Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: g558P3lk7wScndVIzyxZWdlv9oXSwjMrVUVOpEoIKdI=
Subject key identifier: 2A:DE:EC:22:2B:66:C2:BD:E3:0D:99:9E:59:B3:06:22:C9:31:93:6E
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 0194BBCEE0BC0EDB95000374AB8D0950955B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 076E
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: f2flbXjT5X0vHhzyj+1mAg1+5yhwz3MN0S50HPAYVqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:bc:0e:db:95:00:03:74:ab:8d:09:50:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=2adeec222b66c2bde30d999e59b30622c931936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:f5:fa:b6:31:c6:f9:48:39:80:8a:08:e5:
d9:15:c2:36:f9:d4:e2:3c:50:cb:46:63:4e:31:6f:
55:7d:75:56:1a:e1:a9:85:9a:e8:60:09:14:de:00:
0a:d0:05:5d:2a:e2:12:7d:8f:4f:d3:fc:23:94:74:
24:0a:bd:b1:0a:b8:eb:ae:5a:8d:9b:50:90:b4:d5:
6e:70:0d:de:de:ba:c0:be:03:e5:c4:15:fc:e2:d7:
a0:e4:6c:b8:03:bb:a2:99:38:e4:95:75:f2:aa:30:
c7:96:bb:aa:43:14:4f:0a:d5:a0:ca:c0:42:e6:3c:
94:36:c2:eb:d2:ee:12:39:15:ec:17:ef:9e:10:4b:
63:7f:cb:c4:03:32:5b:ff:3b:10:0b:9a:25:3c:cc:
ee:24:5f:ba:9c:ed:a5:47:f5:87:f7:3c:47:7f:d5:
79:4d:ba:34:dd:2d:f2:16:a3:6e:c8:2f:ba:65:e8:
d7:29:ec:a3:ff:39:6b:b1:91:9a:57:5b:a5:5a:ec:
9d:4e:cf:6a:6a:a8:1b:63:38:11:66:00:5c:9a:ab:
d4:3b:ac:e8:73:f0:e4:28:a1:cc:86:ca:4f:c7:7c:
f3:8c:db:7a:31:05:6b:a7:68:5b:58:3a:ab:66:f2:
4a:ed:43:c6:3a:a5:99:1c:fe:f9:52:72:10:ba:40:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:EC:22:2B:66:C2:BD:E3:0D:99:9E:59:B3:06:22:C9:31:93:6E
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:f5:03:3c:7a:97:29:f0:bd:00:7d:f1:de:95:c6:cf:70:
da:ed:b6:0d:7a:a2:56:4b:f4:06:35:fc:82:61:67:83:81:d5:
02:29:1b:e0:9b:2e:ec:0d:b9:0b:7d:4a:d9:fc:95:2e:ea:47:
24:52:3a:34:cc:79:6b:e0:b0:3c:f6:5a:05:d3:69:ea:06:f8:
b0:fd:26:3e:66:62:e6:20:63:93:d2:1c:17:80:7f:d1:3b:e4:
71:64:0d:3c:42:f0:75:e5:7b:9a:90:98:2c:2a:d4:8d:e7:f6:
52:ea:86:83:09:b8:52:4a:82:53:92:47:15:e9:20:e9:e1:1a:
71:24:6f:29:f1:49:30:e4:ed:a5:5e:4c:b9:d4:fb:0f:d0:5a:
cb:2c:98:24:5d:43:5e:5d:17:7c:ff:f9:5e:58:d9:c4:2a:d9:
4e:5e:f6:b6:dc:34:95:5b:14:ec:10:58:3f:0c:72:c9:10:50:
42:e6:04:32:59:20:4f:02:37:f3:7f:35:b3:2f:79:b9:68:12:
57:34:f3:3f:98:8b:38:9a:c3:b8:17:78:81:28:9f:cc:f2:af:
cb:f9:d4:cb:24:b4:ac:65:49:bc:84:2d:2a:77:43:97:f2:fa:
31:b3:87:c6:e2:51:b8:7a:f7:c2:8c:d6:68:4a:42:5d:89:6a:
5d:15:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:42 2025 by rpki-client