Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: eVdpyHB4CcGAmOoa5OmstVD3wAL35/1DZ91HUNccOD8=
Subject key identifier: 44:84:20:11:25:9A:81:0B:36:52:B4:47:52:C9:53:3E:39:41:D6:7B
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 0194BBCE85D9BB4003B8FD51AD8F4B2F9043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 0126
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: 2DNgqUKM0zbPquC9j4qAD2k2AogB+ALdbUPbY1QC81s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:d9:bb:40:03:b8:fd:51:ad:8f:4b:2f:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=44842011259a810b3652b44752c9533e3941d67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:6c:f7:90:65:15:be:97:54:37:42:46:61:
d7:38:7d:14:7b:19:d6:f7:f7:f2:7b:41:a3:52:16:
82:47:6e:bc:20:51:3f:a4:d8:76:83:6a:b9:92:fc:
1f:b0:8e:3d:26:e9:2c:e8:89:0c:11:96:15:3d:28:
8a:60:0e:6c:29:21:f7:43:21:61:4a:81:7d:73:76:
a7:da:f8:a7:a0:84:15:c9:9d:38:dd:22:a8:b8:66:
13:b4:c0:43:b8:12:9e:36:0a:45:71:15:7e:12:ac:
09:67:86:59:22:6e:af:81:ce:ce:d3:c0:a7:27:d3:
bf:68:c6:95:e6:03:7c:7e:b5:33:d0:b1:51:f7:39:
65:a9:72:c2:9f:3c:b5:de:ab:77:16:e1:bf:0d:06:
c2:dc:ab:98:c5:78:32:f8:67:80:e8:ef:83:e1:da:
dc:8b:10:d3:0a:e6:1c:3d:69:af:12:e0:09:aa:16:
91:f1:26:87:67:4d:cf:30:64:8e:f4:d5:6a:f4:84:
ed:a5:45:3c:d0:38:9a:0b:a6:81:b2:da:0e:9f:21:
b6:5e:56:d1:0b:c7:b5:80:87:cb:45:60:4b:89:9a:
6f:5c:cb:c5:75:05:b6:3f:c0:fc:01:16:6c:80:61:
aa:18:1d:48:a2:73:25:d1:ab:58:4a:a1:d1:07:02:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:20:11:25:9A:81:0B:36:52:B4:47:52:C9:53:3E:39:41:D6:7B
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:bc:99:e9:5c:cd:dd:79:b1:51:8e:89:28:a4:26:19:84:
e7:35:50:36:1e:f5:36:73:4e:31:31:e5:9b:31:84:e6:4e:ad:
ff:86:56:b0:32:6d:a7:bd:8c:47:14:6c:1f:b7:18:3a:53:10:
9b:63:a8:38:4a:63:9f:00:26:3a:39:1f:0f:6f:08:4c:4d:79:
32:ea:8b:a4:a2:09:b3:c6:0f:10:be:8c:ca:81:58:66:68:74:
2e:0a:14:00:0e:84:cb:4b:6c:46:68:fa:26:8d:14:8b:70:ea:
69:44:e9:0a:56:ca:fb:fb:87:e0:11:d1:b2:c9:f2:4a:dd:6d:
41:d6:63:8e:1b:dd:a8:4f:68:9f:48:da:1c:08:79:4d:90:19:
3e:24:6c:d0:84:16:07:60:ad:a2:a8:79:3f:08:48:54:a6:fb:
9e:f4:a2:4a:f4:df:fc:aa:f7:af:16:93:92:da:c7:8f:49:b2:
e6:d0:da:64:53:8f:b0:8c:67:bf:6b:aa:ad:95:74:4e:18:bd:
e5:5e:d0:cc:ac:02:60:a6:3f:27:a8:c6:a7:87:18:56:13:66:
f1:d9:1d:1c:45:42:82:d8:61:b9:c6:61:a5:6b:48:43:80:f9:
17:c9:c6:f6:f1:3e:54:b3:04:93:e8:b9:93:2f:9b:84:98:41:
42:6b:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client