Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft
File: 7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft (raw, json)
Hash identifier: TG2426Y9pP7lvpj3mnSS2AXPH0mkZ0tUaP/oSSLi024=
Subject key identifier: C7:D9:BF:49:3F:4E:BC:DD:B0:EB:2F:F0:61:F7:CE:B4:A1:69:EB:28
Authority key identifier: EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
Certificate issuer: /CN=ece5feab893d52681ce5395de08f90830d3c322b
Certificate serial: 018D9C8BE9CA08FB19759BBBA3E2A16448C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft
Manifest number: 0AE2
Signing time: Mon 12 Feb 2024 09:00:31 +0000
Manifest this update: Mon 12 Feb 2024 09:00:31 +0000
Manifest next update: Tue 13 Feb 2024 09:00:31 +0000
Files and hashes: 1: 7OX-q4k9Umgc5Tld4I-Qgw08Mis.crl (hash: h3UKdV1b4OQTsf3rHq2pel9Rb1eQ9I+is6i+WKhdvzQ=)
2: Bo5l0GGylbBCom_9GeeWBeoUWLg.roa (hash: P3DpnX8HGL+uX6+cgAe1vHSkOhuKy8TLCM5Vkzz8kcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:8b:e9:ca:08:fb:19:75:9b:bb:a3:e2:a1:64:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece5feab893d52681ce5395de08f90830d3c322b
Validity
Not Before: Feb 12 09:00:31 2024 GMT
Not After : Feb 13 09:00:31 2024 GMT
Subject: CN=c7d9bf493f4ebcddb0eb2ff061f7ceb4a169eb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:58:c9:6c:f2:45:0e:c0:00:50:7d:fa:0b:
bf:31:b5:2e:92:5d:bb:f1:c4:26:b6:30:a4:06:e1:
43:c0:87:9b:02:3d:65:61:e3:f7:15:d3:3c:2d:56:
d5:5d:a4:7f:e6:c5:4a:d7:1c:49:7e:f2:31:6e:39:
75:31:b4:3d:84:2a:8b:86:81:e9:fc:11:91:75:89:
52:79:a9:77:63:23:cf:86:19:18:81:7a:c3:4c:b3:
3c:3a:fd:38:bf:0e:10:34:92:99:30:ed:69:2e:82:
26:d8:5e:42:fb:b6:57:0b:13:7e:20:01:16:f4:d6:
70:57:65:8d:96:bc:bc:ff:11:10:b9:2f:d3:ed:41:
08:0e:41:e7:fe:ac:ce:c5:28:fe:b2:73:50:f4:37:
cd:c2:92:95:53:d8:b5:18:17:f4:62:48:97:1f:f2:
46:c5:06:b3:a9:23:b7:18:9c:f8:36:2d:72:2c:36:
56:63:8a:2a:a0:3c:f1:3f:8b:e4:b8:76:cb:7c:a6:
c3:67:d3:e5:f9:c8:ed:60:92:11:81:fe:91:a2:09:
6c:40:3a:d7:93:4a:8a:65:28:ff:b0:fd:4b:c2:17:
97:8c:34:b7:59:47:8c:f4:64:35:82:9b:9e:b6:59:
24:b9:a1:cb:8c:cd:58:7c:c0:6a:1b:b1:02:8f:a0:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:BF:49:3F:4E:BC:DD:B0:EB:2F:F0:61:F7:CE:B4:A1:69:EB:28
X509v3 Authority Key Identifier:
keyid:EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:63:8a:19:f3:69:5c:9a:8e:71:b6:e6:59:f3:9b:db:14:
92:7c:9f:7e:f2:0b:76:8b:42:78:78:0c:82:6f:20:29:60:f3:
48:af:9e:2e:30:fa:04:b5:7f:b6:be:4d:41:d4:81:27:65:d9:
c2:22:1b:aa:88:58:dc:30:e1:b0:a0:2b:0f:3b:f3:b3:f6:18:
13:fc:04:9f:ce:73:2a:93:4f:4c:48:7e:60:f7:86:f3:ee:ea:
14:ae:2a:99:af:65:bf:fa:18:e5:94:e7:8c:3c:d1:c1:a8:04:
a2:25:18:9c:01:c8:03:df:55:47:ce:3b:3f:7a:80:3a:66:27:
81:55:86:b9:2c:54:e2:80:41:94:50:f1:3a:06:10:0e:1a:27:
88:e0:6c:92:50:b8:ac:c3:fb:41:83:66:08:e5:ee:84:6b:02:
dc:5f:39:4d:76:56:70:0b:a8:96:12:40:d0:26:f5:78:f4:e3:
21:a0:58:87:e9:f5:22:54:23:e7:ea:f7:7d:96:64:0b:00:a5:
20:52:fe:4a:fe:b1:4c:b3:85:b0:80:24:d7:ab:a1:d5:92:31:
59:68:74:c9:f6:b3:ac:c0:d8:b8:1d:be:03:17:d3:2d:e7:8e:
6c:59:9f:6b:f4:d2:91:9c:41:91:8e:b3:c4:ee:23:cd:5d:57:
9a:b2:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:43:49 2025 by rpki-client