Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/caacc7-ca7a-4e3b-bf10-ccc741773898/1/7K2drcphW1W32-AmBJMCWCD3llw.mft
File: 7K2drcphW1W32-AmBJMCWCD3llw.mft (raw, json)
Hash identifier: bID9QeL03XmJvvIRlBQGSKapVbRRcdVgpAsDIQKxYfY=
Subject key identifier: 00:FA:68:BA:8A:12:BB:89:8B:EF:CE:81:63:5B:0E:2B:62:36:E6:25
Authority key identifier: EC:AD:9D:AD:CA:61:5B:55:B7:DB:E0:26:04:93:02:58:20:F7:96:5C
Certificate issuer: /CN=ecad9dadca615b55b7dbe0260493025820f7965c
Certificate serial: 0195A2E86E91AB606B65A012176DCB83C9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7K2drcphW1W32-AmBJMCWCD3llw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/caacc7-ca7a-4e3b-bf10-ccc741773898/1/7K2drcphW1W32-AmBJMCWCD3llw.mft
Manifest number: 03FC
Signing time: Mon 17 Mar 2025 07:01:36 +0000
Manifest this update: Mon 17 Mar 2025 07:01:36 +0000
Manifest next update: Tue 18 Mar 2025 07:01:36 +0000
Files and hashes: 1: 7K2drcphW1W32-AmBJMCWCD3llw.crl (hash: iEwW85FGBcZdSTzDAvhKdqroK14FZljicnMImDfONsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:e8:6e:91:ab:60:6b:65:a0:12:17:6d:cb:83:c9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecad9dadca615b55b7dbe0260493025820f7965c
Validity
Not Before: Mar 17 07:01:36 2025 GMT
Not After : Mar 18 07:01:36 2025 GMT
Subject: CN=00fa68ba8a12bb898befce81635b0e2b6236e625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:b0:47:f5:a0:6e:19:35:40:71:55:95:18:
0d:15:14:db:7a:4c:db:20:38:1e:1f:b1:04:e5:59:
78:7d:b4:d5:ea:b6:2d:f4:d8:ca:56:68:e7:7a:1f:
29:85:c2:b9:56:64:b4:b2:e6:04:cb:66:d1:56:f7:
b5:63:7b:d5:03:65:f8:04:30:3d:e6:a2:93:8c:a9:
d7:cb:1e:16:6f:b8:5e:b7:b1:43:e1:37:39:ee:fa:
cd:18:86:19:5a:05:99:ac:4e:96:1f:62:90:11:ae:
00:1d:43:a4:8b:cd:8a:6b:a1:a6:80:38:42:a0:a7:
65:e8:6f:2c:4e:6c:e2:90:7b:9e:35:d2:4d:b7:b2:
11:c2:c7:6d:16:d9:2c:9c:bb:d5:94:cc:31:99:d3:
60:71:d6:b2:1f:19:92:45:52:44:01:79:27:67:80:
a4:ca:89:bd:fe:a7:a8:51:e0:73:65:e4:16:77:d0:
f8:cf:19:81:3e:2c:e4:55:c4:d0:f3:3b:aa:30:6a:
8d:88:23:00:b5:11:fa:58:fc:27:25:0f:da:85:33:
4c:ad:02:e8:e7:28:e4:55:84:1f:b3:0b:85:3c:2d:
95:b9:d2:fc:1b:6a:22:24:7f:32:a4:99:1d:1e:15:
16:14:5b:4d:73:40:0b:3e:32:82:e3:b1:3e:33:e3:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:68:BA:8A:12:BB:89:8B:EF:CE:81:63:5B:0E:2B:62:36:E6:25
X509v3 Authority Key Identifier:
keyid:EC:AD:9D:AD:CA:61:5B:55:B7:DB:E0:26:04:93:02:58:20:F7:96:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7K2drcphW1W32-AmBJMCWCD3llw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/caacc7-ca7a-4e3b-bf10-ccc741773898/1/7K2drcphW1W32-AmBJMCWCD3llw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/caacc7-ca7a-4e3b-bf10-ccc741773898/1/7K2drcphW1W32-AmBJMCWCD3llw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:9e:2d:b0:d1:dd:01:81:f2:88:44:44:e7:01:ac:9a:b9:
66:54:5e:1b:fe:3e:d4:79:d2:44:34:c4:a3:2c:06:12:3a:a8:
83:49:e3:26:ab:d5:72:8e:57:0a:3a:45:f2:15:96:1b:a3:fa:
8f:4d:76:79:ac:03:e5:0b:37:56:e7:79:5a:53:40:d1:2d:00:
6b:b5:45:45:01:96:ae:b3:d6:f2:53:d5:11:b0:03:e0:0a:4b:
b6:12:29:bd:32:d1:83:7f:4c:4b:ca:36:56:8a:fd:0d:7d:03:
44:b4:2a:32:04:55:45:40:c0:ce:be:08:8d:b2:30:4e:a9:fb:
4d:52:d5:97:53:7f:90:33:ee:20:b8:29:41:23:b6:1a:15:f0:
4c:9c:8b:11:e0:0d:28:8e:cf:c8:f7:2f:95:ad:9b:7d:f3:11:
c5:98:1a:0b:a8:43:9e:30:ea:e3:ac:59:e8:72:e3:ef:65:a2:
3f:30:97:3c:31:83:d8:d9:ff:cb:77:9b:cd:c7:46:c7:a4:70:
38:94:3d:7e:44:be:05:50:49:11:b9:53:61:d2:2b:84:ab:f0:
54:ed:6e:d0:c9:1d:c2:26:68:eb:03:56:8f:7c:a6:87:96:c3:
4b:7b:38:e6:53:47:8f:fb:2f:09:3a:35:73:6f:ac:1c:8b:57:
f7:c0:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:28:44 2025 by rpki-client