Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: Z14+b0bAPE6RsDUNabHQZQMpo7Nb+FP+O27SxToHXck=
Subject key identifier: 86:83:B3:51:3E:F2:47:31:14:17:A1:05:A3:52:AD:4D:96:03:4E:8D
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0194BC72F860D1E7098758A68E2CD56C0DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: VAId2QxoQnSg0/xjK1xL09HU1NtuQuoaH87i0KV6HRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:60:d1:e7:09:87:58:a6:8e:2c:d5:6c:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=8683b3513ef247311417a105a352ad4d96034e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:5c:bc:78:0b:62:6e:86:1e:ec:9b:ee:67:
57:ad:0d:ee:a0:a2:2f:b2:24:7c:8d:8f:3d:b5:ed:
75:fd:cc:ac:db:e3:eb:79:b7:97:0a:01:2d:3a:23:
bc:3b:5d:f2:27:cd:dc:f2:46:7a:a0:b2:d3:07:2d:
18:cb:54:e5:07:dd:6b:8f:2b:45:27:b1:05:c2:0b:
a5:dd:8d:97:6b:1e:61:b1:5d:42:85:0b:b6:3c:2c:
69:49:25:1c:b6:85:d4:1c:1d:bf:ba:e7:d0:65:eb:
2e:7a:7f:f5:75:7d:3c:5f:31:49:62:3e:eb:c2:55:
5f:55:e7:4c:1d:d8:24:5a:66:91:53:61:9d:f7:bf:
98:c8:98:ee:81:a6:01:32:91:9b:de:68:2d:fd:3c:
75:98:87:a3:fe:15:be:1f:e0:f1:c5:fa:fd:25:fe:
e9:0c:43:be:d1:2d:77:54:b7:61:9b:e8:3f:3e:1d:
6e:87:6a:0d:d7:4b:8d:3f:2b:2c:2b:cf:10:af:38:
d8:4b:8c:b5:b0:fe:c2:82:16:40:53:36:07:b5:25:
b3:b2:1b:b9:b0:97:f7:ca:0c:95:12:d7:16:87:25:
f6:ce:af:77:3a:c0:27:20:e1:c8:0e:e0:a7:ba:3a:
5e:1d:42:97:b0:3e:99:fa:54:76:3d:69:b7:f2:a8:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:B3:51:3E:F2:47:31:14:17:A1:05:A3:52:AD:4D:96:03:4E:8D
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:c9:44:80:58:63:da:9b:96:68:92:7d:ec:4a:ee:83:a3:
28:aa:bd:e5:03:c6:52:49:f2:3a:93:80:c0:cd:5b:6c:37:bf:
00:85:53:3b:d5:b5:50:73:8e:93:e6:87:4b:2f:a0:c0:dc:68:
f3:2b:28:bf:36:6b:f3:ba:c6:03:7d:ea:fe:46:ba:4e:7c:29:
07:67:de:f8:19:41:0d:e7:c8:32:b4:2a:ee:34:1d:b4:3f:62:
25:e0:29:a5:62:27:98:3e:f3:1a:1a:07:d7:bb:7b:e5:58:5e:
b7:fb:d5:cc:fe:82:28:01:a0:3d:29:8b:a4:54:f6:9a:ea:f5:
dd:29:2b:42:71:d3:34:75:17:68:4b:f2:b3:81:e6:52:20:c9:
43:94:44:cd:a3:d2:2d:6a:0f:7b:00:0e:bc:3f:6a:c2:3b:29:
9b:9e:7e:70:6c:e0:67:e7:9b:c6:e8:e7:b5:5a:96:af:ad:97:
4f:e4:a7:7a:e7:19:73:2c:96:90:78:00:dc:84:1a:54:33:90:
bf:a1:c8:d2:54:f8:35:ba:d3:6d:10:ff:99:91:25:db:7e:94:
9c:87:b3:dd:e3:e4:4b:ff:bb:4d:ca:9e:9a:b0:ff:70:24:fb:
20:7d:0b:d7:5f:1f:d0:fd:6b:b0:50:50:7c:59:81:07:a5:53:
bb:04:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:32 2025 by rpki-client