Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: jQ3vOmdl8JE1QYqZFID/3OnZOVQvsrn7CkQkA1Vdo8c=
Subject key identifier: 73:76:12:69:2B:AF:DD:CB:ED:C2:65:B8:D9:54:CA:F3:D7:2C:AB:8E
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 0194BBCE4D48C1702F7F869B79A7BE9F69C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 10DC
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: u4eXGvLU9e0RcXuo0O6uEYnMEB2MMgWZKqLNrZBlpZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:48:c1:70:2f:7f:86:9b:79:a7:be:9f:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=737612692bafddcbedc265b8d954caf3d72cab8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:da:4b:15:fc:45:4c:4c:98:be:0a:36:08:
69:17:26:74:88:cb:83:6b:fe:d7:81:cf:ba:e8:23:
ae:75:1e:b3:4d:ce:ec:09:ed:b3:a8:3c:e8:bd:21:
c9:c1:f3:30:64:f1:25:5a:8e:f1:20:fe:bc:23:1d:
70:62:81:d2:8b:da:99:bd:ff:82:d7:d4:8b:a3:8b:
58:c5:8c:f7:d7:0a:2f:11:5c:71:a4:a9:cf:5d:11:
89:4d:02:5a:b9:63:63:81:1e:3d:6a:b3:7b:e8:5a:
93:41:4a:a2:18:11:65:0b:cb:bc:be:4c:d8:e6:3f:
01:03:3b:4f:d4:95:82:0e:76:c1:d0:18:eb:27:c2:
77:4a:53:e9:89:78:40:1c:c0:58:a1:22:6d:c4:7a:
ba:de:dd:d3:b4:0e:14:c2:8c:8f:3a:05:e5:dc:69:
ce:cd:4b:94:4c:15:6f:1c:1c:a7:46:88:ea:b3:f0:
a8:99:11:46:2f:56:92:5d:52:16:dd:e6:38:1c:c9:
a6:8a:cd:6b:48:01:15:61:b8:18:34:b5:8b:5a:8f:
40:47:95:08:f9:a2:99:8c:98:12:f8:1a:82:0f:47:
43:92:96:66:32:98:8f:d0:7d:fa:18:65:45:82:53:
81:c2:91:ee:47:4f:be:52:32:ad:e7:e0:89:d8:1f:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:12:69:2B:AF:DD:CB:ED:C2:65:B8:D9:54:CA:F3:D7:2C:AB:8E
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:39:aa:e6:d3:2e:4e:ce:ba:1d:f9:57:5e:7e:66:d0:36:
77:13:83:82:62:48:35:a1:fc:26:7b:4a:bd:b5:b2:b0:a7:8d:
3e:0b:7c:ab:50:77:d7:06:06:12:81:1a:00:78:74:81:89:cb:
75:1a:4e:fb:50:31:35:d4:ae:8f:9d:a5:39:44:4b:55:fd:e0:
a1:a9:40:6d:d0:05:fa:84:54:6b:76:13:2d:b5:73:36:8d:74:
29:2e:a9:ee:e0:d3:0a:b7:b8:fd:1b:b7:83:5d:e3:30:69:32:
8f:fd:f4:f3:e9:1d:65:b4:01:dd:ff:8b:d4:c0:09:24:d5:b1:
76:28:2e:b7:40:79:f4:ec:51:90:f6:bd:77:5c:fe:1d:2a:ab:
2e:50:7f:23:f3:5f:7c:33:37:f5:64:cd:8e:16:65:9f:88:5f:
6f:e4:15:cc:d6:5b:ae:78:be:b2:15:47:e2:09:87:93:c7:ed:
9d:65:8c:1c:a0:b2:3c:62:2c:b4:50:37:5d:78:75:d9:59:b9:
8e:72:eb:d7:c3:e7:42:cc:41:20:10:38:0b:12:c6:11:12:40:
04:80:b2:13:8c:4f:be:d8:d8:8a:5b:ab:87:6c:13:eb:d2:34:
31:49:08:3f:fd:3c:c1:7e:d2:3a:20:a8:4b:5c:10:53:6c:f5:
5b:a4:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:16 2025 by rpki-client