Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: Ctx9T1pt3m09nGFVbb6VikTIpv/lgtUwwQl0bef645M=
Subject key identifier: F0:9E:EB:A8:C3:81:68:A2:4C:59:E5:3C:DD:20:80:A4:3E:73:44:7A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0194BC728D7AB7BD8E7CCD46F3DB4B4C51A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1198
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: kDrP5eYYC3gXW0TwTMSRyC1/X6FGEOfuCAjDm/FkHvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:7a:b7:bd:8e:7c:cd:46:f3:db:4b:4c:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=f09eeba8c38168a24c59e53cdd2080a43e73447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:24:0d:8a:22:06:d1:f4:27:66:ec:91:91:
89:9d:90:78:0b:ba:9b:d5:f9:96:b1:dd:fd:43:de:
a8:47:28:50:27:b0:ce:3b:2b:74:a2:f8:15:c6:f5:
3d:bc:11:87:ed:57:2d:6c:82:83:ef:68:2c:90:78:
6e:88:58:1a:8c:3b:5a:c6:0b:fe:10:8f:e4:f8:b3:
d7:52:3a:78:8f:60:b8:d1:6c:08:4d:63:51:e5:23:
13:fd:88:8d:02:81:75:1c:e5:03:32:9d:df:8f:02:
c1:fa:69:6d:13:b6:4a:4c:2e:30:f6:9d:a0:5d:d0:
43:f8:af:a9:19:f8:ce:01:28:7f:27:8f:3a:26:55:
dd:f6:8d:c0:86:df:23:f0:ae:cc:a8:36:ef:ab:1a:
bd:5d:5d:c9:ae:45:b1:14:c4:4a:0a:77:93:a2:5c:
c1:26:2d:e3:a1:12:31:b1:48:4a:27:33:2f:9d:d1:
40:5a:c4:0d:cf:d2:ae:08:e5:fc:91:d5:c3:46:f2:
48:1c:f0:b7:0a:83:fa:5f:a3:ee:94:c4:c1:b4:b8:
b0:3b:7f:22:ce:82:22:6a:4f:a6:cd:ae:01:d1:d3:
00:8c:9d:f9:83:7a:ca:a6:be:16:78:b5:b5:c5:bf:
ac:e6:b3:02:87:52:b7:e3:d7:27:9e:6a:f5:b7:e8:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9E:EB:A8:C3:81:68:A2:4C:59:E5:3C:DD:20:80:A4:3E:73:44:7A
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:19:fb:21:1f:6b:71:08:14:6a:e2:5e:59:31:87:f2:5f:16:
fd:ba:30:d1:cf:3e:3c:d5:fc:c9:4c:41:79:bf:9c:68:2a:29:
48:3f:1f:1c:13:47:ce:9a:69:27:15:99:15:38:e6:6d:4f:3a:
15:eb:66:30:79:a8:d7:5f:18:8e:38:4b:d9:a5:5d:0b:8a:5a:
31:8d:c5:7c:d2:34:d3:02:eb:2f:bf:46:7c:10:9f:be:ab:2f:
86:99:4d:4d:f3:c0:2e:89:0f:71:07:10:d7:53:3c:b9:89:4f:
6b:51:a9:5e:88:e7:c3:ac:b0:8a:fb:67:fa:61:8e:b9:7b:b0:
5a:7b:04:d4:bc:70:49:0a:1a:6f:89:78:c9:4c:b7:2a:c0:e1:
f6:01:e3:b1:91:26:a0:93:04:d5:85:63:2c:72:f8:0b:48:d4:
b1:a2:20:bf:5d:7b:38:52:c6:81:df:dd:8d:cb:48:59:de:61:
e7:19:33:c8:7e:38:15:75:f4:fd:09:bf:82:9a:6f:0e:81:73:
d4:f9:d3:f7:2c:4c:f2:a6:ca:e1:85:97:b3:f4:91:ae:6a:30:
6a:dc:e5:ee:41:e2:d1:36:bd:c2:ec:a9:47:00:9a:d3:b3:e0:
c4:09:a1:68:c0:be:db:40:b7:31:9c:a0:b1:cd:c7:eb:85:4e:
ab:b6:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:42 2025 by rpki-client