Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier: CH5vu/caDrs08EHvZBCU/aJkMHCpzaygyjfd2G+YOQk=
Subject key identifier: 9E:C9:EA:1A:D1:62:1C:B1:A0:79:F5:70:2D:F5:79:6C:74:2F:05:09
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial: 0194BBCE35D078093110F41685F7DEDEB987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: BeOHYhhQYoVi7+10/9BSzqovJGw8cJI8YtJuVfWiFJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:d0:78:09:31:10:f4:16:85:f7:de:de:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=9ec9ea1ad1621cb1a079f5702df5796c742f0509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:c6:59:80:39:2e:12:47:05:ae:5a:78:34:
22:7f:62:15:bd:c5:28:a0:b1:ef:9c:be:b8:cf:eb:
01:be:c0:07:f9:02:07:f7:68:01:d6:10:67:11:96:
5d:d2:ee:f1:2e:fc:4d:3d:c3:cf:8f:a4:04:f2:35:
2c:d5:53:0b:35:a0:83:6e:12:10:f0:de:61:6f:0a:
e8:25:f8:fb:c2:63:be:d0:bf:6a:a4:5c:b4:00:5d:
56:35:58:81:6d:93:96:f0:1a:fc:05:ef:1a:4f:a6:
51:ee:01:c7:38:35:2f:6a:d2:a4:98:c4:86:84:eb:
b3:fd:6d:16:10:1f:00:51:81:b1:8f:10:71:8f:31:
56:ca:bf:c8:40:54:9c:e4:30:f8:6e:68:17:61:39:
f2:d5:2b:77:c7:65:d6:11:10:09:fb:f9:6f:e2:db:
55:20:66:ae:35:65:b9:65:c3:13:44:4e:bc:08:34:
5d:cf:ab:e3:21:fb:e2:d6:1d:ae:39:af:3f:ea:18:
ae:9a:34:30:4b:0a:09:fb:4d:1c:ec:79:55:48:01:
98:5b:81:af:c4:d7:54:40:cd:93:bd:3d:70:91:c5:
0b:ed:54:1e:bb:96:09:d2:f8:84:f0:4b:3a:8f:28:
91:a7:d2:ef:33:34:34:15:fe:b0:4d:43:5f:de:69:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:EA:1A:D1:62:1C:B1:A0:79:F5:70:2D:F5:79:6C:74:2F:05:09
X509v3 Authority Key Identifier:
keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:df:8e:e6:fc:c4:e8:b0:82:80:e1:63:56:12:1e:9c:17:
4a:4f:c2:b5:e9:5d:e2:72:31:c7:f1:22:8b:69:b7:24:e8:85:
d5:00:56:31:31:21:51:13:41:96:19:04:c4:ec:49:9b:e5:b8:
7f:5a:28:f2:eb:52:16:d2:09:fb:8e:cf:6d:67:88:aa:f2:f4:
3d:45:48:04:61:31:ce:a0:90:a4:e6:36:d8:93:e8:77:d3:52:
bd:72:ef:70:85:19:07:04:0e:dc:40:17:5c:ef:0d:9c:23:fe:
df:6c:fe:8f:d3:c8:15:6c:64:30:22:2e:96:5b:10:bb:21:1a:
05:cb:09:aa:ac:dd:9b:a6:09:1f:34:d9:c7:ed:04:5b:1a:f1:
56:fd:68:63:fd:1c:6a:9e:8b:94:71:84:ee:c1:c6:27:75:ed:
25:78:57:3c:28:74:1d:f5:68:d8:05:0a:c6:88:9f:8d:4d:be:
69:f9:db:0a:45:91:27:3f:70:13:19:77:32:4d:30:aa:07:94:
aa:0f:04:39:ca:07:4b:51:59:54:ed:69:61:fc:66:ea:65:ad:
8b:78:85:22:d5:3d:14:57:d8:cc:54:33:ce:10:71:27:ec:c2:
6d:f8:5f:17:5a:5d:26:98:16:98:e4:bd:90:f8:78:d5:3f:34:
01:b7:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client