS9m94C9J2gxePvab6ylNxm1pkFzYQ=)
2: _Pgq84jrEp-zxajAzOXZ5wVPIRA.roa (hash: EbB6LGcx8MIH+W1ZkKFUETSvGMpVK6Hy6dyclc0VHiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:1b:88:36:eb:9c:90:b9:16:36:0c:1e:03:61:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Mar 29 10:02:13 2025 GMT
Not After : Mar 30 10:02:13 2025 GMT
Subject: CN=1366da57e8b1befb99fbd6941120e3624a8c70ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:52:aa:3e:1e:ab:a0:dd:fd:a8:ab:52:a8:
a8:80:1b:76:ff:2e:ae:21:12:9f:e2:c0:92:e6:4f:
02:80:59:f4:64:22:d1:92:f8:e9:a4:95:74:13:42:
0d:0d:0f:e8:00:9a:ce:9f:d9:f5:ea:50:c0:8a:fd:
0c:1e:b2:8a:57:66:46:d4:8d:44:70:d8:9c:7a:7f:
d0:bf:50:d8:71:73:f2:fc:d2:e0:d9:67:9e:a8:0e:
44:ab:52:74:bd:d0:66:f0:a5:16:75:a1:4c:46:ec:
96:53:1e:35:e2:68:b5:7b:a0:c2:01:03:5d:ad:fe:
24:03:99:78:34:b8:2d:19:d8:e9:ee:3f:75:d1:3b:
71:bd:72:57:9f:37:e7:c5:45:e8:1e:ca:28:ed:44:
e3:bb:b6:56:98:aa:67:fb:e3:cf:69:a6:fe:0c:9b:
6f:78:c0:1c:ca:16:06:ac:f6:aa:be:35:26:d9:33:
4c:9b:86:a6:0d:9c:9f:16:48:25:47:b1:eb:81:bc:
6b:59:a3:5d:6d:a6:20:1b:f3:cc:a4:3c:db:13:6e:
03:ce:81:d6:3d:cb:af:fa:2a:fd:44:88:d9:9b:8e:
ae:d6:1e:b9:5d:3d:01:b5:43:ca:f5:2b:71:f6:fd:
a2:ef:5a:c0:48:f7:39:15:65:65:a5:de:7e:d8:dc:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:DA:57:E8:B1:BE:FB:99:FB:D6:94:11:20:E3:62:4A:8C:70:BA
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:b8:2c:e4:c2:85:b9:4a:35:c6:a2:45:fd:41:ed:38:aa:
97:d2:b7:66:da:7c:1f:3b:00:91:57:8d:09:79:79:b6:24:a6:
77:63:08:37:51:d9:75:89:4d:2a:23:6c:e3:f8:a7:26:e2:e2:
02:67:fa:0d:75:e5:43:ab:75:aa:d1:d8:a6:d6:8a:cd:3c:72:
c1:dd:ae:05:b5:d2:2a:6d:8a:40:4c:f8:ad:b9:e4:2f:29:86:
f7:e8:49:0d:28:3f:3a:65:27:4b:72:aa:b3:52:e7:f5:81:fe:
3f:10:82:8d:5f:b1:7d:21:b9:5b:31:91:3a:e5:79:e8:af:14:
d8:bf:5a:1b:54:d0:80:65:82:b3:a1:c8:56:e7:02:a9:94:ee:
f8:db:02:8e:e3:08:9c:f8:ab:9c:de:64:18:44:9d:64:86:a7:
47:90:26:a1:76:21:83:06:3d:3c:85:9a:ae:0a:fb:e3:f0:5d:
02:22:dc:82:82:aa:f1:5d:28:93:a8:ab:7f:67:75:b2:70:34:
12:f3:84:31:28:e1:b2:e2:8e:de:a6:5b:b4:7d:1f:81:c0:97:
00:e7:4a:9d:2c:88:fb:ee:d9:d2:04:6c:ec:8e:10:cb:b0:b3:
85:8f:22:d3:02:ad:48:7f:6f:0a:c7:46:81:e8:ac:8e:61:15:
98:a1:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:16 2025 by rpki-client