Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: t0vftiXRwq3gM5IxzOnkXINNOFuOJj+vr6pEB/+4Nsg=
Subject key identifier: AD:BB:4A:1B:D1:9B:35:E8:37:A5:4E:20:4C:20:28:62:19:47:F3:4B
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 0194BD8524B9585ED99EE15B83662E2B59B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 028D
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: HSS3Nlh6qxU1yVjc7nJaiJE57d9httbZTcZTxKycbe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:b9:58:5e:d9:9e:e1:5b:83:66:2e:2b:59:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=adbb4a1bd19b35e837a54e204c2028621947f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:85:77:3f:20:cb:ef:60:fd:68:3a:57:0d:
58:a1:82:62:fd:f2:0b:a1:62:4b:79:98:27:f8:8d:
1e:73:fb:cf:fe:96:d8:d4:b4:f1:cf:6b:11:f4:12:
57:55:c8:c0:93:f9:28:cd:94:bf:8f:62:02:53:87:
e5:49:d3:6e:17:64:ab:fe:e4:45:48:50:a4:23:78:
01:87:54:56:74:60:88:a5:a9:f1:98:1f:34:34:ff:
8b:f1:60:9c:e6:b8:52:e0:6a:33:9a:50:13:b9:56:
ed:f7:ab:44:a6:b0:ae:f9:a2:0c:66:30:f1:79:03:
07:ad:fa:a9:5c:bc:eb:ee:0b:d5:2b:15:95:3d:7c:
8e:09:4d:d2:21:ca:1b:c8:17:de:f1:dd:5e:a7:c9:
d3:8d:7a:f6:45:45:c6:7a:b1:e6:72:73:d9:1b:3d:
e5:84:f1:2d:da:1e:a6:13:85:99:40:c3:7e:3f:b6:
7d:bd:91:22:61:4e:c8:5a:30:7f:c7:56:14:43:ba:
10:7f:98:ff:59:c8:55:81:06:b7:4d:00:0c:df:f3:
44:f4:1c:44:99:12:1c:93:99:ff:6e:38:7d:c5:95:
de:61:20:57:4b:ef:82:d3:df:82:c5:0c:60:5b:3a:
95:c7:25:dc:a2:3a:c5:f9:6b:bf:fa:79:7a:24:a8:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:4A:1B:D1:9B:35:E8:37:A5:4E:20:4C:20:28:62:19:47:F3:4B
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:02:6b:f4:da:d3:d0:fd:11:ec:22:62:c6:91:85:18:43:
f2:7f:92:d1:80:cd:ce:73:56:74:64:df:ed:f8:28:56:a2:6a:
68:be:1c:c6:06:f1:33:61:94:23:fa:9b:b7:94:b2:e0:06:f5:
5b:06:47:03:72:9d:43:c1:c3:5a:71:2d:bb:f2:ea:b6:cd:e9:
31:67:64:f7:b0:fd:df:c0:ef:4f:cf:25:cd:bb:0b:60:93:80:
eb:8f:ce:bb:20:0a:ae:91:dd:af:df:b0:db:1c:18:48:47:7d:
78:16:90:47:47:9f:54:e5:be:f0:dc:ba:59:73:59:a0:37:1e:
4d:ad:75:6d:44:29:37:9c:e9:df:3d:0c:a9:bb:7b:54:a4:5b:
9d:c6:c5:56:9c:d4:f0:18:ab:eb:3b:42:85:bd:ce:77:10:a2:
56:b7:27:e6:7f:57:7f:c1:9a:2a:f9:d5:37:0a:32:a5:c9:d5:
41:cc:31:74:ff:f4:c2:83:76:83:c1:4f:b3:29:02:c6:83:b9:
da:b8:46:ee:d5:88:d6:16:94:4f:ce:a0:1c:b3:26:1d:2d:a1:
5c:39:16:96:c3:3e:da:73:c6:68:71:30:86:f3:b2:c3:19:dd:
49:c0:41:fe:5f:2c:23:9d:ed:6c:4b:2d:0b:4c:c4:20:53:fa:
8e:98:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:51 2025 by rpki-client