Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier: ENIaTO35KWEKlMIrRh4bv/50jNW5L/R6AKmieGepfog=
Subject key identifier: 52:52:91:9C:F8:F8:03:59:62:40:29:DD:10:CC:13:E9:87:67:9F:8C
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial: 0194BC72E1B99A0443D5B512FC1758A3E20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number: 0DF9
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: +LFhI7kfwn4CNK0zDvPhyK3H+3bpamcxaBYGRqS6a+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:b9:9a:04:43:d5:b5:12:fc:17:58:a3:e2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=5252919cf8f80359624029dd10cc13e987679f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:b9:21:4e:e4:dd:42:b5:36:cc:f1:a5:78:
14:ed:b3:4d:00:d4:82:1e:ef:a4:fd:c2:ba:a1:38:
3f:61:8d:69:bb:8c:2f:69:31:52:2c:9d:95:a5:67:
95:b5:15:07:ff:73:f7:18:82:0b:49:d2:f7:42:f4:
b0:de:74:03:58:38:fd:b3:05:b7:be:21:21:32:56:
72:c4:47:e7:de:c5:dd:fe:05:bc:31:f8:c8:b7:b3:
84:a9:6b:6c:6d:67:10:a5:e2:b5:98:0f:20:f7:91:
6e:64:0d:a0:45:a8:e0:0a:d5:1c:2b:00:93:23:ef:
3d:f3:e5:77:6d:61:fe:90:00:d2:16:ea:0d:4b:d0:
08:28:56:95:f1:f4:ff:2e:1d:3b:ec:50:fe:5c:41:
fd:40:d7:c8:22:68:d4:7d:49:23:d9:bb:2b:97:30:
ed:fd:3b:b7:14:74:0b:af:70:9c:19:1b:ca:86:ad:
55:3e:51:b9:fe:77:8c:9c:ff:7c:0a:38:93:16:7a:
9e:63:52:53:75:34:90:8f:40:76:bc:11:fb:62:28:
c9:6f:d9:de:95:c2:38:6c:f8:73:61:7f:b4:53:91:
21:e8:f8:95:65:66:cf:55:f6:c4:fb:f6:df:b4:30:
31:9a:c5:f7:40:14:d6:53:c4:60:ac:a1:4f:5a:0e:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:91:9C:F8:F8:03:59:62:40:29:DD:10:CC:13:E9:87:67:9F:8C
X509v3 Authority Key Identifier:
keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:76:94:06:dd:52:8e:77:ba:fc:54:c3:c3:c2:8d:b8:b1:
03:93:90:69:95:96:05:84:3d:f0:ee:7d:b2:f2:b5:fd:ef:7c:
1e:bf:d6:4e:e9:d3:02:f6:7a:92:67:d7:e9:11:ea:e8:eb:13:
1d:68:d2:73:9e:7d:cf:a9:28:42:d6:cb:71:0b:9f:2a:db:42:
0b:10:5d:1c:79:43:58:f1:e7:95:82:17:af:68:6d:ef:f8:0d:
19:f3:64:bf:c3:cb:8e:72:9b:c1:aa:5c:10:33:83:41:8f:00:
c6:24:42:4c:65:68:16:51:a5:9d:cd:6a:81:63:46:28:33:3d:
d9:07:11:02:9c:35:b5:61:00:0f:5e:da:32:43:18:ef:6f:a1:
8d:f1:f9:b1:97:43:f8:29:c8:c5:68:a8:65:d3:ff:14:a4:d4:
8e:bc:b0:a4:6d:9b:91:04:2c:c5:4f:63:4a:72:91:ac:2e:c5:
63:1f:67:94:ae:fd:cc:e3:69:e2:aa:14:fb:eb:dd:75:1f:e4:
d3:e3:88:fc:d1:24:74:7f:e7:28:f1:e7:3b:0a:03:c7:19:54:
e0:bb:4e:19:da:b3:32:0b:a6:d3:85:12:72:93:b6:b9:0e:83:
73:6b:7e:ac:a9:3b:69:1b:10:99:09:3a:df:98:fc:1f:1c:31:
8a:9e:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:14:34 2025 by rpki-client