Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File: eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier: BqrWtRetO/vMJIeBCSECvOd8mOAh45wvgBHctymOmhE=
Subject key identifier: 89:D0:B0:EE:4F:F1:D9:FF:31:CF:39:D1:53:43:56:FD:2F:DF:AA:58
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer: /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial: 0194BBCEBC53381AEDB833BBBEE42AC8E289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number: 02FB
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: JCuJpVa0FxzdOtEWLBYhnuhvvDi++8ScrQ+pIVu0+04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bc:53:38:1a:ed:b8:33:bb:be:e4:2a:c8:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=89d0b0ee4ff1d9ff31cf39d1534356fd2fdfaa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:ce:01:6a:8b:64:5a:d2:f4:e3:5b:ee:b9:
09:06:23:a9:a0:12:c0:c7:c6:11:3a:d9:33:c2:fd:
58:17:a5:cd:c4:71:ed:b2:9e:8a:d5:04:32:28:5e:
5c:a8:4d:58:2e:d8:0c:5f:1c:93:94:d0:71:ca:b4:
f8:b4:df:ec:79:e5:93:00:0c:19:39:52:1d:22:72:
74:b3:57:ee:91:43:02:7a:4a:79:f0:32:fc:3b:34:
ad:a2:85:37:fe:09:56:c0:cf:0a:db:a9:24:4e:20:
c9:5d:88:e3:11:93:e4:f8:e0:02:0d:d9:0e:e9:8a:
22:cc:19:15:14:d1:20:1c:ba:a4:07:dc:f5:e3:45:
ee:cf:56:fa:3b:03:8d:22:e4:fb:74:87:2a:0d:09:
15:a5:bb:1a:95:85:80:f3:47:a5:c8:69:e8:7a:02:
b3:f9:dd:14:fc:e0:9a:87:5f:c2:0f:30:2a:0e:df:
c2:30:35:76:41:a0:c0:10:73:03:1f:ae:9a:9f:b6:
39:32:73:9c:a2:38:33:b7:4b:b0:6d:62:cf:d7:80:
8c:b0:b8:23:b7:06:1a:51:77:e4:c1:c6:83:6c:40:
5a:10:f3:25:ff:dd:37:45:81:fd:cd:78:64:73:77:
27:02:ea:ce:57:61:0f:b0:38:8b:90:55:eb:3c:23:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:B0:EE:4F:F1:D9:FF:31:CF:39:D1:53:43:56:FD:2F:DF:AA:58
X509v3 Authority Key Identifier:
keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:ea:63:7e:6d:29:d3:4a:9e:4d:84:93:0f:48:0e:b7:29:
25:79:40:fa:d4:fa:24:83:13:57:ad:0e:41:c3:96:e9:02:d6:
3e:46:4d:0d:f8:ad:f6:5a:ef:a0:5c:6a:6a:bd:40:0d:7b:19:
9c:54:fb:99:57:53:75:3e:38:c1:8e:52:49:c9:a2:7f:81:a5:
56:da:3e:2c:d5:c0:c0:76:72:6a:1e:49:f4:94:30:b9:23:9b:
c7:60:e2:3c:89:cf:61:bc:a0:e9:56:7d:d7:41:96:6a:30:98:
40:13:c1:b5:7e:59:3d:c0:a6:ce:04:d4:61:78:46:04:5d:e9:
45:e8:6d:4e:9f:d2:04:cd:e4:11:de:34:24:8f:84:39:b0:0f:
37:57:e3:11:58:67:3f:11:ea:83:5b:8b:17:04:22:7d:4e:ee:
15:cb:e4:84:59:2f:5d:02:7d:2c:4e:6f:29:1e:90:0e:bc:a9:
54:52:ec:9d:83:4b:8c:5c:af:46:da:65:75:77:7a:50:00:96:
55:7b:aa:10:41:48:90:3e:80:dc:4a:35:f8:9f:bd:3c:90:ff:
0d:3d:2d:41:41:6e:32:e2:26:ed:87:e1:93:b6:ce:76:d5:a0:
d6:71:f4:9c:75:c5:44:40:a5:57:07:9c:49:e9:9f:83:67:b0:
5e:b9:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:06 2025 by rpki-client