Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
File: 7XcGdIN9KOpgwoePNCzbNfHjscU.mft (raw, json)
Hash identifier: qaeSXVDBz09dT4APP7aUWEW96s9tajPRmVRwZyTz+1o=
Subject key identifier: D1:A1:3C:FF:E7:F0:B4:5E:A6:2E:06:A7:F5:FD:34:70:5A:F4:45:07
Authority key identifier: ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
Certificate issuer: /CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Certificate serial: 0194EE71B90A7214F5753DBFC57D738ADA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
Manifest number: 1155
Signing time: Mon 10 Feb 2025 06:00:17 +0000
Manifest this update: Mon 10 Feb 2025 06:00:17 +0000
Manifest next update: Tue 11 Feb 2025 06:00:17 +0000
Files and hashes: 1: 7XcGdIN9KOpgwoePNCzbNfHjscU.crl (hash: 9B0HDvX38D4fQjVMEIFMGY6B3QWBDIJdoEgbsTTxypg=)
2: S4NpqlBpA9VT-nHpiPG1rxvRaLM.roa (hash: FggEJzFAR5NkdEu1itwo/zaSCvlxder74yvCrtOXXqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:71:b9:0a:72:14:f5:75:3d:bf:c5:7d:73:8a:da:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Validity
Not Before: Feb 10 06:00:17 2025 GMT
Not After : Feb 11 06:00:17 2025 GMT
Subject: CN=d1a13cffe7f0b45ea62e06a7f5fd34705af44507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:6d:91:00:a6:0a:4f:67:7f:38:b1:6c:c3:
68:9b:1f:0e:a6:d3:5d:29:0f:c3:39:f8:06:07:d7:
49:67:44:4f:ac:e6:c3:d8:9e:64:e9:e1:cb:a3:8c:
19:ee:a4:0d:00:b9:11:1d:49:ed:89:7f:76:8b:48:
b6:00:23:74:9e:a7:e1:78:dd:08:f8:e2:3d:c5:42:
9f:61:58:f5:cc:d7:51:c9:70:a8:6c:8b:82:b8:ec:
8d:94:2b:2c:ce:29:f2:e1:5b:ce:6e:89:a8:78:5f:
1e:a7:81:04:2e:88:5f:05:f5:7c:1e:4c:06:3a:d0:
4f:ec:40:e7:e4:ad:c7:97:77:c6:26:ae:2c:2a:91:
71:85:8b:d5:97:d4:1c:0c:25:3d:e5:cd:72:d7:08:
4f:2c:12:23:c7:d5:fc:b0:31:45:40:da:c4:79:4e:
ea:b8:d7:e1:58:92:9b:d3:e8:ee:06:dd:dc:20:5d:
ba:f5:45:af:6c:9d:ed:7c:25:dc:aa:16:87:8e:1f:
6a:54:16:32:30:6f:9a:81:93:97:b2:f1:9b:ac:b0:
c9:c5:f3:66:71:ad:25:ce:af:d6:45:39:c6:87:9c:
86:1f:58:b7:74:20:99:ac:2a:c7:5c:10:be:04:74:
7b:07:c8:7a:79:82:f8:3c:fc:7a:74:e7:49:b6:a6:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:3C:FF:E7:F0:B4:5E:A6:2E:06:A7:F5:FD:34:70:5A:F4:45:07
X509v3 Authority Key Identifier:
keyid:ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:83:b7:3c:88:be:b2:b5:80:25:71:4c:80:86:73:2e:b3:77:
eb:ab:62:0c:4c:ad:71:64:0d:61:b9:18:a8:6c:4f:21:1f:44:
ed:35:f2:3c:ad:fc:75:86:e4:1f:84:fb:07:46:75:bb:c7:c6:
87:87:a4:6a:14:f5:4d:bc:78:5c:6c:30:78:be:be:17:fa:9c:
02:1f:29:0b:4f:b2:12:e7:29:e5:b1:6e:5c:79:f7:59:24:81:
7f:a2:c6:6a:5d:ac:b4:d9:1d:f4:18:df:3a:65:9b:e9:b9:01:
10:d3:8f:31:08:46:42:1c:30:b9:93:39:f6:fc:7d:2f:ee:df:
01:8e:ed:5b:74:c3:58:6b:ec:fe:98:7a:6d:3f:38:f8:d2:fc:
04:c7:2f:94:e9:81:a6:b8:cc:f8:9a:69:58:70:77:58:c8:36:
3d:f7:ed:8c:1b:08:01:79:38:c3:d7:8d:f4:ce:d5:5f:0b:f6:
db:7f:5b:07:d0:ef:17:68:ae:34:89:4d:03:3b:18:63:2c:bf:
af:7d:3e:63:ac:75:74:d5:1f:e6:46:7d:04:36:22:55:99:65:
88:92:91:c5:4d:26:f3:85:07:6d:3a:0f:f8:52:14:36:3c:59:
c6:4b:96:c1:03:10:28:2d:9b:37:85:16:4a:34:e9:81:d4:7e:
2a:01:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:27 2025 by rpki-client