Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: v86LO+FOj8+CZHArbNWgtYEgR1ztgXTaJR5u1WIOG1k=
Subject key identifier: 15:A5:EC:9E:EE:56:2D:5D:6E:CB:16:02:74:0C:FD:DE:D6:EB:19:F5
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 0194BC729A1EBFC1F043F61B417AFB710616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: MHW0UX5VlAM6rNxl7ejbd3PeGqpwQop4mpGVKkjRffI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:1e:bf:c1:f0:43:f6:1b:41:7a:fb:71:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=15a5ec9eee562d5d6ecb1602740cfdded6eb19f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:83:ac:c4:3c:59:33:3c:8b:ec:a9:a8:1a:
55:e4:da:4b:5b:de:4c:ec:f7:cd:c6:98:56:07:57:
f8:37:f2:8d:d0:20:00:00:b8:2f:ff:99:4a:e0:3d:
c6:9c:11:a9:37:a7:ff:1b:40:95:bb:f2:55:3e:7f:
9d:e3:49:64:9b:8b:6d:c5:ee:f5:08:80:77:33:a3:
ef:e7:84:27:39:2e:7d:31:3c:9e:e7:89:3e:6a:69:
4b:9e:b3:e2:04:32:86:bc:e7:8e:1c:38:5d:18:53:
bc:77:6b:b4:36:e6:50:39:d9:55:e1:04:13:49:eb:
a1:b5:cd:8f:f0:5c:1b:75:50:64:aa:46:30:25:b1:
b6:8f:b3:91:2f:60:13:f8:1c:3f:b6:6d:b5:c0:0c:
3a:d0:8e:08:83:41:38:10:56:55:0f:d7:96:ed:c5:
b2:32:1d:ac:cf:cf:0a:1c:35:50:ea:a9:19:d0:f8:
a0:1d:38:bf:83:f9:c2:9c:ba:d0:c1:c9:6d:66:e9:
f7:c5:8e:1a:06:0b:95:8a:d6:6e:99:eb:0b:c9:77:
7a:04:de:01:81:54:f9:42:90:89:cf:99:12:30:0c:
2e:1a:cb:df:b3:04:ef:aa:09:cd:58:86:51:62:0b:
9b:3b:02:00:6b:80:af:f5:02:51:75:eb:83:55:4d:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:EC:9E:EE:56:2D:5D:6E:CB:16:02:74:0C:FD:DE:D6:EB:19:F5
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fa:80:bc:b8:74:dc:96:bb:f4:34:13:50:34:e0:14:40:fb:
82:7f:0b:ec:f9:39:3e:ff:7b:19:63:6b:9f:a8:7e:cc:c7:ac:
85:93:96:c8:d4:69:be:4f:3c:7d:f5:5b:bd:b3:51:1e:ae:0b:
c6:23:61:86:02:a6:f5:d5:23:d9:5e:36:26:89:25:6f:20:c1:
ed:1e:eb:66:52:b2:b3:5d:90:83:a9:01:e8:60:9b:c3:99:fc:
44:ad:75:d6:0a:5b:14:08:1a:c9:02:d0:0d:a4:d6:57:32:f7:
23:5c:f3:b1:eb:7d:da:ef:5b:51:a9:85:66:1d:e7:3b:2d:b6:
89:a7:73:af:b2:b0:91:7e:ca:69:be:c6:bb:8b:e2:5c:d4:f0:
08:92:74:4f:49:37:10:c8:77:f1:2a:96:fb:49:d9:66:17:62:
b5:ba:99:3b:ce:79:38:7f:a5:dd:c6:06:f2:35:d1:87:23:5d:
46:71:99:32:c0:70:97:86:35:00:15:26:10:44:5e:70:bb:71:
e7:4b:77:af:2c:c2:98:59:35:bb:ef:73:8c:c4:f6:4b:5d:5e:
fc:20:73:c2:62:96:42:b7:67:ee:bd:fc:c6:5a:b5:43:c9:07:
20:b1:51:dd:f6:74:44:2e:71:23:de:04:be:fc:31:21:16:ed:
83:e7:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:30 2025 by rpki-client