Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: ZsvOLrSNVJzcVOXkAoZAQkh0nuAYnTtbT0etPrC11EA=
Subject key identifier: 07:14:6D:2F:65:D5:80:37:CF:34:96:BF:55:D4:C6:D3:9D:98:52:CA
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 0194BC3CAAD6780501E40C77F7EDB0516A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: h2q64BHBo1UWolUq8VchB+dcNufGG3hOclS2npQRmgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:aa:d6:78:05:01:e4:0c:77:f7:ed:b0:51:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=07146d2f65d58037cf3496bf55d4c6d39d9852ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:ee:fd:60:c8:e1:49:ab:87:22:b1:e6:8c:
58:1c:82:66:b1:99:f8:1f:7a:18:d6:f8:77:62:02:
38:07:b5:e2:b9:f8:4d:c1:52:59:f4:84:a7:52:ac:
eb:5b:e7:4f:32:3e:1c:17:bf:0d:19:50:da:c1:e4:
e1:1c:93:96:2b:53:c9:81:62:f5:eb:80:f0:95:27:
0e:a5:b0:6b:da:5c:4b:b8:f3:a2:41:b3:c0:6d:f9:
b3:9e:94:9a:49:87:19:a2:07:6b:a5:ce:20:e1:0b:
9b:f1:aa:15:ec:70:5a:c2:a4:f6:79:45:cd:14:f9:
24:70:98:ba:40:00:46:9e:f7:08:b0:4b:14:9e:84:
31:ac:6e:b8:55:07:28:77:6f:05:37:d3:7c:43:fc:
3f:26:5f:f7:f4:c7:ca:04:e1:15:93:9c:2c:76:18:
d0:e7:28:61:fb:23:ab:fe:02:bc:97:7d:43:2c:4b:
62:92:94:c3:58:26:35:7c:8c:b9:23:3b:d9:6c:6d:
5a:d3:c5:ee:05:40:7c:b3:ce:81:30:06:2c:5a:68:
69:63:45:e3:df:e8:6a:6d:9c:2c:68:4c:3d:b5:36:
98:5f:17:48:bb:4b:0d:f6:32:60:53:37:ed:aa:7a:
ec:b5:e8:22:dc:9a:93:d6:e3:c7:49:1f:20:e6:d4:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:6D:2F:65:D5:80:37:CF:34:96:BF:55:D4:C6:D3:9D:98:52:CA
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:ed:a1:62:91:fe:92:e0:26:07:88:44:c2:77:b8:e4:7a:
11:de:3c:9b:a8:e2:e6:e0:d4:96:15:c8:74:43:c2:a1:b2:66:
f5:42:8c:c3:d4:15:2b:c0:10:97:36:c4:cb:0b:1b:d3:ea:fe:
39:43:2d:81:4a:b1:97:0a:93:1c:c3:a4:2e:f0:1b:33:9b:62:
92:e9:aa:cf:5f:63:f9:a6:d7:e6:2f:4a:d1:02:c8:a7:ce:0f:
40:ae:cf:63:5c:27:28:c6:70:53:6c:d4:46:07:e8:a7:13:11:
25:2b:89:f8:fb:d2:ae:d5:ec:c5:72:49:92:e2:3d:69:3b:23:
83:db:b0:dd:ca:08:08:3c:29:3a:2b:e8:96:9d:94:28:d8:24:
08:e2:f3:82:9e:92:36:99:cd:22:3e:dd:df:ee:13:08:ea:99:
8e:ac:6d:a8:47:03:e4:56:ac:4c:05:64:53:49:8b:55:b0:ea:
10:8e:be:89:36:be:7e:79:32:5c:78:bc:f3:7b:24:89:7f:5c:
f8:6d:74:c6:2d:49:b3:e5:7a:95:18:ff:53:b0:8f:e4:40:86:
06:6b:07:e7:0a:52:b6:b8:85:23:a8:ef:ad:91:a7:4b:bd:2c:
67:30:25:9a:5f:81:08:6c:af:49:42:40:68:df:72:1a:47:7b:
d6:db:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:42 2025 by rpki-client