Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 62SvgbQzjbuDlRnDc/MpRzg0R+n49uEnoqZnoDmvko0=
Subject key identifier: 82:30:09:FF:37:6E:96:8D:29:47:51:94:61:4A:3E:E6:AC:9E:B3:1D
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 0194BD17BF9E2D6FCD4D212B180487F03E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 0ED6
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: rSys7fFE0ucZDq2WjGF3gLeHjsAr8u6wS3izsR+vZtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:9e:2d:6f:cd:4d:21:2b:18:04:87:f0:3e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=823009ff376e968d29475194614a3ee6ac9eb31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:8f:1e:5f:82:45:0b:1b:a8:4d:b0:2d:82:
8b:cd:9a:9b:e6:9c:75:c0:b2:7e:90:78:a7:b3:69:
4f:7e:4a:f8:17:4f:7f:45:7a:f4:64:0a:55:6c:fc:
d1:fc:45:e3:09:54:f1:86:10:4d:ef:64:29:d1:6e:
a6:b3:49:13:79:fc:b0:62:d8:f6:8c:4c:5c:75:cb:
57:ca:11:b1:98:5f:fb:46:af:45:e1:79:8a:8e:91:
5f:68:06:d6:83:7c:2f:ac:9c:ec:46:42:47:2f:73:
9a:ac:bf:66:87:31:b3:6b:ce:5e:7b:5a:7c:36:e1:
dc:eb:a5:fa:4d:22:fe:37:ca:c7:77:75:cb:8b:aa:
33:e7:9e:cf:42:18:7e:0d:c2:06:f0:a4:83:e9:1d:
35:97:81:8b:72:7b:a4:b9:25:d7:4f:a8:43:52:ac:
88:f4:fb:b3:95:5d:1b:d7:b1:f0:87:7f:49:65:65:
2f:c7:69:b2:90:ba:b3:98:3c:98:0f:d2:41:88:7c:
89:f1:a6:62:94:3d:4d:b2:0a:85:b4:8f:88:1a:5d:
28:02:94:79:79:1a:b0:77:66:32:d4:51:75:54:f1:
fc:b1:8e:55:61:81:39:b4:59:6e:8b:38:90:f3:fc:
23:d1:d7:11:f3:fd:ff:71:4b:46:fc:34:f2:89:a0:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:09:FF:37:6E:96:8D:29:47:51:94:61:4A:3E:E6:AC:9E:B3:1D
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:14:f4:cd:fc:f6:80:c1:1f:e6:7b:3b:1f:37:89:b5:5e:
5b:8b:5e:5e:22:85:7d:b9:e7:ed:86:05:26:bd:94:92:da:17:
43:de:47:c7:4c:a4:de:37:4b:6a:f1:32:1d:1b:cb:a8:24:f8:
f0:23:2c:40:b1:62:fe:fe:04:27:80:91:86:c9:12:8c:a3:68:
36:d2:8f:68:90:e3:a0:b0:af:30:3d:87:aa:dd:f8:d8:aa:7d:
01:88:0e:93:d4:1f:dd:3d:f8:0c:41:ce:39:e3:db:79:49:7a:
15:ed:41:3e:2c:38:e6:96:fa:3b:a4:ff:4a:b2:9f:e0:ef:67:
bd:23:78:4e:68:bf:9d:20:f1:2c:38:8c:12:1a:9d:99:37:d8:
33:f7:fc:0f:ab:29:fe:c8:b0:2f:52:7d:7e:a9:41:88:da:21:
37:32:62:77:e6:ab:50:9a:14:ad:08:63:cc:3b:67:8d:9f:d5:
3a:25:ac:28:f8:c5:2b:46:ce:4a:b7:67:72:49:d3:0e:4e:de:
de:9c:a1:d3:8d:6b:11:89:0e:3f:9d:d8:6f:f2:8c:cb:b9:b1:
8c:9c:94:ea:a7:23:c8:ff:7c:d3:5c:f1:33:78:dc:00:ef:c3:
7c:c3:cb:8e:c2:78:cf:0e:bf:d5:3b:9f:b0:c8:ad:dc:73:1f:
99:1d:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:20 2025 by rpki-client