Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: KR3Wkkr1S4fw9NB60jtEfQhEQy21xJ/OxKcBvCVw7Ig=
Subject key identifier: DC:45:AC:DA:2B:83:3A:AE:BF:14:A8:B4:D7:D3:73:F3:12:07:46:47
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 0194BBCDC860C91761050252DF9F479EDCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 0F02
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: jD+1fl/bqYvqAabC+lU0SL/RxX+KQw8bmramUXcApgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:60:c9:17:61:05:02:52:df:9f:47:9e:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=dc45acda2b833aaebf14a8b4d7d373f312074647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:33:a5:31:15:fe:21:a5:de:fe:a6:29:90:67:
01:b2:ad:be:ff:51:f3:7d:f0:06:5f:37:34:63:1f:
9c:9b:e4:4f:be:45:c0:70:a8:98:7d:c8:a7:69:43:
9b:2a:0d:3b:da:a2:a8:ee:e9:6d:8f:6c:27:d8:b4:
f3:33:97:37:da:99:12:d8:3c:5b:7c:45:5a:bf:f3:
a5:80:21:1d:ee:25:49:58:1e:a3:2f:a6:a7:b4:6c:
ce:c7:1f:71:41:35:65:1b:ca:6a:16:61:57:f8:b9:
d0:28:69:61:bf:23:8a:33:bb:58:c0:e6:c8:15:97:
bb:28:8c:f9:a0:c6:95:0d:01:4f:fe:f7:c5:91:fa:
a7:93:b4:d1:4c:57:98:cc:cb:64:62:e2:d4:cc:2b:
d6:3c:31:4f:1f:d1:7d:ce:fa:39:eb:69:05:4e:30:
d5:f0:4c:be:14:ee:38:c8:8f:b6:b9:9e:07:b8:96:
ec:20:9f:d3:c9:c9:e5:98:05:e8:ec:b6:72:4d:bd:
b2:f2:ca:06:76:99:b8:cd:23:85:a6:dc:31:d9:02:
76:f1:d0:09:9b:46:ad:ef:ef:aa:07:a6:d6:fc:0b:
ed:69:be:68:a7:70:a2:50:e8:6d:3c:63:fb:86:78:
76:80:e7:0c:fe:aa:9d:94:74:d8:87:09:c5:a5:03:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:AC:DA:2B:83:3A:AE:BF:14:A8:B4:D7:D3:73:F3:12:07:46:47
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:39:49:99:7c:88:be:1e:ef:9e:0d:88:a0:d7:9d:c1:ae:
33:17:a1:03:06:82:68:e4:c1:4e:f1:d6:87:68:b8:48:e6:47:
da:30:e7:d4:be:54:e7:7a:9c:5a:b3:38:aa:e1:75:43:f8:e9:
12:ab:c9:8f:26:0f:60:4a:2c:b9:f7:ba:93:82:49:6e:ee:77:
3f:97:07:aa:b4:f2:14:56:85:97:fa:45:0f:ec:52:91:26:06:
cb:75:96:12:bb:ac:3d:98:6b:9e:87:96:f3:2a:09:d3:89:ed:
75:86:02:c0:08:0b:37:5b:17:00:fe:5f:ad:d5:4b:ec:7a:21:
5e:b2:1b:8a:9c:ca:15:d4:ff:4f:a3:55:f9:0f:1a:7d:7b:f7:
77:dd:6f:0e:cf:d1:0f:36:d4:53:fe:56:5b:88:b9:d9:1e:9f:
a9:de:06:97:40:8b:6c:dc:b9:c2:29:cb:ed:4a:25:3e:45:48:
93:a5:70:67:fb:f0:38:c0:d0:e3:f7:8b:65:45:f1:a5:25:45:
d2:2f:be:6d:3e:fa:e5:22:4e:84:71:4c:07:8b:5a:01:4d:b1:
fe:b1:6d:a5:cb:e6:a6:1d:00:b3:2a:07:0b:b5:a7:31:b1:c4:
c7:0b:2f:3d:8c:b3:41:e0:73:9a:bc:9c:c4:4b:35:0e:eb:58:
88:00:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:29 2025 by rpki-client