Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft
File: EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft (raw, json)
Hash identifier: G8wHX6lRF7WBOcCdMQgOHWVNK/SYK64aDbsHeqGtCOU=
Subject key identifier: 8C:24:52:6D:B3:47:FF:3D:77:0B:6F:14:AD:E6:95:9B:45:9C:9E:E0
Authority key identifier: 10:AD:EF:12:2B:1D:E4:BF:8E:B1:63:1E:AB:CA:74:1E:4F:52:96:E4
Certificate issuer: /CN=10adef122b1de4bf8eb1631eabca741e4f5296e4
Certificate serial: 0194BCA9A8806AD7FEDB8314A2E5E4F7CD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK3vEisd5L-OsWMeq8p0Hk9SluQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft
Manifest number: 063C
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: EK3vEisd5L-OsWMeq8p0Hk9SluQ.crl (hash: 4kHeVt30TkdxpZ/SW2u9XiE2INwS7RkIjjyqNex+Q/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:80:6a:d7:fe:db:83:14:a2:e5:e4:f7:cd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10adef122b1de4bf8eb1631eabca741e4f5296e4
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=8c24526db347ff3d770b6f14ade6959b459c9ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:05:c4:e4:7b:4d:40:39:55:c2:2a:93:d2:
b4:b3:53:51:06:3e:05:6b:40:69:7e:93:91:8c:ac:
bf:d1:a3:17:46:e4:94:63:f8:aa:96:95:88:df:42:
e2:f7:66:ba:ca:8f:81:f0:ba:3e:e9:65:05:3e:80:
ed:71:f9:1b:2d:77:55:7f:58:95:11:12:4c:27:fe:
99:8b:bb:98:00:60:fe:e7:75:b9:ac:44:65:3a:51:
28:32:de:79:65:90:92:a2:d0:f6:9c:f6:61:e8:65:
a8:a5:da:95:11:e9:8b:f8:f4:f9:e8:74:f0:5b:f0:
1a:e0:00:fd:2e:b1:75:f4:a3:a7:db:75:4f:c6:6e:
58:ca:40:57:88:09:68:8e:5b:a3:bd:6c:f6:f0:bc:
f5:49:da:83:c7:78:0b:24:ec:e6:db:5b:3f:af:98:
8b:35:9c:b5:d9:e4:7a:22:7f:d9:61:00:02:2a:c6:
0d:fe:27:52:2f:46:e3:00:fd:60:16:cc:33:2e:32:
bd:e4:96:b8:02:3a:fc:40:38:55:cb:d0:7f:97:cf:
8f:18:32:83:2b:4c:f7:4f:ad:89:d4:f3:c2:c7:22:
e4:b5:3f:f3:52:7c:1b:c8:b2:8f:37:88:8c:78:84:
96:25:17:8e:d6:b9:4f:b6:04:8b:9c:ad:a2:12:78:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:52:6D:B3:47:FF:3D:77:0B:6F:14:AD:E6:95:9B:45:9C:9E:E0
X509v3 Authority Key Identifier:
keyid:10:AD:EF:12:2B:1D:E4:BF:8E:B1:63:1E:AB:CA:74:1E:4F:52:96:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK3vEisd5L-OsWMeq8p0Hk9SluQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:39:77:d5:ec:40:d5:bd:de:11:84:71:e5:b0:57:57:7c:62:
30:c5:83:11:e4:87:ef:c4:d8:dc:9e:85:c4:02:03:05:6a:12:
53:bf:65:e6:e1:eb:59:bf:c0:30:53:9a:5b:4f:e3:ca:40:66:
09:9b:f7:c7:21:91:39:45:8c:6c:d7:0e:37:c9:34:39:9d:68:
61:68:96:75:8c:b2:15:ba:ae:ee:0e:d4:15:06:df:19:98:27:
f2:f1:d2:f6:b7:9f:a2:44:65:48:7e:4e:dd:46:c0:ed:f9:06:
64:a0:4e:db:53:b7:0e:44:b6:95:87:80:d3:95:de:d3:b7:9a:
31:10:31:3e:db:19:82:e2:e8:08:c8:0a:d1:af:1b:92:6b:90:
75:d9:f9:c2:40:4b:df:b8:05:8c:9e:e0:15:e9:4e:7c:00:21:
fc:e7:bc:ba:2b:c6:9c:ea:04:e9:9a:6a:dd:70:3e:4a:29:74:
11:48:61:c4:0e:d0:5b:74:89:03:0d:78:15:90:a8:06:0a:49:
b0:55:c8:fe:93:0a:92:6a:a0:aa:40:bf:5d:e9:00:2d:04:e8:
13:54:c1:bf:82:79:71:e1:7b:2a:7d:48:e7:ce:4d:ac:a8:44:
bb:50:c4:0c:22:46:7c:8b:ef:1a:68:4a:4e:81:d1:7e:ed:fc:
e7:60:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:26 2025 by rpki-client