Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
File: 07u2-AcZR71cFhu4tFG332YGlkE.mft (raw, json)
Hash identifier: JNWvi9NREY/bklGh7Rhq12wmHxKCnzWm1pnXQW6g1Dw=
Subject key identifier: D7:65:99:1C:42:0B:0B:63:4D:E3:03:07:D1:77:74:9F:E5:68:75:F9
Authority key identifier: D3:BB:B6:F8:07:19:47:BD:5C:16:1B:B8:B4:51:B7:DF:66:06:96:41
Certificate issuer: /CN=d3bbb6f8071947bd5c161bb8b451b7df66069641
Certificate serial: 0193DCA4EADCA06A16B7E85489B1B5B20AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07u2-AcZR71cFhu4tFG332YGlkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
Manifest number: 0166
Signing time: Thu 19 Dec 2024 02:00:15 +0000
Manifest this update: Thu 19 Dec 2024 02:00:15 +0000
Manifest next update: Fri 20 Dec 2024 02:00:15 +0000
Files and hashes: 1: 07u2-AcZR71cFhu4tFG332YGlkE.crl (hash: UJPRYlG1DIIb/34VmeeDH9owIQbfG0y2GkiME3iGPOw=)
2: c8FnaKUgvzIWc2MSAQ_mLw4nkfs.roa (hash: bxWhnWA5zgg7f50F9/gPZbmWH/Ve89ex8j0t7iOm0S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dc:a4:ea:dc:a0:6a:16:b7:e8:54:89:b1:b5:b2:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bbb6f8071947bd5c161bb8b451b7df66069641
Validity
Not Before: Dec 19 02:00:15 2024 GMT
Not After : Dec 20 02:00:15 2024 GMT
Subject: CN=d765991c420b0b634de30307d177749fe56875f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:31:df:c8:85:21:58:8e:c7:8a:19:8b:3f:
92:8b:9b:1e:03:2c:86:93:4c:62:c4:0a:de:bb:52:
41:18:07:f6:4f:0b:fd:fe:eb:b8:1d:65:49:7b:f5:
bd:65:bd:29:c7:5a:1c:68:9e:96:d1:04:a9:a4:a2:
c8:bc:0a:85:7e:37:07:6f:0d:b2:ed:f6:04:38:15:
64:a1:ab:59:9c:07:8b:43:08:38:43:2d:57:1a:8b:
5a:87:d2:90:a9:ea:df:db:0a:b0:e7:ed:2f:19:a3:
e7:02:5f:91:a7:0c:65:e9:54:73:d5:4a:e0:a3:bb:
d9:15:7a:77:22:fd:c9:72:80:0b:93:5e:c2:75:90:
55:83:b3:7a:14:ca:e4:9c:95:d3:43:17:dc:74:43:
54:c6:64:54:f1:92:2f:80:55:ab:82:0e:8b:30:4f:
b2:3c:05:bb:b5:2e:58:e7:87:ba:4e:53:bf:e2:10:
68:b3:c3:08:b7:e8:0b:85:c0:62:66:1a:d8:a6:89:
f8:65:99:96:5e:52:e2:83:d1:56:a6:e1:4c:8c:05:
56:c1:53:84:24:0c:cf:b7:91:48:45:ad:0b:77:ca:
12:0e:3c:78:da:c0:c4:4b:1b:98:39:26:2d:f9:dd:
a0:7a:e7:58:61:4c:3a:58:57:6d:56:28:99:5f:4a:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:99:1C:42:0B:0B:63:4D:E3:03:07:D1:77:74:9F:E5:68:75:F9
X509v3 Authority Key Identifier:
keyid:D3:BB:B6:F8:07:19:47:BD:5C:16:1B:B8:B4:51:B7:DF:66:06:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07u2-AcZR71cFhu4tFG332YGlkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:b2:c5:20:46:2c:c7:27:90:1b:1e:5f:0b:1f:b1:6f:ff:
36:52:a5:71:4b:dd:14:30:cf:9a:f4:73:dc:d6:2d:37:b7:8b:
26:b8:38:09:9d:4f:bb:a3:c8:c3:7f:9d:06:e4:83:81:c1:de:
cf:58:a5:a5:9b:cb:49:ad:e1:87:9d:70:25:05:a2:ed:7a:d6:
2f:5d:91:47:fb:09:96:47:b5:16:6a:df:90:f8:b1:55:fd:f4:
12:f7:1c:b8:9e:7e:2c:ba:68:a2:83:4d:1d:56:9e:11:bd:3d:
07:31:00:88:6e:8e:62:11:f1:06:ac:4a:43:d9:2b:3f:e5:e8:
7d:ad:8f:fa:0c:a5:38:f3:ac:2a:09:c6:e9:5f:1c:ce:33:04:
c2:0d:7f:a4:57:cd:0b:a0:56:c1:d7:be:73:16:e4:f2:7d:40:
6b:ba:46:3f:ef:44:8b:b8:55:21:d1:c9:9a:f1:c2:e5:c8:4b:
24:9b:24:ed:a8:44:dd:06:f4:8f:60:4c:48:1b:97:77:6a:e9:
50:ba:62:fb:ed:eb:a8:f9:fc:5d:fb:4b:02:76:b5:ad:d3:c3:
ad:58:0a:94:26:85:33:ad:8c:7f:89:b2:be:2f:0b:df:be:bf:
e9:02:3b:20:1c:d1:f9:4d:2c:f2:af:ff:87:3d:83:c3:b2:ef:
0f:56:3b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPcpOrcoGoWt+hUibG1sgqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmJiNmY4MDcxOTQ3YmQ1YzE2MWJiOGI0NTFiN2RmNjYw
Njk2NDEwHhcNMjQxMjE5MDIwMDE1WhcNMjQxMjIwMDIwMDE1WjAzMTEwLwYDVQQD
EyhkNzY1OTkxYzQyMGIwYjYzNGRlMzAzMDdkMTc3NzQ5ZmU1Njg3NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fMx38iFIViOx4oZiz+Si5seAyyG
k0xixAreu1JBGAf2Twv9/uu4HWVJe/W9Zb0px1ocaJ6W0QSppKLIvAqFfjcHbw2y
7fYEOBVkoatZnAeLQwg4Qy1XGotah9KQqerf2wqw5+0vGaPnAl+Rpwxl6VRz1Urg
o7vZFXp3Iv3JcoALk17CdZBVg7N6FMrknJXTQxfcdENUxmRU8ZIvgFWrgg6LME+y
PAW7tS5Y54e6TlO/4hBos8MIt+gLhcBiZhrYpon4ZZmWXlLig9FWpuFMjAVWwVOE
JAzPt5FIRa0Ld8oSDjx42sDESxuYOSYt+d2geudYYUw6WFdtViiZX0owRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdlmRxCCwtjTeMDB9F3dJ/laHX5MB8GA1UdIwQY
MBaAFNO7tvgHGUe9XBYbuLRRt99mBpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDd1Mi1BY1pSNzFjRmh1NHRGRzMzMllHbGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mNGJiZmYtNGVhMC00NWViLTk5YTEt
MTdhOGY2YmQyNGRmLzEvMDd1Mi1BY1pSNzFjRmh1NHRGRzMzMllHbGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mNGJiZmYtNGVhMC00NWViLTk5YTEtMTdhOGY2YmQyNGRm
LzEvMDd1Mi1BY1pSNzFjRmh1NHRGRzMzMllHbGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKWyxSBG
LMcnkBseXwsfsW//NlKlcUvdFDDPmvRz3NYtN7eLJrg4CZ1Pu6PIw3+dBuSDgcHe
z1ilpZvLSa3hh51wJQWi7XrWL12RR/sJlke1FmrfkPixVf30EvccuJ5+LLpoooNN
HVaeEb09BzEAiG6OYhHxBqxKQ9krP+Xofa2P+gylOPOsKgnG6V8czjMEwg1/pFfN
C6BWwde+cxbk8n1Aa7pGP+9Ei7hVIdHJmvHC5chLJJsk7ahE3Qb0j2BMSBuXd2rp
ULpi++3rqPn8XftLAna1rdPDrVgKlCaFM62Mf4myvi8L376/6QI7IBzR+U0s8q//
hz2Dw7LvD1Y7Uw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:18 2025 by rpki-client