Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: gymRzY43UAakFjwYN5osMi2b9E/Jf0ZEAeECZ9zj/78=
Subject key identifier: E5:3E:92:D9:30:F2:81:6E:BF:42:CE:D9:37:D9:12:2D:1D:95:CA:DA
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 0194BD175CDC834DDBBF35830201A6F84261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 025B
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: QNigIIARSh8b7JHSwgGl789I814T9JjsesVvYYYKf/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:dc:83:4d:db:bf:35:83:02:01:a6:f8:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=e53e92d930f2816ebf42ced937d9122d1d95cada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:dd:00:bc:1f:a1:ca:ba:ce:89:10:b2:55:
b4:35:76:f7:c7:c3:82:d4:9f:d8:5b:12:af:24:58:
f9:d1:fb:f2:9b:f5:47:2d:19:8f:94:2e:6d:c6:85:
bb:18:5e:62:ba:e7:65:0f:da:ca:4e:44:23:e1:56:
f7:b2:5b:2f:a9:55:8b:29:ed:4a:ad:e4:b7:84:0b:
3d:41:5d:77:88:9e:46:84:45:b4:8e:a8:05:93:4a:
68:e2:f5:2c:91:9c:97:cf:6b:96:c7:82:ff:f7:ac:
5f:ce:bf:7c:85:ba:c6:51:75:01:42:bc:3f:2b:36:
86:f9:88:0b:34:df:96:00:e3:d0:ce:60:94:b4:a1:
46:15:ea:58:ae:fc:cf:b5:10:a1:c7:ed:d8:ab:70:
16:d4:82:2e:69:b6:ea:55:84:dd:e7:a5:cc:31:7e:
92:15:98:21:bc:de:ec:86:64:1a:03:9f:97:0d:22:
8e:03:77:d8:5a:87:91:65:c2:04:92:34:78:2d:a1:
8e:e7:08:06:4a:fa:30:0a:47:14:db:bf:16:c3:00:
8f:c1:87:08:81:46:c7:ba:27:12:0f:23:8d:40:2a:
09:12:e3:da:ce:e2:15:d4:ca:5d:4b:f9:61:e8:8e:
7c:cd:ef:6d:26:ed:ff:dc:d4:07:b1:93:f6:ef:e3:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:92:D9:30:F2:81:6E:BF:42:CE:D9:37:D9:12:2D:1D:95:CA:DA
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:79:24:e2:ae:a5:66:69:0a:ad:a0:cf:75:bf:ed:62:2f:
f9:c2:b7:8b:4d:06:e5:70:fd:39:25:f7:82:f1:a5:9e:a8:ca:
d2:9f:cb:7f:46:36:99:08:84:2e:a2:be:9f:50:bf:b5:86:c0:
6f:00:53:fa:be:95:52:21:93:51:57:1e:fd:12:e1:17:eb:8e:
5f:f3:5f:a8:29:01:40:56:84:34:8a:f0:5c:85:1e:18:51:1b:
3e:79:04:60:f8:a4:06:6c:16:08:59:4e:4d:3e:d8:9f:b8:e3:
bb:95:ab:32:98:33:cc:cf:90:53:f0:41:75:c6:11:04:95:b8:
6b:4a:83:b1:40:3d:2b:d4:73:51:06:01:97:61:ba:db:31:ca:
5c:07:f5:28:06:59:e7:2f:db:a2:60:19:24:95:f2:f4:9f:95:
58:be:0e:f3:08:6b:41:11:09:9e:3c:dc:8c:cf:a5:8b:5f:e5:
17:89:81:c3:3b:48:7c:d9:ca:79:a6:29:86:41:8a:31:e2:09:
f1:9c:6a:1d:c1:97:e3:e6:b0:7c:46:b2:58:c7:90:ac:93:eb:
83:38:9b:01:1b:0c:01:a9:ac:6c:f4:d8:24:4b:44:9c:65:d2:
93:bf:8c:08:a4:f9:6e:85:65:79:eb:68:f9:2f:fe:64:08:f3:
f8:71:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:28 2025 by rpki-client