Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
File: 7MhALy-qswSHn_cSz8v1rlK2aZw.mft (raw, json)
Hash identifier: SBMrs6doRj4Ni3LYE1jVijLvCf/gSy1CjuMZKkp2LV8=
Subject key identifier: 08:7B:E9:39:D4:88:0F:E5:97:5E:48:C4:92:D4:A4:7C:45:F9:08:43
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 0195662DFFD36BFADEE99B8B72A7EFEF9920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
Manifest number: 1485
Signing time: Wed 05 Mar 2025 12:00:45 +0000
Manifest this update: Wed 05 Mar 2025 12:00:45 +0000
Manifest next update: Thu 06 Mar 2025 12:00:45 +0000
Files and hashes: 1: 1B8mpuLd4l3xHa-BKm83njlTZ8Q.roa (hash: NFyRQKkVILIRdm2bXpnR0CQXfCBlG6eA/nhE2P0DdR8=)
2: 7MhALy-qswSHn_cSz8v1rlK2aZw.crl (hash: IAWbJQxsHBmq0+VmIZ+m+lvVhqmyocf8yzdTX/lHyRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:2d:ff:d3:6b:fa:de:e9:9b:8b:72:a7:ef:ef:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Mar 5 12:00:45 2025 GMT
Not After : Mar 6 12:00:45 2025 GMT
Subject: CN=087be939d4880fe5975e48c492d4a47c45f90843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:cf:a5:82:5c:40:c8:fa:1d:b9:c8:fb:22:
ae:0e:4d:06:95:af:a8:75:27:fa:33:62:71:a8:8c:
7f:ea:4b:d4:d8:00:f5:f9:05:c7:71:d5:e1:7a:3a:
aa:1d:ae:e0:4b:96:33:ef:1d:48:8c:37:96:f2:fa:
8c:4f:c2:c4:27:71:9e:37:9d:94:d6:28:ee:b6:c3:
5e:43:30:e8:8b:f0:d8:21:e0:82:e4:60:f0:50:5c:
bc:30:5b:17:1b:73:7a:3e:af:e9:60:4c:3e:f9:77:
df:d7:8c:82:7a:1e:f7:66:84:45:f4:3e:37:57:1f:
d9:b2:d8:2b:d3:2f:b4:84:af:a5:c9:f0:25:84:4e:
39:fb:7b:34:c3:ec:a1:00:57:fa:e0:b7:73:13:ad:
ef:21:2c:36:a9:b2:78:4f:de:e7:59:aa:c9:75:15:
55:4d:cb:3a:dd:14:3e:78:ac:cf:54:10:e5:14:d4:
6f:ab:7a:ec:b6:21:52:4d:a0:23:93:6d:40:c9:35:
7f:2e:ad:9f:86:df:44:32:00:f8:d9:eb:64:02:44:
32:2d:4e:56:71:f2:ce:b4:82:9b:2f:cb:63:6b:e7:
f7:94:8b:7a:cc:c0:e3:43:a0:bb:7c:42:f6:ee:4b:
ef:73:e8:72:26:a5:e7:5e:9c:1e:5c:23:0f:58:aa:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7B:E9:39:D4:88:0F:E5:97:5E:48:C4:92:D4:A4:7C:45:F9:08:43
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:40:4b:67:c4:30:00:1f:ce:19:0b:f2:10:69:54:10:f8:
a5:4c:ba:56:db:64:0e:45:5e:12:2b:50:78:ef:43:78:d2:32:
b5:ba:b8:45:70:8d:db:09:1d:70:6a:46:51:c9:42:36:b2:10:
d0:c1:e4:c2:0e:e8:71:d5:6f:22:86:87:11:7d:8f:35:92:38:
fb:bf:bb:6d:3d:c4:75:78:0f:7c:cb:69:5c:6b:24:ff:7e:d9:
57:e3:48:29:27:53:ce:fc:01:e2:b2:15:ea:27:f3:ee:cf:31:
3f:7b:65:84:21:bf:7e:43:cb:8c:86:e4:06:d1:8b:12:8f:93:
39:c5:52:ea:7f:26:02:9e:02:3f:29:ca:73:69:05:29:0d:ac:
86:c3:86:9e:2b:1a:e2:80:40:75:e2:ae:7d:1d:db:64:5d:b5:
12:bb:e3:b8:5c:48:06:31:06:b1:2d:e4:ee:65:9e:40:f2:ee:
44:a9:cf:07:f9:28:b8:81:4f:b7:fd:19:ab:da:8d:10:fa:a0:
b7:5c:31:4a:00:02:cc:a8:77:5d:2a:77:73:f9:9a:79:98:72:
de:51:9c:14:71:8d:4b:9b:d0:8f:ed:90:24:40:ca:10:b1:01:
c6:b4:bd:d2:5c:b2:4f:e6:a8:d7:8f:83:a7:7e:93:51:2b:ea:
9d:4b:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:22:21 2025 by rpki-client