Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier: kMp9STPxwn2BTLnnmL9AyXzcExjQKWf7TjX3c/NYBEY=
Subject key identifier: BB:19:D0:87:31:EA:59:81:52:B3:0E:14:50:33:2B:62:FA:1C:37:C8
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer: /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial: 0194BBCDD3670DBFD8451EE1A029917927E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: 0100ITByldq9rr741O0HDe95hOWAZrnH23IQXtPXuS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d3:67:0d:bf:d8:45:1e:e1:a0:29:91:79:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=bb19d08731ea598152b30e1450332b62fa1c37c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:f7:78:91:84:0e:5d:85:c0:4f:e0:c0:39:
3b:3b:52:01:02:44:dd:c5:7e:6c:20:35:72:7b:7e:
56:e3:1e:9b:42:f3:69:22:9c:c9:7d:a1:80:58:5c:
d0:39:5a:eb:55:fc:d8:8d:61:e4:57:29:d3:84:90:
4b:9f:78:c9:e8:09:0c:fa:92:1f:aa:75:55:32:df:
8f:ea:17:26:4a:e3:ef:1a:b6:00:cc:e4:37:d5:15:
35:85:37:72:2a:ab:11:64:cb:2e:a5:b2:3f:5d:c1:
68:26:e8:d0:92:bb:51:9b:42:7e:89:40:82:c1:20:
9f:ea:b6:32:a9:68:1b:7e:3a:5d:36:5c:b7:6e:bf:
7b:20:84:9f:8a:00:74:12:b1:20:78:bc:90:8c:9f:
f2:41:84:67:48:6c:31:d0:69:89:a2:9e:4e:01:4e:
24:93:81:1b:ce:16:31:5b:5a:05:8d:b0:fa:9e:2c:
83:7a:06:7b:d9:8b:44:44:db:7d:fc:62:c5:c7:60:
4e:d7:df:fc:b9:d1:60:f9:6f:2e:2e:1b:36:f8:c9:
d1:d5:29:02:47:2f:e6:10:2a:9d:4e:11:65:03:37:
db:8c:3a:98:11:1c:bd:10:76:13:2f:07:e9:de:ca:
87:72:f4:c4:4a:07:b6:24:69:8f:91:37:06:4c:f8:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:D0:87:31:EA:59:81:52:B3:0E:14:50:33:2B:62:FA:1C:37:C8
X509v3 Authority Key Identifier:
keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e7:5d:14:b5:4a:62:7e:c9:e3:c6:cf:35:e2:ae:96:dd:eb:
fe:fe:20:7e:cd:a9:87:8e:71:85:40:3b:d1:c2:18:e3:20:b0:
b2:03:ff:bf:50:62:9a:ee:5e:4c:29:e2:f5:4e:c7:79:37:98:
f7:72:dc:2d:d6:ea:69:78:6b:47:c0:a1:a4:8b:07:11:8c:84:
67:b8:a4:34:6f:6d:a4:31:be:f9:e3:04:f5:82:bc:bc:23:52:
85:0d:e3:cf:5e:07:d9:31:02:0b:fc:49:7c:55:07:23:7d:75:
80:78:13:3a:b0:84:4a:3f:0b:e8:80:88:ea:10:eb:d1:87:69:
e5:14:57:ac:e7:2a:ce:40:d1:cd:dd:49:b0:55:fb:ce:e3:95:
24:a0:c3:c7:94:b7:f1:13:07:46:bc:9a:39:d8:a1:79:c9:ef:
66:c6:31:83:c5:17:ed:e5:32:1a:7e:f1:2b:80:cc:7d:b7:db:
57:13:e4:49:0c:9d:6d:79:b0:f6:86:78:c6:19:ed:ab:84:d3:
a1:1e:a5:37:2e:58:9d:c6:cb:ea:d1:0e:59:b0:04:e4:95:5a:
04:83:18:96:63:3e:ef:ed:1f:d1:7a:34:24:cc:68:9a:39:80:
f8:aa:1e:60:27:67:8f:f8:50:87:3b:f1:1f:a8:de:4e:44:77:
da:1f:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:43 2025 by rpki-client