Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: JEHl87xBOYmjgC2f0EKhc0uFfd/ouaexFDHX7bnlXxE=
Subject key identifier: 3D:57:A0:B8:70:D8:56:B8:35:12:C6:2E:09:8C:8F:D0:BA:53:EF:30
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0194BBCEAF2FACE17856150A1804A38FA5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: JMoLAdoAz+jQFY0EKzSx7H4D9siLw65UFb3dM1EmW2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:2f:ac:e1:78:56:15:0a:18:04:a3:8f:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=3d57a0b870d856b83512c62e098c8fd0ba53ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:62:39:a1:63:ad:1b:ca:cd:42:d5:2f:b7:
90:a5:55:3f:63:9a:04:ef:10:83:a9:49:36:39:6a:
a5:e2:45:cd:bd:16:2d:a6:20:c8:36:a6:b0:f7:7d:
ed:25:8f:61:1a:de:e4:1a:3b:17:53:18:bb:1d:6d:
7e:b0:52:94:19:16:de:91:a3:0b:a9:93:08:86:93:
cc:0a:e2:e8:fd:1c:93:e0:3e:4c:27:83:03:ac:bf:
64:e9:46:f0:2b:2b:59:25:ff:04:e5:59:16:23:41:
7e:5c:cb:5c:a0:ae:de:9a:1d:7d:a5:0e:60:f3:53:
86:e5:36:2d:e0:8d:f8:a1:7a:49:b1:0f:75:b7:ef:
eb:47:03:bb:af:f5:6f:b8:f8:33:9c:a8:49:77:da:
94:86:b9:e1:34:16:50:e1:bb:f8:fd:af:3a:10:ff:
c8:cd:c1:5d:4b:fd:01:b7:7c:00:85:cf:0c:1c:ba:
52:f6:3a:ed:42:51:bc:02:0b:46:69:e9:20:20:29:
7a:c2:54:0c:4a:c6:29:d0:f4:b9:d8:ba:ca:e3:26:
9a:d2:01:b0:0a:d9:af:74:ee:ea:6c:26:67:24:7a:
92:62:21:9b:23:f5:8e:75:40:ca:d2:69:51:50:ae:
bf:04:12:44:95:8a:05:4f:ae:fd:6e:49:90:32:2a:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:A0:B8:70:D8:56:B8:35:12:C6:2E:09:8C:8F:D0:BA:53:EF:30
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:ba:b0:1e:5f:92:78:54:e7:3d:b6:22:85:b3:a6:d8:15:
35:a4:2c:a0:57:d2:77:66:ef:f9:ed:d5:6b:64:66:48:fa:43:
d8:83:cb:46:db:3d:44:f2:01:6f:78:0a:85:71:d2:bb:00:f6:
7f:1a:7d:84:c9:a8:13:70:8a:7c:c2:db:5b:5f:d7:f2:59:c2:
bb:96:0d:e0:d6:63:6a:55:15:e0:0b:fd:b7:2e:30:b5:11:e2:
b2:8f:9e:38:dc:00:b6:4e:43:59:6d:00:61:d0:90:93:ed:22:
e2:15:a2:0e:8d:0f:14:7a:7e:94:f8:70:42:b4:23:f9:bd:d7:
08:ab:4a:a1:7b:4a:2a:8e:22:8f:04:f9:a7:2f:27:47:9b:ea:
db:b2:bb:10:2b:db:f3:2c:b8:1c:ad:cd:de:40:90:9e:ac:89:
7c:2e:d5:bc:40:d8:c9:b9:6a:4c:ba:09:59:0f:88:22:46:87:
b5:58:4c:de:d3:27:b3:e5:c7:67:f4:e9:8a:70:83:72:ee:77:
2e:e4:ee:78:42:4b:06:63:e3:59:1d:77:ef:9c:9f:63:48:e5:
5b:2e:c8:53:6c:03:c9:85:55:f2:37:22:b4:70:0c:9f:d6:77:
b2:65:c8:c8:1f:d9:79:cb:70:46:f6:80:99:63:fb:74:f0:4f:
e7:ad:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:31 2025 by rpki-client