Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: QfhMXv1dkjuTFB9GmE9L/8r2vAWMEPQm3cIKw0acSD8=
Subject key identifier: CA:C1:1F:17:89:98:60:5F:A5:3F:50:3D:7F:5A:20:31:B6:CA:A9:21
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 0194BBCDC6ED2FC7AE68D20AD0F01B7D951D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: PdvlBaGV3u+8+LCKzGbAPy+xN7xmzAYl+hkKgm0P/VY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:ed:2f:c7:ae:68:d2:0a:d0:f0:1b:7d:95:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=cac11f178998605fa53f503d7f5a2031b6caa921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:68:2e:7b:0f:1b:69:10:80:e1:2c:ce:47:
80:1a:06:5b:22:f8:4d:6a:89:4c:71:6e:d3:4b:7a:
88:51:df:f4:49:2c:84:52:64:c0:d4:b0:34:77:27:
5c:cb:68:0e:54:be:a6:f9:49:1e:c5:56:5f:97:78:
cd:43:cf:c0:c2:21:ab:8e:ca:fb:5b:8d:4b:c0:4b:
7b:c9:00:1f:0d:5c:02:5f:59:e2:d4:fd:04:fe:64:
7a:e2:38:ba:bd:cd:2e:f5:75:58:b7:e4:a7:c2:03:
6f:c8:04:cd:e5:4a:af:e4:87:d0:80:32:4f:88:b9:
14:18:94:46:ad:48:eb:98:21:fe:20:31:dc:94:46:
ab:9f:dc:42:42:07:cb:69:e0:33:9c:a7:cb:63:82:
0b:4b:29:9d:96:09:79:cf:de:8d:b5:ff:cd:ee:76:
2a:44:f9:c8:bb:a9:43:9e:a5:14:ac:54:e1:ef:65:
5f:60:59:39:15:03:bc:48:96:ec:17:0c:4a:54:b3:
33:aa:6b:8c:83:40:58:71:97:0b:14:55:71:3c:c9:
ee:f5:30:1d:b5:58:cb:8c:ec:0c:40:ac:80:95:97:
a4:dc:1c:fe:1d:b7:6e:2f:97:9f:f2:61:17:55:fc:
26:79:f4:42:49:de:5b:63:67:ec:fc:53:dc:31:36:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C1:1F:17:89:98:60:5F:A5:3F:50:3D:7F:5A:20:31:B6:CA:A9:21
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:cf:97:36:67:cd:0b:a1:08:0b:f3:ed:87:43:af:96:3a:24:
8c:bc:b6:04:08:fe:90:e4:f7:70:ba:96:34:24:6a:c6:49:1a:
36:1a:56:f5:c3:29:fd:cf:d2:ee:5c:06:85:93:ed:da:f4:50:
e6:8d:9c:e9:55:7a:df:0c:92:2d:33:ea:dc:18:5c:f0:50:60:
42:5a:9e:02:64:06:44:2d:97:34:27:b3:c6:04:1f:45:2f:86:
9a:b3:ae:ad:76:ef:72:e0:74:e8:a6:39:0e:d7:80:ec:00:bb:
23:90:47:71:17:90:31:e0:b9:6e:cd:85:82:d8:97:2f:3a:9b:
cb:50:2b:31:00:54:ea:d2:83:3e:0b:66:46:de:ef:cb:47:58:
9f:04:67:06:5a:e0:c2:35:88:7b:31:b4:03:cc:87:a3:b0:f0:
99:06:fa:14:0f:7b:5c:84:35:66:51:9a:c5:10:07:71:c3:4a:
0b:40:02:55:90:86:40:59:da:67:d0:07:52:eb:c2:c7:ba:73:
36:cb:23:14:d0:a0:dd:a6:be:48:60:c6:2f:44:68:53:29:f2:
f4:f8:45:5c:4d:83:30:33:d8:ec:1a:13:01:09:28:8e:da:03:
69:54:7f:65:a1:61:18:43:b1:29:49:96:01:25:d1:7a:6d:82:
07:4d:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:09 2025 by rpki-client