Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: VYn/IvDUGZyR99y90frRKCd2GCX7W9ZNVgtpCqc/2N8=
Subject key identifier: E1:72:69:4A:06:C5:92:92:C4:42:25:A7:E7:EE:99:F9:19:A9:BB:EB
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 0194BBCE75817E5130DD45E1501EC1D9F780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 07AF
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: ZGtw4WkCBeks1UxaQm/9LelEkqLVMUqDAFFPjK6/FTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:81:7e:51:30:dd:45:e1:50:1e:c1:d9:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=e172694a06c59292c44225a7e7ee99f919a9bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:db:b9:6e:76:de:d8:77:19:b9:99:f2:63:
d3:21:c1:34:8f:58:f0:78:99:aa:40:34:eb:76:6b:
fc:06:95:a6:5f:35:1d:4c:39:23:58:dc:68:b6:f8:
c5:ae:e3:85:da:30:2a:01:49:08:89:29:25:98:20:
2e:fd:2e:e4:e7:00:ba:6a:99:56:ef:c8:42:83:f4:
57:af:2d:78:a5:ee:72:64:81:f9:f0:c9:6b:6e:1f:
24:9d:48:a7:1e:7f:7c:34:38:43:72:51:a7:01:06:
bf:a5:a8:3f:cc:3b:a1:54:9c:a8:39:b8:60:0b:f5:
0b:c0:39:05:56:5b:da:56:14:25:3c:88:6f:9a:28:
23:6b:7a:71:ee:58:25:ea:a3:ed:73:a1:c3:53:ef:
2e:00:02:b2:2f:c1:9e:db:46:3e:5a:e8:3f:51:79:
fc:2b:ea:03:55:54:25:dd:2b:29:1b:48:23:78:ae:
8e:a3:70:f1:2e:29:45:96:05:a2:4c:3b:24:6c:4b:
27:95:8d:2a:14:ef:d1:a2:db:99:9d:8a:96:4d:8e:
5f:65:72:68:12:5e:55:38:b4:5f:42:ce:25:20:d4:
36:53:2a:72:92:8f:d2:a0:58:7b:2d:28:2f:14:b7:
3d:31:b0:e7:f4:4c:ed:51:e9:8f:08:fb:b3:63:c3:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:69:4A:06:C5:92:92:C4:42:25:A7:E7:EE:99:F9:19:A9:BB:EB
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:ef:62:c6:b3:c9:ee:6f:a0:81:9a:b6:a9:64:0e:83:0c:
03:b0:45:4c:14:89:77:b7:94:21:0a:46:e7:43:e1:c9:a2:7c:
c9:97:c5:9b:89:9e:79:de:87:b6:5e:c5:5f:8b:9f:e7:e8:d5:
66:f0:f1:80:3c:3a:d5:fd:34:b8:c2:7c:1a:3b:e1:20:34:46:
57:14:04:56:8b:c0:eb:ee:ea:c6:2c:5e:b0:3f:70:7b:8e:67:
7d:05:1f:f3:8d:2b:7f:4d:20:8d:1e:8d:89:23:f9:8e:91:fd:
4f:bd:30:2e:0b:ab:7e:36:b0:3a:4e:a6:b9:8f:60:86:2f:5d:
db:dc:73:00:a5:69:56:f2:9d:ed:fc:8d:b2:7b:76:38:1f:d5:
c6:8a:ac:8f:6c:b6:0c:bf:05:6b:b0:92:18:16:80:4f:07:38:
3a:6c:41:e6:c2:31:03:8e:6c:03:cc:f0:e0:25:63:96:05:78:
0f:a3:2a:ef:66:dc:6c:81:0a:8b:4b:e6:31:35:ef:4c:d8:c4:
a6:0a:2d:94:55:d7:0b:61:2b:cd:1d:24:84:b4:df:92:5d:78:
3f:81:b8:8f:df:32:8d:70:07:78:85:ab:a9:97:3b:19:04:e4:
49:43:84:f2:80:bc:e7:ee:cb:bb:5c:b0:7e:1d:17:c4:ab:4f:
8d:b8:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:56 2025 by rpki-client