Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: tvlPIH4pPV5z/XZi13RS4/bOovEd44lPVAZRMsseKQw=
Subject key identifier: FD:90:54:60:A2:66:E0:20:60:CA:F6:3C:0A:F7:49:63:0A:00:E6:90
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 0194BBCEF6FD6BD5F3F427C6CD14B2586C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: BwVkMaFczPQDttZ/9IlhqLUewCfuWhJqz8HJ+qRPlcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f6:fd:6b:d5:f3:f4:27:c6:cd:14:b2:58:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=fd905460a266e02060caf63c0af749630a00e690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:78:64:89:4c:7f:dc:35:4f:80:7e:9d:7f:
9c:3b:bc:43:67:99:50:ae:93:af:37:65:23:c6:ac:
e6:4c:b7:aa:f0:c8:3b:de:b3:9a:c7:94:02:2d:1e:
07:96:f3:f7:f6:f1:29:9a:8f:73:2f:d3:e7:81:03:
35:c0:73:9f:ad:ee:21:94:34:0d:44:af:81:b9:4e:
56:8b:b3:ae:f3:34:af:fd:d2:18:26:9b:a4:33:fe:
34:45:92:79:20:5a:bb:d5:33:91:02:1a:ce:0c:eb:
4c:03:8c:1e:0b:78:46:31:13:2f:34:2e:c2:27:2f:
26:fb:59:98:cd:2c:5b:3f:5b:46:83:a1:58:57:89:
b5:14:29:9f:09:2c:f6:5c:a6:a6:3e:e9:49:69:98:
a9:6c:ec:d0:0a:59:9c:e0:61:77:48:51:9f:d6:c8:
97:26:cc:5d:42:ea:92:2d:61:11:79:fc:69:5c:6a:
e0:29:f0:3a:72:33:7d:c0:a7:79:9b:08:cc:f8:57:
b9:2d:c5:6b:fd:be:8d:0e:f6:ef:1e:e0:60:49:fb:
f4:aa:07:76:53:5d:ce:11:60:81:fb:a3:bc:ab:73:
24:89:57:67:4c:95:45:69:b9:14:35:6e:78:3a:be:
35:1e:9a:85:63:a3:14:84:c6:5d:93:a7:e7:19:0a:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:90:54:60:A2:66:E0:20:60:CA:F6:3C:0A:F7:49:63:0A:00:E6:90
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:15:9d:0a:04:df:a7:9d:fc:74:73:7e:89:7f:42:85:51:66:
9b:d3:7f:55:50:53:50:3e:ac:26:44:0c:ba:0c:06:50:ff:91:
f4:b9:56:0e:76:aa:89:d9:93:37:f3:12:f8:63:0a:48:f5:75:
1a:ee:be:aa:ef:c2:43:2d:36:6b:26:28:1f:59:0d:ab:9a:da:
57:aa:8d:b1:7a:8f:2c:1b:6d:3d:1d:ed:94:d9:6f:39:fc:ca:
5f:35:a0:74:94:74:1d:83:ce:39:f2:f1:ec:15:83:61:f7:24:
3c:05:7d:4f:2d:72:44:d8:cb:db:92:0e:83:87:8d:1e:05:ef:
7b:80:e5:47:d2:4f:bd:98:4a:4f:6d:10:b1:9c:f6:e9:89:54:
b7:53:32:8b:2f:f0:5f:9c:cd:d8:09:8a:0d:5a:f2:94:e2:3b:
43:17:e6:62:4b:51:f3:82:07:b5:11:e7:e7:89:c1:f0:76:26:
94:f9:78:f0:8c:30:6c:2e:0b:86:2d:46:db:27:f1:70:65:99:
d2:c1:e1:d7:65:8f:79:b4:73:5c:89:d5:59:5a:b4:49:00:32:
3c:85:a7:e1:7e:ea:8b:2e:9d:91:91:9c:3b:bc:90:ed:b3:6b:
ea:e3:d2:cd:3a:3a:52:19:d2:03:1d:d5:f9:b5:93:1e:95:de:
cb:de:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client