Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
File: t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft (raw, json)
Hash identifier: aFBn0nJ/bDR0OpMXuGyyyDo1pC61tf3ppB0w/zq0xbA=
Subject key identifier: 67:B1:4E:5E:48:29:22:1E:6D:79:1F:41:CA:BE:54:1A:46:93:01:26
Authority key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Certificate issuer: /CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Certificate serial: 0193BE2D7E78741C7DED7AE4DEB3F26D7EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
Manifest number: 0CA1
Signing time: Fri 13 Dec 2024 04:01:12 +0000
Manifest this update: Fri 13 Dec 2024 04:01:12 +0000
Manifest next update: Sat 14 Dec 2024 04:01:12 +0000
Files and hashes: 1: PCD_nb3SesblHEQ2G9c19wAA_5k.roa (hash: IOPfAqUyUxWYPsy5hikDiSEbXtQxLQ3A+BmubDvz8W4=)
2: t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl (hash: dmiH3NW9UsJfMI4tQ8UjZWYbXcvg0915erm0JlEg1Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:2d:7e:78:74:1c:7d:ed:7a:e4:de:b3:f2:6d:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Validity
Not Before: Dec 13 04:01:12 2024 GMT
Not After : Dec 14 04:01:12 2024 GMT
Subject: CN=67b14e5e4829221e6d791f41cabe541a46930126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:6c:b7:02:b6:4f:c0:33:15:a3:45:5b:5c:
fe:e1:f2:1b:66:46:67:c5:a1:a6:1a:a3:14:68:6f:
33:cf:8f:7e:b7:b7:72:5c:40:83:11:73:74:6e:32:
2d:dc:85:66:8d:67:2a:95:ca:d8:e3:ab:b4:93:e9:
08:84:07:77:50:f7:df:78:c0:9b:7a:64:57:75:5d:
9d:a0:fa:ed:47:d4:0b:8f:45:d8:2a:64:cf:04:30:
76:d9:67:7b:9c:2f:26:f9:4f:17:86:86:04:c8:28:
e6:02:9d:cd:9a:9e:b3:6f:f7:4f:01:50:c5:49:87:
cd:ff:35:65:6e:c9:2d:60:5b:2f:6a:11:89:b0:fb:
52:13:be:44:c2:ad:dc:a6:a6:68:e3:e2:45:7a:37:
4b:4f:b1:33:d1:89:14:67:81:a9:2a:4b:39:ac:60:
95:01:c6:99:ce:2d:63:fe:b7:cf:51:38:cf:e5:60:
24:38:f3:ae:92:2c:4c:33:13:c8:1b:14:30:1e:7a:
e5:02:20:70:5b:d9:aa:19:10:c4:04:bd:34:bb:6e:
2f:1c:1a:a5:69:b7:04:09:be:d2:3d:3f:21:01:16:
61:fe:35:5c:85:31:e0:ea:61:5f:28:09:33:7a:85:
f5:16:2e:bd:f0:db:25:73:d8:a6:4d:2a:1e:61:6a:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:4E:5E:48:29:22:1E:6D:79:1F:41:CA:BE:54:1A:46:93:01:26
X509v3 Authority Key Identifier:
keyid:B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:aa:79:07:fc:4a:f0:d7:77:a5:2e:b5:79:59:37:0a:da:
ab:13:ee:e2:12:a5:90:c9:f9:ba:b0:44:e2:95:3b:87:2d:e3:
be:7f:f1:d0:10:4d:33:d1:27:0d:cd:5d:f5:e8:50:6b:12:db:
e2:b5:40:e9:46:04:7a:ce:d3:cc:d2:ef:70:ad:95:6d:cb:87:
e5:17:48:37:e9:ab:48:3f:19:0e:f0:3c:b6:ba:4d:5b:d5:8b:
fc:df:f1:c6:2e:2c:59:02:cc:ff:61:33:3c:fd:ee:08:47:5e:
a4:d4:56:4e:9b:2a:30:62:6e:17:06:2a:73:7c:02:42:bf:a8:
7e:b1:43:ea:35:8f:b9:5c:12:a8:59:bd:a6:d8:45:5d:dc:46:
d3:19:63:4a:71:96:18:97:3d:64:bf:da:bb:b7:9d:c1:fe:3d:
e8:a2:00:3d:f4:39:05:b1:7c:3f:f9:f0:cd:9f:c8:3b:79:26:
ce:69:3d:b9:49:7b:a5:68:ee:ba:e2:a0:a2:5d:ad:0a:64:03:
59:39:71:ed:b1:72:0b:30:16:6c:e0:f0:7f:0d:02:c3:14:93:
ae:8e:28:79:bf:03:35:ec:de:2f:9a:b9:37:64:44:b1:bf:70:
d7:0f:04:a2:0b:c3:5b:9e:70:13:63:0a:d6:af:96:4e:e0:20:
34:7e:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:07:42 2025 by rpki-client