Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: m3J7JHjouK/1KbAvzpucJbuUK+P7ssQoP02QDPAqySg=
Subject key identifier: DC:A3:01:4B:60:C9:FB:56:18:EA:2E:01:82:6C:75:8F:5B:27:15:EE
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 0194BBCEBA6871E6AB89479ED3222113478E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: GOKz5raDy6H/zBys3EkGAQNJpHhYpoVM8jtdMsmwwos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:68:71:e6:ab:89:47:9e:d3:22:21:13:47:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=dca3014b60c9fb5618ea2e01826c758f5b2715ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:59:cf:af:e3:c0:99:f5:75:a2:bc:20:b3:
2f:ff:e8:07:b9:c7:ac:0a:9a:9c:8f:c9:4a:8a:0d:
28:8a:6f:05:dc:86:62:39:9f:b0:95:af:00:a8:f6:
bc:6c:48:60:a8:c3:16:f0:c7:9f:f6:30:4d:82:4e:
04:f7:ff:7d:60:a1:53:1d:de:84:f0:4b:c2:bf:29:
ce:82:17:ff:f8:bb:98:13:85:4c:13:7e:f4:c8:30:
98:c7:f6:00:b8:fe:45:9a:ac:02:be:9a:d6:d3:6d:
73:53:04:5f:b3:04:c7:56:a5:37:10:fb:e9:71:be:
db:1f:a4:7c:a4:8c:cb:5b:48:bb:94:4e:ea:74:0a:
c3:57:e1:c6:c8:e4:e2:00:40:30:c6:01:d2:4d:5a:
be:4f:c3:da:22:8f:30:99:8f:2e:f2:1e:2b:a1:33:
f1:2c:46:1b:37:96:3c:04:3c:bc:77:9f:a3:6f:48:
b4:53:5c:1f:3d:56:61:ba:68:0d:0a:15:19:c5:5b:
e5:08:b7:b3:86:27:f0:08:7e:f3:8f:9d:d9:28:5e:
7d:41:20:ce:06:60:b5:c7:a2:01:7b:29:37:2c:a2:
5f:1a:1f:a6:c8:c2:1b:d0:cb:ab:61:87:7f:15:83:
85:db:0b:8e:bb:72:93:3b:d3:96:b5:49:53:8d:ad:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:01:4B:60:C9:FB:56:18:EA:2E:01:82:6C:75:8F:5B:27:15:EE
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c2:60:f5:e7:e9:ea:69:68:12:73:cd:b9:b2:7e:9c:5a:2f:
b4:7e:40:38:12:63:fa:cf:76:1e:7f:c0:98:f5:14:16:4d:1a:
c6:61:3f:6c:04:79:c5:d0:91:34:b9:c3:1c:fa:ee:f1:5f:03:
31:81:a6:cd:cc:5e:a6:72:6c:05:9f:e2:7e:a8:4a:94:e0:71:
d4:85:5f:c6:c1:31:dd:07:39:02:73:80:64:86:e6:54:a7:f4:
7d:25:22:8d:93:6a:05:a4:d6:75:da:c6:8c:f1:e2:a8:e5:c2:
ff:14:51:f5:e6:c5:c5:b5:3a:01:99:43:a1:98:d6:a2:38:d4:
ea:37:ab:57:1c:69:8c:c8:d0:be:01:fe:3c:27:ba:73:19:04:
7e:aa:cd:7a:13:c3:b2:64:fd:cd:cf:78:2d:8a:01:59:18:9d:
1f:f4:9c:ad:97:48:1f:41:71:53:32:d5:54:3a:b7:83:8e:a4:
f9:78:8c:68:11:73:7d:29:29:4a:9c:8d:f7:e5:aa:9b:a7:23:
dd:18:b1:6a:01:50:d1:3c:6a:78:34:fc:7c:d6:7a:64:34:c0:
9a:3f:77:2f:15:73:c1:a8:4e:7c:6d:95:ee:cd:09:ba:62:37:
dc:2b:eb:71:93:78:c0:a7:84:cf:ae:e0:58:b7:11:8c:82:48:
71:47:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:19 2025 by rpki-client