Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File: 7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier: ZMtsxdHPbQbEZnYH2pwzj7jbBcE0Bsrq/EyertUSOK0=
Subject key identifier: 9E:C1:E7:3F:91:9E:86:FE:C6:C8:AF:D4:49:22:91:30:B2:BB:E7:07
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 0195E0EB3DAB4851B193BB78135FB5090543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number: 1581
Signing time: Sat 29 Mar 2025 08:01:07 +0000
Manifest this update: Sat 29 Mar 2025 08:01:07 +0000
Manifest next update: Sun 30 Mar 2025 08:01:07 +0000
Files and hashes: 1: 2sRit1HkpegSVZ93lQZh_r4sGH8.roa (hash: WjR0xWj31dChbabct4M4jjr+gsq2p4cJ6G9KZptb3BE=)
2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: SDWjIXGszKG8RZuU5/RYDPIUHlErQaBhirF5cFo8w6I=)
3: HLNbdsiEi9zrEX9bhrS_IVl3jtc.roa (hash: 1y6Fi/ztp5kH8MZMJE7AZCFbRxNUTgcF8S0cn+hAm74=)
4: IlEs6ayN0GXUT0oxVpizq4L9xnQ.roa (hash: ly4LCnFOM24AhiADSDW1TvUATTjU1W5hp/HalAApLWc=)
5: VSEL2iQWB7y3te4btwgqQzATX5A.roa (hash: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=)
6: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (hash: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:3d:ab:48:51:b1:93:bb:78:13:5f:b5:09:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Mar 29 08:01:07 2025 GMT
Not After : Mar 30 08:01:07 2025 GMT
Subject: CN=9ec1e73f919e86fec6c8afd449229130b2bbe707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:b2:d2:5e:85:f4:a3:f5:a3:0c:1d:e6:0f:
99:cf:96:32:fc:e7:5d:7e:ce:7e:7a:ce:85:c0:33:
4a:d8:9a:db:c1:50:ac:ab:ec:30:38:45:e1:b9:77:
9d:27:31:23:f7:21:1f:16:b0:5d:9d:ba:b9:60:c1:
49:3a:75:16:b7:ee:4c:5b:ea:b0:fa:46:b0:91:dc:
44:f7:ed:5b:cd:c3:15:f1:fd:81:58:92:45:ed:2c:
1b:9a:8b:31:75:3e:d6:b4:cb:13:df:4f:9c:d6:53:
1e:6a:da:92:82:33:9f:ef:59:49:35:56:44:29:02:
cd:67:69:1d:6c:f0:8e:35:f7:3d:6f:66:4d:0b:ab:
2e:e1:33:50:cb:75:2f:bd:39:89:23:25:28:4c:f4:
51:d6:00:05:25:62:9e:b5:d1:ff:27:c2:57:7e:06:
e0:c6:b2:0b:ee:31:91:f2:07:da:12:d2:44:60:ae:
ed:99:77:e2:aa:ed:2b:98:bc:34:f5:dd:de:d7:5a:
8e:e2:63:ee:a8:ef:33:da:0c:6d:45:78:29:48:33:
5f:c2:db:58:e6:81:ec:3c:15:41:58:76:f8:2d:04:
5e:5d:b9:f5:0e:5f:f1:3e:9d:0b:62:52:db:df:73:
c6:10:14:94:15:13:89:d8:39:05:a8:59:15:61:7d:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:E7:3F:91:9E:86:FE:C6:C8:AF:D4:49:22:91:30:B2:BB:E7:07
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:ea:ed:0e:79:e2:d1:03:97:bc:d8:18:e7:5f:f8:54:13:
f0:6c:59:ad:91:13:50:8b:07:2e:8a:05:6f:ed:c0:7c:80:5a:
9c:ad:14:8a:b0:15:c9:3f:25:d0:1f:04:99:27:79:30:ab:2d:
01:c6:5f:49:60:b0:f6:8e:61:a7:36:56:8b:f1:7e:7b:fe:29:
54:6a:17:f8:0b:2e:38:08:3f:f5:99:6c:61:32:5d:c1:a0:70:
97:ff:15:02:5f:2f:37:66:76:6a:bd:b2:c9:44:c5:00:90:f5:
be:a3:0b:68:c1:f6:9b:bc:f3:28:b5:ba:56:99:c4:c1:95:78:
d3:1e:ca:11:21:f6:d3:c0:b6:3d:b0:e4:64:77:b4:92:1a:9d:
da:4d:af:7d:9f:06:db:42:cc:21:9f:b9:61:03:c5:bf:74:7c:
fe:07:e2:e7:74:4c:38:c8:c2:ac:ab:cf:c5:86:38:37:43:62:
e2:44:20:25:38:60:f1:b5:a1:0f:83:03:a0:47:2c:9a:59:de:
29:af:12:09:ab:f4:d1:41:bd:18:34:d8:07:e6:b2:e5:90:08:
a7:b4:c2:6c:aa:66:11:c7:47:1d:b9:dd:e7:ba:e1:30:c3:37:
09:b6:30:0f:0d:47:e6:e3:22:82:c4:58:7d:a1:44:a1:b8:e0:
58:d2:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:43 2025 by rpki-client