Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: GW0xykZ8m0M98y/kprM9+3MaL08TJ/8XsLMCc649eBA=
Subject key identifier: 9B:B8:31:08:5C:48:42:1D:BE:3A:41:F8:37:B8:41:7A:80:AA:FD:CD
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 0194BBCED36AE100D6FEA44620016093F10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 087A
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: 5xej930ZkP9YTiIyBasWhQVgp06yECiR2rHzW6Arv08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:6a:e1:00:d6:fe:a4:46:20:01:60:93:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=9bb831085c48421dbe3a41f837b8417a80aafdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:ca:fc:39:6b:8a:bc:4f:b5:3c:d6:74:b3:
3f:3d:70:03:ec:48:8a:ab:ee:ca:a9:f0:bc:2d:05:
a6:ce:52:d4:91:6e:15:46:a9:ce:72:32:59:59:9e:
73:8a:da:aa:19:6e:35:c7:42:2e:79:32:c7:9f:09:
c0:e9:44:a4:7b:c0:20:b2:bb:0d:b3:cb:6d:b0:92:
6d:31:1e:47:ae:17:90:9a:c1:ad:3b:fd:03:82:1a:
ca:34:55:1e:74:39:e3:00:22:4d:1a:bb:34:6c:9a:
32:3e:9a:3c:03:6a:a4:06:df:cd:96:6b:0a:17:80:
f7:ad:ab:4e:57:93:7e:c6:ee:4d:ff:7b:80:cf:54:
65:97:79:d4:8a:26:2a:01:c2:a2:e7:6c:e6:98:00:
94:6c:58:42:59:71:82:21:22:b5:73:78:51:23:a0:
cd:ca:2d:44:b0:0d:1a:5b:2d:30:64:1c:75:5d:5c:
2f:65:f7:fc:cd:5c:c2:6b:2a:b7:b8:8e:18:3e:8a:
00:55:93:58:69:db:6b:7e:cc:ba:1f:86:45:71:f7:
e7:47:ca:5c:3e:90:dc:46:3b:70:b9:45:4c:83:4d:
de:66:4a:8d:8e:94:70:7d:0a:4f:e7:de:78:85:56:
21:80:99:92:71:17:2e:00:64:da:40:05:53:5c:22:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B8:31:08:5C:48:42:1D:BE:3A:41:F8:37:B8:41:7A:80:AA:FD:CD
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:0c:09:f4:97:92:eb:48:bb:37:56:f1:1b:bc:99:86:cd:
fd:e6:a4:ae:f4:fe:bf:c1:8e:af:d3:e1:4c:ec:0a:97:c6:df:
1b:35:ff:1a:e2:d7:e1:c4:c4:26:50:ed:10:9e:b8:c3:8b:46:
a9:3d:fa:da:1e:9a:6e:e5:a9:6a:59:7d:d7:ea:de:bc:5a:b5:
a9:83:e4:86:ad:a2:f3:da:db:63:1a:a0:ec:de:3c:2c:24:1e:
b0:3d:55:2b:74:b0:ab:ba:b2:fb:8f:f2:fa:bd:32:72:8b:38:
d6:d0:03:f0:d2:3b:ae:db:d9:91:62:dd:4a:d3:c8:58:5a:74:
45:b9:cf:4d:85:c1:35:42:9a:e8:c7:b2:48:5a:bd:8f:df:37:
34:c9:5c:bf:1b:6e:bd:08:57:b9:4a:df:c3:a6:04:4a:6d:70:
96:9d:4d:72:da:39:2c:04:53:a3:04:8e:ba:46:db:7a:a0:e3:
d0:9d:5c:f3:6c:8d:5d:fd:6d:d1:d5:87:0d:b4:81:ae:84:87:
ec:a7:88:1f:20:7b:6a:0c:83:1d:1a:02:b1:c9:7c:26:1f:fb:
1d:f4:a8:15:7c:a7:27:6e:af:ad:55:ec:0c:b4:87:fe:53:e1:
b3:21:cf:af:f3:a5:52:0a:1c:9e:e5:08:45:cf:6c:12:99:3a:
79:f1:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:19 2025 by rpki-client