Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: +Z1LRSdsRS19BoAabd362xtsrHkFRk9YPslGG/No0V0=
Subject key identifier: 34:2B:15:C2:E6:58:E0:93:EE:E9:7B:5A:AD:67:9F:5A:82:7B:C0:1A
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 0194BBCE3142919415D4CA29D52B26714F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: VDredqgmreKRw8PWqWDhZNcw8v4yBnkGB3uUlJqkbO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:31:42:91:94:15:d4:ca:29:d5:2b:26:71:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=342b15c2e658e093eee97b5aad679f5a827bc01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:2e:75:d5:4e:3c:1a:82:e6:26:86:82:bd:
57:4c:fb:36:f6:d8:92:fc:94:89:2d:93:01:e3:d3:
dd:d3:3f:66:22:d5:4a:7d:cd:12:ea:2b:d8:af:f1:
1a:19:be:d6:8f:e1:59:5a:10:e7:8e:ed:d7:3f:17:
bd:e0:15:37:db:34:15:6e:53:24:cc:3c:06:7b:49:
6f:af:bb:e1:b5:0f:17:ab:74:c0:4c:f4:08:f9:0a:
ea:a6:50:3b:56:f0:e7:28:db:df:30:08:4e:d5:28:
c9:8d:c8:0f:07:d2:43:3b:0b:3d:17:b8:bf:a9:cc:
20:c9:69:87:d1:83:0e:0a:da:0e:70:6f:67:8d:1b:
4f:70:90:b7:1a:25:63:94:8c:51:8a:a7:49:a6:63:
bc:02:4d:d6:89:92:4b:a4:4a:4d:09:97:1f:14:a8:
41:f3:5c:6b:bd:8e:b1:ca:43:67:f0:bd:ea:2c:4f:
b4:05:4e:6e:e7:21:67:d9:5d:d6:41:60:db:a5:ee:
7d:04:a2:40:ba:f7:0b:0b:cf:e2:a3:e6:c3:52:79:
d3:9a:9e:64:ab:39:5f:32:2e:80:36:80:48:ac:07:
fb:f3:d8:2b:8d:e2:db:6e:c5:cc:e1:4d:87:0f:fe:
ca:b1:0d:f8:a6:63:ff:d6:aa:8f:d2:44:52:67:84:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:15:C2:E6:58:E0:93:EE:E9:7B:5A:AD:67:9F:5A:82:7B:C0:1A
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:4b:a9:a3:74:6d:52:78:ca:50:dd:33:a0:3f:c0:39:bd:
94:e5:c8:f2:b0:c9:51:19:89:a9:34:d4:f2:d2:56:14:40:a2:
7e:21:a2:5e:a4:42:a5:57:bf:18:02:b6:e6:43:3b:db:ca:62:
a1:19:87:5c:d2:fe:64:1e:2b:ed:f5:b8:59:af:c5:89:0d:1d:
35:5c:63:7b:49:ca:39:20:86:4d:8a:35:b0:45:a9:c9:b3:c1:
8f:56:3f:2f:b6:7b:b5:79:31:4b:96:e9:b3:99:e4:ef:1a:07:
8f:db:3b:e2:a6:09:1b:df:69:f3:7c:ff:a1:a8:c7:9c:0a:9f:
5e:fc:b5:2d:8d:87:2a:91:ab:6c:55:0d:fb:a1:48:2d:b6:15:
32:2b:1a:2e:d6:b7:3b:bc:00:4d:b3:f0:52:00:cf:d0:3a:8d:
42:56:ee:3c:3b:da:93:bf:71:ca:04:db:35:28:27:32:40:a1:
a9:44:1e:7d:e0:13:8d:ae:29:4f:e5:ce:89:92:7c:79:71:9e:
14:c8:59:e2:c0:bb:10:d9:60:74:e6:04:7b:98:07:dd:7a:10:
c1:00:06:ae:62:ad:a5:73:40:a5:8d:77:81:bb:18:fa:af:e1:
b2:94:ae:ea:09:61:85:4c:b3:af:ab:34:92:a7:40:81:5c:56:
0c:fb:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:49 2025 by rpki-client