Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: yWQJmPDHlyej39LJwA8p54tFtA8DB7iH6ORZo3MAY8Y=
Subject key identifier: 7E:D9:B4:9B:24:D5:D8:36:13:28:DE:BE:07:7C:C6:2A:E8:3F:D8:B2
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 0194BC3BDF536D2C508E8EB7C6DB4C270227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 0D37
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: BnsOF5yGkBGaOXtIK2SxJgDxUeta+HLlq9O7Od9vwvM=)
2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:53:6d:2c:50:8e:8e:b7:c6:db:4c:27:02:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=7ed9b49b24d5d8361328debe077cc62ae83fd8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:a3:6f:8e:76:35:c7:07:e8:ad:fd:93:20:
17:93:70:a3:02:d3:56:2c:46:ae:d3:58:d4:1b:a9:
af:d7:4e:39:28:07:0a:fe:58:bf:31:ec:05:a9:c4:
d9:fc:42:28:f2:fa:ab:c9:d2:fc:0e:cd:40:cb:c9:
05:86:cd:77:26:cb:e4:93:2e:77:d6:a1:fb:0a:ab:
2a:2a:d2:34:dc:09:0e:a3:b9:11:05:d2:1c:c4:12:
a3:30:13:8a:db:af:01:0e:0e:ac:98:e2:d6:bb:de:
4a:08:1c:10:21:80:cc:3b:fd:da:3e:06:5b:aa:b3:
02:f4:77:0d:5a:ae:f2:9b:35:4a:a4:42:2b:96:4e:
f0:a6:54:8c:aa:3d:29:eb:aa:4f:06:5e:12:dd:93:
26:0b:17:f9:92:4f:43:9e:06:3d:06:15:7b:59:94:
be:1c:d8:b5:2c:e8:61:cf:97:d6:3c:1d:7a:03:31:
c2:3a:df:2b:b5:f4:5b:d2:e1:4c:b9:66:17:7a:da:
f2:7b:e9:85:d0:77:95:ab:c2:ee:8e:4e:5c:85:1c:
35:55:61:be:9d:1b:bd:79:18:9d:46:e1:84:01:ed:
27:2b:ac:a4:76:43:11:e8:a3:42:68:3a:0d:db:a0:
93:1c:6d:02:48:ca:69:77:aa:d8:e2:32:c4:bc:31:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:B4:9B:24:D5:D8:36:13:28:DE:BE:07:7C:C6:2A:E8:3F:D8:B2
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:15:66:a4:2f:9a:89:73:81:49:f4:10:e3:e6:e9:c2:60:
76:6c:11:c3:b3:75:92:c8:d4:73:a8:de:54:ec:e9:6f:6d:57:
54:de:23:d9:81:ed:a4:aa:9c:0c:0e:e2:35:01:59:0e:4f:99:
cf:28:8d:36:00:ab:36:a3:77:ff:aa:c6:b8:36:22:4c:63:83:
b7:18:cc:ba:b9:9e:6d:83:3f:1b:b1:57:4d:fa:a2:5c:a5:d4:
73:d2:de:80:f0:cd:66:75:24:60:8a:5c:a1:fc:08:1c:51:4b:
c4:e7:b9:2c:d8:db:fe:77:f5:f4:39:81:53:47:33:a0:42:2b:
dd:24:fd:29:01:cf:93:6c:e1:c8:09:04:2c:66:17:5e:17:1b:
92:94:ad:fb:b9:57:c4:d8:ba:cd:36:79:10:f0:0f:24:9a:53:
3e:3a:b6:8c:e3:b5:79:77:be:d8:b3:b8:67:d8:a5:dc:77:9f:
0d:0d:71:1c:e1:3b:6d:9d:e4:a4:17:15:de:17:80:e3:d8:b2:
92:83:84:f7:ac:9f:74:e0:52:13:f3:e5:19:eb:fa:4c:66:4a:
d9:b4:00:16:1e:e2:c8:1f:f6:1e:79:63:3a:c5:ca:39:c3:83:
25:aa:9e:19:eb:e8:b4:3c:71:9d:7f:42:7c:a1:5f:7f:f1:8c:
45:ea:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:31:32 2025 by rpki-client