Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: UcJbQM6MAV6QS11YJg0zKEZ/wDPPp1otcbdbq/hQPCk=
Subject key identifier: 70:39:B0:6C:30:45:6C:66:EA:24:2A:2F:C3:C7:89:BF:F2:DC:CE:C2
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 0194BC3C5ED49FA1AEA9B889840E6AC9E867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: G0nOjvoHksI7Tx1MgAUX7IDoQOQc9HFRWHzMa5sp32Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:d4:9f:a1:ae:a9:b8:89:84:0e:6a:c9:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=7039b06c30456c66ea242a2fc3c789bff2dccec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:3f:67:40:40:6b:dc:38:cd:35:bb:35:ce:
f2:05:15:0b:e1:96:85:bd:81:cd:40:9f:19:32:b1:
42:ba:cd:29:26:be:08:48:1b:18:83:bc:14:2b:bc:
47:f4:16:9c:de:85:67:14:42:e0:8c:fb:54:e4:40:
74:0d:9e:68:d9:ea:b2:a9:33:53:be:40:78:0e:b9:
ec:7f:2f:f5:46:88:63:92:75:6a:9e:0a:19:c3:c4:
74:51:f1:3b:38:2f:7a:64:bc:4b:6c:bb:81:4e:be:
f1:e6:22:7d:ab:b8:bc:aa:19:f1:79:1a:d7:60:eb:
26:de:ee:ec:19:5b:18:f8:10:41:ef:05:62:05:f8:
4a:9b:a4:85:86:2b:a7:a5:ae:d6:50:a8:6e:68:bd:
0b:15:91:f9:cb:61:60:ec:57:07:8d:53:a3:49:48:
6a:2e:19:24:bb:6e:29:6f:54:22:e2:e6:fc:2f:e0:
4e:f9:9e:d5:05:85:3c:42:83:45:16:e6:b0:79:38:
ee:fe:17:01:a7:82:a6:be:08:1f:a4:b1:7a:7f:39:
8a:9b:0e:85:86:9e:0a:95:2c:2e:a7:b4:d0:fa:39:
f9:d1:1f:30:3b:e1:b6:04:2f:69:4d:88:93:50:ee:
bb:30:45:0b:a6:a0:cf:d6:34:99:a2:f5:15:c9:80:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:B0:6C:30:45:6C:66:EA:24:2A:2F:C3:C7:89:BF:F2:DC:CE:C2
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:84:27:a3:a5:2f:b9:99:fe:37:e4:35:cb:35:b6:a8:cc:
3b:e8:bb:27:da:0b:2d:d7:eb:bc:28:c7:c8:5b:41:00:d0:44:
65:06:ea:94:48:58:be:6d:d2:87:49:b4:aa:32:43:2c:4d:82:
91:fc:5d:2f:c7:5d:7c:59:19:44:8b:4d:cf:44:86:a8:bd:89:
41:6f:e2:57:79:95:09:1a:2b:cc:63:72:a3:9b:c2:18:70:e1:
8d:7e:e6:ac:30:1a:74:e5:5a:a2:c8:72:56:ca:21:ea:ef:e3:
ce:26:17:1a:e6:23:ff:2b:9a:8a:c6:57:f1:35:47:a6:35:ea:
50:eb:d7:2c:64:62:02:bc:7a:93:d1:45:f5:84:2a:61:c3:22:
64:53:ed:83:88:f1:2f:ef:90:c7:4e:21:3b:b8:43:d4:42:cc:
2d:c0:e4:fc:81:fe:57:48:cd:d1:df:82:6f:ca:a6:7f:e3:bb:
c0:31:96:8f:a4:08:f6:dd:40:b3:cf:d0:5a:3a:e6:da:50:36:
c4:9e:3f:48:16:fa:88:23:58:0d:60:5a:06:50:50:b8:0f:14:
34:b6:b8:99:f4:d5:d2:ca:f4:ec:d8:cb:c8:9e:53:43:b1:25:
fd:49:b7:fb:61:0b:46:35:aa:ce:fc:37:67:d1:fb:c0:89:51:
7d:6b:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:58:06 2025 by rpki-client