Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
File: 7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft (raw, json)
Hash identifier: jxKzIRAI0s6DX6+Spwnfwt6G7sFWX/jXBcaJW3DH6+g=
Subject key identifier: 4A:23:2F:50:05:21:4B:F5:EF:4F:87:C1:F9:3A:B9:62:A8:09:72:B0
Authority key identifier: EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
Certificate issuer: /CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Certificate serial: 018EA7455913B1E4F02A0174A77F8A95B8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
Manifest number: 09D9
Signing time: Thu 04 Apr 2024 04:02:03 +0000
Manifest this update: Thu 04 Apr 2024 04:02:03 +0000
Manifest next update: Fri 05 Apr 2024 04:02:03 +0000
Files and hashes: 1: 7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl (hash: xHb1lx7ZpHLT/1W3Y/fdQN4oVTco7JIFYNxtrWX87Ko=)
2: i7FuQZqrQACh70qm6xG1VOQP82Q.roa (hash: RV9WC0WOAGuRJJ1cscNpr9UpDK1dErYLi6eTFvc5kvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:45:59:13:b1:e4:f0:2a:01:74:a7:7f:8a:95:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Validity
Not Before: Apr 4 04:02:03 2024 GMT
Not After : Apr 5 04:02:03 2024 GMT
Subject: CN=4a232f5005214bf5ef4f87c1f93ab962a80972b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:21:9b:f7:3d:88:6a:ae:e1:de:b0:1e:01:
3b:cd:35:17:81:25:bb:a8:5d:16:0c:67:44:29:82:
cf:0a:64:bc:51:3d:f1:6b:cd:bb:5a:48:8a:3f:36:
ca:35:4a:fc:f1:28:1f:64:a0:1e:ab:80:4f:d6:7e:
b4:4b:db:0b:54:1a:0f:4b:35:3e:db:33:c7:28:33:
61:11:45:82:51:4d:4f:d6:95:73:fd:b1:14:87:29:
2f:70:b3:04:cb:d0:d6:99:70:86:d3:b6:ee:81:c8:
38:14:63:4c:79:7e:95:09:ed:19:54:d7:8a:33:d6:
82:d2:42:d9:d1:57:86:dd:f6:19:79:23:70:a5:b0:
4b:ac:68:70:2f:82:d3:5f:82:e5:ba:f5:69:58:a4:
41:1f:10:b1:57:29:4a:df:a4:f0:7a:bf:a9:a4:97:
f8:ff:ab:20:8b:be:14:54:98:04:fe:ca:50:c3:cb:
6a:90:98:8a:d1:41:4c:bc:41:63:3c:65:5b:94:f5:
fe:a8:c9:79:24:68:b2:dd:a4:94:28:43:54:8f:ec:
47:9a:d9:4f:84:84:d4:bc:bd:6d:e0:4f:ec:ac:b6:
30:e5:11:69:58:8a:cd:15:5d:6c:15:b1:07:2b:7a:
de:6d:d8:2f:fb:f4:bd:5a:1a:f7:77:2a:78:b5:ac:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:23:2F:50:05:21:4B:F5:EF:4F:87:C1:F9:3A:B9:62:A8:09:72:B0
X509v3 Authority Key Identifier:
keyid:EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:a7:d2:0a:ad:cb:eb:08:22:36:e7:66:c8:2f:8d:13:9c:
be:c2:04:d1:80:60:9d:d9:2b:fe:77:b1:25:fa:6b:c8:cb:6d:
97:a4:d1:ee:95:7c:3d:b6:ca:ba:50:22:28:89:75:92:e4:b1:
0e:f8:82:af:80:c3:ec:6e:4b:d3:03:c1:35:84:3c:d8:6c:b5:
61:77:98:65:2a:0f:8b:00:83:85:25:fd:a5:15:45:bc:70:13:
13:9d:eb:07:36:04:90:3a:87:c8:2d:b1:36:83:07:ef:2f:24:
13:2e:48:63:6f:5d:34:b5:ce:0b:c5:2f:06:3c:68:69:53:11:
4a:fc:3b:c5:84:fd:2a:c9:06:9b:b6:97:be:14:aa:45:30:f8:
18:bb:16:c8:3b:db:ce:f9:a2:ff:68:60:ef:38:3b:23:82:6d:
29:a0:d8:e3:4c:e1:03:9b:14:90:e6:5d:3e:10:d2:e2:d7:0e:
2a:3f:0f:d2:ee:3d:7e:ba:fd:76:e1:c8:99:a9:d3:96:59:f6:
82:4e:01:a9:bb:5e:3f:d3:a6:d7:24:dc:25:1e:a3:73:87:27:
ef:14:3d:6d:26:ef:c2:89:e6:f1:51:20:52:ba:ba:b0:c8:40:
62:4b:ec:47:a3:47:47:a7:09:91:9c:9b:e1:44:e0:ed:ee:00:
33:ed:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:05 2025 by rpki-client