Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier: oTOKtQ9q1mFMiiGxCFdQ88E32RhojlJ2pIsXo9u0dT4=
Subject key identifier: 3F:0B:6D:B4:0E:61:9F:27:5E:33:7B:52:42:85:EC:2E:00:D0:10:E9
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0194BCAA11B87B56D802129CE3B35694C5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: P2ZsL+nvJyoHD1gPKEtBDq9o9M7wVsflOLy4j3iwvDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:b8:7b:56:d8:02:12:9c:e3:b3:56:94:c5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=3f0b6db40e619f275e337b524285ec2e00d010e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:f5:aa:14:29:98:93:39:1c:d4:c5:40:8c:
14:c1:a9:49:65:93:14:3c:f3:af:79:00:1a:b0:5e:
57:87:a4:dc:7b:32:f3:73:4e:50:e7:df:e4:2e:41:
f7:28:d8:71:43:1f:f5:07:6d:fe:90:8b:7f:99:e8:
e2:1e:5f:2a:9a:a5:05:e2:1e:f8:c1:25:fa:88:2c:
57:fc:66:39:2e:49:11:38:79:79:fd:19:9a:58:32:
b2:7d:f3:65:de:14:f9:25:95:04:ba:92:3e:2e:20:
e6:89:97:96:e9:95:b1:10:8f:30:4d:d8:d9:fa:d8:
64:e7:2c:65:1d:d4:64:0d:ff:d4:fa:68:94:2f:9e:
9e:5f:08:bc:0a:82:7b:16:70:ba:3d:9c:db:74:11:
14:a1:bd:cc:67:42:d5:f8:7c:4a:cb:c2:22:13:ab:
90:22:67:be:e6:6e:a8:3c:86:fe:4c:8d:f7:6f:b6:
df:2d:d9:b4:64:53:85:d9:d0:f7:88:d3:33:0d:a7:
5e:9e:03:f6:18:40:e5:f5:69:af:43:c4:80:39:d7:
46:86:3f:d3:04:60:3a:9b:51:5b:6d:86:c0:b0:83:
bc:a4:5f:7d:4c:7e:0b:f3:5f:ed:b4:7c:8d:bb:a3:
a4:ce:9e:5b:7a:c7:8a:30:dd:b3:a9:36:d6:0c:c8:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:6D:B4:0E:61:9F:27:5E:33:7B:52:42:85:EC:2E:00:D0:10:E9
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:18:75:99:b7:39:10:97:9b:d0:9d:92:0c:ab:a3:c2:0c:
a3:33:d1:41:44:49:25:74:60:74:ac:7f:17:92:49:bf:13:04:
87:fb:f6:2b:d1:5b:bc:04:64:94:d7:b9:25:07:da:b4:f2:3b:
91:4b:b1:d6:a6:d0:86:6e:1a:40:b5:45:91:b8:9e:f5:58:4d:
8e:32:72:8b:a4:f3:b5:b4:0e:7b:8d:60:68:c0:3d:71:73:4b:
18:12:fb:5d:18:3a:62:32:39:9f:9a:1c:45:6b:74:fd:33:1b:
b8:d2:fd:08:ec:09:d4:4a:f5:6f:14:c4:f4:63:83:82:93:d8:
24:5a:bf:d9:3a:f8:5c:b8:bb:74:61:72:ae:af:94:16:ed:c2:
51:41:cc:c8:79:a1:ff:32:8a:b4:49:ea:e2:d8:f4:5f:02:05:
a9:91:d1:5e:1b:59:15:2e:af:d2:0e:e9:4d:2d:c9:6c:72:d1:
ef:c5:37:d5:ae:be:53:fa:ad:b3:fe:3f:16:5a:bd:f0:13:2c:
13:f8:ec:1d:07:5a:b6:dc:e2:7b:2c:f6:59:a7:57:54:a4:3a:
6d:64:86:dd:0f:c4:55:cb:9e:2c:a9:39:0a:d1:cd:8e:77:0a:
6d:8e:3f:91:18:f7:99:51:c3:ae:60:a8:c9:ad:a5:a5:9a:ee:
b6:82:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:54 2025 by rpki-client