Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: C9Qb5BCzOVZMkV5DviDD4erywiHu8/SoA+ixwsk3XNY=
Subject key identifier: E0:ED:4C:F9:A1:C2:4E:F3:52:0D:39:84:D3:18:D1:11:B1:42:21:22
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0194BBCE2E2F645320524B47D903B545D94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: wbtUdxr3gi24HpBxKWaLHN107BCYeeTK73Zc9J8WHBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:2f:64:53:20:52:4b:47:d9:03:b5:45:d9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=e0ed4cf9a1c24ef3520d3984d318d111b1422122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:12:d2:c3:a5:41:d0:ca:1c:bd:61:25:9d:
c3:e6:38:30:2c:12:43:4c:66:47:16:28:47:6d:ef:
cb:17:92:ee:db:82:88:da:f3:4f:12:3b:50:17:77:
55:ff:3e:7e:28:98:c3:cb:67:30:c0:34:4d:06:f9:
2f:b7:b2:50:c9:6d:9c:c1:97:a3:d7:d1:24:f4:f8:
0d:57:6b:ef:ef:88:21:74:b1:04:1d:ec:22:3a:0d:
e9:55:9c:54:a5:9b:84:65:49:d7:29:fb:e2:f1:47:
7a:3d:c7:ca:79:f9:95:b1:63:e2:fe:ef:a8:1b:e7:
5c:06:6f:fc:3a:2b:04:06:47:62:e4:da:09:38:30:
6a:44:57:07:e6:76:d8:b4:09:81:ca:01:b9:e9:87:
de:2f:68:27:12:98:ea:c6:97:d1:2f:9d:46:0a:c7:
85:9c:dc:c8:a7:a0:4e:53:cf:03:b9:f0:28:98:d2:
a3:12:cd:eb:39:f4:2e:09:32:71:73:8c:c5:ef:70:
8e:32:2b:18:d6:bc:27:4c:97:df:68:0b:61:3c:6b:
e4:df:b7:9a:03:2a:09:ad:ef:85:66:7d:51:5c:80:
06:63:21:63:ac:b6:64:28:36:38:0a:ac:15:f1:0e:
02:62:72:fc:f1:55:43:73:f1:88:68:ef:0e:70:e7:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:4C:F9:A1:C2:4E:F3:52:0D:39:84:D3:18:D1:11:B1:42:21:22
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1d:49:58:03:67:69:7c:63:03:06:33:5d:9e:34:ba:96:89:
fe:57:37:23:64:25:3f:08:cd:5c:d1:e4:d6:de:84:49:72:b8:
01:f6:db:ed:75:d6:b3:b8:ef:77:c6:e0:9c:7c:03:1a:ce:a6:
2f:cc:31:d8:93:c3:ba:1a:e0:ec:b8:38:08:dd:36:22:da:be:
c1:ae:d9:a8:cb:ca:96:84:f4:e6:ff:ad:59:d8:8e:ed:bb:33:
a9:91:b4:07:c8:ad:fd:4a:de:39:c7:ff:b5:b0:e4:4f:7e:63:
96:c9:d9:f0:5d:36:8e:7f:ab:1b:eb:93:6e:82:95:3f:3d:62:
49:22:41:8b:bd:f6:a9:21:0b:a0:89:d2:3c:87:ab:0f:2b:14:
ed:73:9e:fd:b5:22:be:87:d3:e0:59:7c:02:91:0e:df:eb:69:
82:a7:ae:c2:65:89:c1:b4:0c:c1:a2:5f:12:21:12:a3:7c:0c:
ff:06:5c:7d:25:16:f3:0d:18:5b:79:a9:1f:f0:b1:17:fa:5d:
85:7b:9d:b0:96:fb:54:82:1b:f3:62:6d:04:61:d4:3d:11:81:
6e:e5:7d:69:d0:8a:2c:d1:01:47:67:2f:c6:73:2e:7b:4f:ce:
f2:ac:36:44:7e:ff:30:fc:a9:7e:b0:a6:78:08:6b:e8:16:60:
bd:82:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:39 2025 by rpki-client