Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier: WAaN0pHEOQrhmQbA87CZhNbTMIV2yZrTuyFV7CCEjvQ=
Subject key identifier: 8F:BF:A9:A8:50:23:D4:2F:DE:E1:44:97:61:5C:83:B9:23:AB:97:74
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 0195E121E79E77CAA55A8553D918B779C1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 09:00:50 +0000
Manifest this update: Sat 29 Mar 2025 09:00:50 +0000
Manifest next update: Sun 30 Mar 2025 09:00:50 +0000
Files and hashes: 1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: gn5W5rOFelpW0drHDUNqghEd5pSt/Dv+91d0VGH/0ug=)
2: iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa (hash: xdKq+/ODUXejhJKyI2Ol9rOhJg9XTGoQZtrMhSTgxpw=)
3: pVu2j0EJCMMdBZE3gYcjdze0MJw.roa (hash: smTFngwmoe2BMrTIAR1rWR3m1Bo7KfOKZGk2cxj/sgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:21:e7:9e:77:ca:a5:5a:85:53:d9:18:b7:79:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Mar 29 09:00:50 2025 GMT
Not After : Mar 30 09:00:50 2025 GMT
Subject: CN=8fbfa9a85023d42fdee14497615c83b923ab9774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:66:7d:4d:8b:f1:09:c0:70:75:46:18:76:
b1:ee:42:d0:74:18:29:c6:3d:ba:a9:58:cf:3e:77:
30:cd:5d:a8:8c:7c:c5:f6:3b:d7:78:a6:56:a0:0b:
18:6f:7d:c2:58:e5:d1:c7:27:59:57:89:df:2f:b4:
5c:42:83:bd:e6:48:7b:19:82:e0:14:98:fd:59:dd:
62:9f:72:0b:a9:8d:31:fe:c6:df:b8:cb:43:3a:5a:
c8:f4:12:51:21:b9:0c:06:ef:7a:84:ac:9b:0f:84:
fe:44:20:7d:b9:18:2c:b0:c1:00:b0:f6:74:c6:19:
3e:89:7d:9c:d8:e4:79:4c:20:c0:f1:0f:de:2b:e5:
be:59:c9:83:bc:26:63:f1:6a:98:e8:98:dc:c5:05:
84:64:07:08:37:7d:70:64:48:18:77:a4:92:ee:bc:
ef:6f:6d:0c:0f:a1:08:b3:8c:a0:8b:18:d8:82:b6:
9a:9b:88:e8:bb:c2:35:be:d4:30:53:9d:84:8f:1e:
4c:a0:75:85:03:4a:fd:e8:d2:3b:4a:20:51:d2:af:
86:6a:27:0d:15:56:2e:e5:05:40:5d:c3:b5:e0:e6:
ea:4d:8e:1f:38:ed:3a:2c:c0:05:2c:19:38:9c:59:
a5:f3:19:8f:5f:26:18:c5:7a:48:b5:82:4f:5b:d7:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:A9:A8:50:23:D4:2F:DE:E1:44:97:61:5C:83:B9:23:AB:97:74
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c4:ae:6a:91:9a:39:09:e6:3d:3a:1a:12:dc:46:f6:a5:d3:
91:6d:40:4a:aa:b8:18:c4:40:e7:d5:9f:b1:5d:9c:3e:98:9c:
72:72:36:a0:49:c2:39:bf:bc:36:7c:84:69:25:bb:b8:09:30:
ed:8c:8f:b8:91:82:21:b4:60:50:23:f8:13:5e:f9:e7:d1:71:
a8:23:9a:6d:32:07:d1:b4:0c:ca:7d:67:0b:74:c9:54:fb:e7:
10:8e:b3:a0:24:f4:61:37:09:2f:77:91:0c:da:0c:fa:fc:9a:
ff:0f:53:9e:c9:bf:c4:5b:aa:f6:27:ea:7d:a2:7b:8e:b4:81:
69:a3:47:c1:b5:e1:d9:3d:22:58:d7:f6:b3:77:47:79:2a:de:
96:67:c2:a2:b2:df:b9:ce:cf:5e:9b:78:31:93:90:05:96:50:
c4:1e:f2:03:56:08:7c:56:c1:5e:cb:be:ec:cc:82:21:24:4b:
46:a3:f6:08:29:7c:d2:24:27:21:07:3c:8e:d7:7f:b2:ef:85:
07:04:04:60:db:ab:d9:49:32:7b:b9:0a:15:ca:99:f4:f1:fa:
0a:18:f3:8f:b7:b7:13:13:e3:9e:b2:2f:ae:e5:e1:4c:12:9f:
6f:38:1e:f5:22:e7:3c:5a:8f:ba:00:cc:5d:5e:83:75:7f:87:
2d:47:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:15 2025 by rpki-client