Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: mc4r40jiCwg5K4hftXUK0oHzkiuSg7o1u/kzdNfYsdA=
Subject key identifier: C7:3C:0D:81:58:8D:B1:2F:79:A5:7B:4C:D0:26:27:1E:9E:39:EA:57
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 0194BC72C292BDCC3CE0D4C17232FAE7FC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0ACD
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: gpjZD1pWOHAi6v/00oye2A7H5rHaT1c85OZb2K6JV0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:92:bd:cc:3c:e0:d4:c1:72:32:fa:e7:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=c73c0d81588db12f79a57b4cd026271e9e39ea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:1f:22:9f:b4:4f:6f:8d:79:19:46:4e:77:
a2:ff:09:03:f2:67:7b:8a:41:65:dd:7f:e4:28:0d:
7c:ac:05:b2:10:45:f6:59:aa:38:07:dc:f3:d5:6a:
ed:a7:c2:d1:b6:d6:ef:19:ba:8b:6f:88:d4:d0:a0:
54:df:45:19:09:06:44:a6:40:ae:03:a1:1b:44:2c:
15:a6:2e:e6:1d:00:bb:4b:e2:75:8e:bd:de:8f:f1:
93:4c:43:84:51:26:24:13:54:ba:d6:ef:84:f8:44:
c6:53:81:af:17:26:48:ce:bc:59:b1:db:53:7b:81:
59:16:94:c8:5f:20:c8:55:8d:33:a1:3d:2a:51:9f:
8e:97:d9:95:a6:1b:6d:5e:55:56:3d:21:b6:57:40:
57:7c:3f:91:1a:38:23:df:3e:77:73:b5:c1:a8:80:
83:de:8b:5d:9b:68:a9:92:94:3f:a5:bc:57:c9:ec:
81:3c:48:ff:c6:89:30:4b:c8:b7:7b:95:41:0c:df:
14:d2:c2:a7:bc:6a:0c:c0:6e:1a:c7:f3:d8:57:87:
63:82:30:de:f4:47:02:85:39:51:ce:57:a2:73:66:
24:ec:b6:ca:b8:10:78:cd:fc:13:b6:c6:f3:9a:d8:
0e:78:bd:e8:4f:69:28:be:1f:f3:e0:46:e6:bc:a6:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:0D:81:58:8D:B1:2F:79:A5:7B:4C:D0:26:27:1E:9E:39:EA:57
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0b:2b:e3:8d:09:d2:37:af:3c:c7:05:50:18:c4:24:31:d8:
77:bb:74:b6:b1:e7:9d:fd:dd:f6:52:06:29:fb:a2:28:03:de:
5c:94:e6:a2:a9:80:48:59:a0:0b:42:2e:ca:92:ea:30:e9:c0:
20:05:10:f4:17:cc:47:7b:99:55:73:00:b7:74:f0:2d:f4:14:
b8:5c:7d:d5:a9:f9:a8:40:fe:dc:00:40:ab:ec:36:a6:0c:50:
e8:6f:a5:e9:e5:8d:b1:90:5d:dc:97:f7:9a:77:dd:7b:e4:91:
9d:68:ad:8f:bd:36:8e:c9:0e:04:7f:12:e0:25:7f:ea:4e:1b:
5b:4e:76:16:7b:a3:c6:68:48:63:47:a1:ec:76:ad:b9:ab:ae:
05:31:2e:2e:06:60:0b:8a:90:e7:7f:11:0e:d4:2f:8f:6d:ac:
1a:60:25:21:90:a4:f5:7a:4b:3b:2c:ce:8b:28:9b:ef:63:5a:
2c:40:53:3c:9a:30:f8:74:00:bf:d6:dd:6e:0d:35:04:dc:21:
35:6c:89:9e:ed:ec:2c:e7:e4:39:9f:6d:0f:86:20:ef:91:e8:
d5:16:48:6e:6f:85:34:c3:62:63:9d:0d:a2:36:8e:bf:7f:d5:
a9:d2:02:9b:1c:82:3d:b2:c1:89:90:95:44:e0:83:c8:4d:77:
2c:82:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:58 2025 by rpki-client