Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
File: 7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft (raw, json)
Hash identifier: HXehp6Xf2UlAojCalUWH2WHCDcGna1eEtaRJxTKVJ3M=
Subject key identifier: B9:18:68:57:DD:79:EF:AC:37:09:5A:D6:0C:A4:BF:38:33:48:13:D3
Authority key identifier: EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8
Certificate issuer: /CN=ee527c9a03562902328374e15099c365846a6be8
Certificate serial: 0193AA38F4067F086BD88164E3F6382BE55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
Manifest number: 1399
Signing time: Mon 09 Dec 2024 07:01:19 +0000
Manifest this update: Mon 09 Dec 2024 07:01:19 +0000
Manifest next update: Tue 10 Dec 2024 07:01:19 +0000
Files and hashes: 1: 7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl (hash: rj77avzPEV1792bQMhxU301n0CYoXEFArwG5bHB7mJQ=)
2: ih-u8mSFv40UxhXyOm_u4-X6-tw.roa (hash: klWrPvGSxFkLCtYkV52VKMOc0yabch8S9qe5lFh5SVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:38:f4:06:7f:08:6b:d8:81:64:e3:f6:38:2b:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee527c9a03562902328374e15099c365846a6be8
Validity
Not Before: Dec 9 07:01:19 2024 GMT
Not After : Dec 10 07:01:19 2024 GMT
Subject: CN=b9186857dd79efac37095ad60ca4bf38334813d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:53:8f:89:42:28:86:30:ad:3a:76:13:c0:
22:f6:d0:6d:b5:ac:07:b0:09:7d:7d:4d:b6:5c:96:
52:6d:79:3c:46:df:8a:37:6b:ca:6f:34:29:10:1d:
e6:b3:6c:cf:b6:d1:45:b4:ea:95:95:2f:f2:04:0a:
bc:2f:15:99:07:3c:e2:ee:ea:4d:91:22:3a:89:fe:
fe:a9:8f:1c:58:5c:85:fe:44:fa:7a:24:89:86:e9:
81:67:7a:71:9a:32:1c:72:b4:99:bf:8f:cb:b5:e2:
6e:44:cd:18:ee:33:e4:f5:34:58:d6:a9:ae:9e:27:
35:10:9d:6f:16:42:d2:85:9a:a0:f8:0b:93:a2:b1:
d6:f1:ec:19:13:eb:ca:e1:01:26:17:4f:68:ca:a5:
0a:ed:93:59:01:a6:2d:33:34:6a:cc:ed:c2:d8:93:
bc:86:d2:be:db:2b:6a:8d:4d:bd:a3:3c:b5:a3:9f:
a5:f4:99:e5:5b:90:92:f0:e5:73:6f:e3:3c:65:6c:
66:b8:6c:d3:2a:ef:d9:68:9e:01:e2:8c:21:d1:2a:
f4:e4:09:8a:5c:4e:af:9f:9c:b9:40:f3:01:88:2e:
9e:aa:31:66:2c:0b:77:ea:96:4b:35:83:e3:bd:8f:
65:0c:4f:f8:f9:96:7a:ce:50:2c:0b:b5:66:a2:cf:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:68:57:DD:79:EF:AC:37:09:5A:D6:0C:A4:BF:38:33:48:13:D3
X509v3 Authority Key Identifier:
keyid:EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:c6:76:de:91:b9:ba:19:dc:93:68:fd:fa:aa:7c:c6:c8:
25:e6:36:47:f1:90:33:3b:ff:32:2a:2e:f9:2a:5b:10:d9:e2:
90:80:8b:db:fd:8e:23:c4:a0:d1:e7:d6:a2:2b:a4:71:11:e3:
85:cb:3a:35:cf:01:6c:53:a0:ab:79:e1:e7:8d:4b:32:ce:40:
ce:d0:f4:0d:b1:b8:48:da:4c:20:d1:bc:fe:e8:c5:85:01:44:
53:7a:ff:32:71:89:a2:eb:6d:f9:bf:be:af:ce:18:2d:95:ff:
8b:2a:56:72:6a:56:20:75:74:42:ea:28:30:95:a5:54:3c:8b:
61:a9:bd:dc:ec:db:fc:5c:b4:27:ee:ac:a1:c5:34:28:37:6c:
55:fc:2f:2a:64:a6:76:88:7c:e9:7c:08:2f:b3:e1:56:b4:4e:
11:16:e6:da:17:63:86:07:a1:72:c7:d3:d0:1c:81:a5:30:82:
79:c4:da:7d:c4:a2:65:6b:41:93:57:66:70:88:3b:c7:09:90:
c3:9b:ce:ca:36:81:39:d2:b7:70:02:64:aa:ef:92:9f:24:6a:
b7:1a:95:73:99:ed:39:6a:38:03:7b:d9:07:6c:59:9d:93:40:
b1:dd:f5:82:d1:51:72:91:69:45:15:25:82:14:76:1d:24:1a:
61:27:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:56:07 2025 by rpki-client