Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: We9JKm+d2OLqeFD03IoznHfLYJHle6Kc1gEQL2+H5wY=
Subject key identifier: 08:79:B8:11:E3:31:E1:F3:1D:E2:4D:2E:24:D4:99:91:32:75:05:22
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 0194BBCE0B6F04FC983C46EAEAAB42F11367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: a8a3ndHsuW/1gSIbC+MnHqmQqYbJi5FMAxeZvZ70jEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:6f:04:fc:98:3c:46:ea:ea:ab:42:f1:13:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=0879b811e331e1f31de24d2e24d4999132750522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:ab:90:60:ba:9f:4e:ac:98:d2:80:02:e3:
a7:02:45:9e:e9:d8:31:4a:b9:dd:03:82:a6:d8:53:
09:39:f9:e9:f9:0e:73:11:2e:5a:65:4f:0f:46:10:
3c:7e:50:a1:ea:b8:4d:e1:f5:60:40:cc:46:7e:50:
c5:a1:c3:48:47:f2:4b:5e:32:15:5c:fd:c6:73:69:
b2:66:8f:c1:e8:f6:44:9f:c7:ca:d1:e6:57:fd:c8:
67:7b:5a:f8:f2:2f:89:56:d1:b2:81:27:2d:4a:36:
14:99:9b:1a:f1:1c:eb:2a:a2:4d:2f:c6:80:9f:38:
d7:7b:b1:0a:8a:46:30:be:5c:b1:ea:05:5f:a7:be:
83:3c:5a:e4:d6:f0:a3:a6:47:3b:32:31:39:f8:06:
c7:d0:10:39:b7:6b:c6:c8:27:d5:ec:49:18:fc:1c:
3a:83:0c:26:6e:74:bc:34:81:20:7f:7b:c0:9e:7f:
8e:7b:a4:56:63:37:ea:e8:f6:07:a1:71:cb:ae:e1:
95:c1:a3:bb:5b:68:ca:02:43:6e:6e:74:94:12:79:
f1:7c:b5:62:93:0a:9f:7a:e4:64:d7:2e:21:0e:ca:
24:6f:6d:61:48:c1:e9:f7:0e:2a:fc:61:80:46:74:
2a:aa:01:5e:25:d8:1e:b1:79:80:8b:3f:ad:33:d2:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:B8:11:E3:31:E1:F3:1D:E2:4D:2E:24:D4:99:91:32:75:05:22
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:e0:ce:24:e6:7d:7b:b0:43:9e:de:a4:2f:c5:21:c5:1f:
d0:83:57:9e:eb:37:49:e0:ab:3d:e2:78:9d:c7:48:c7:92:d7:
f9:b5:8b:4e:c9:bc:e4:ab:aa:3b:fb:cc:de:cf:79:38:a1:5b:
3b:8a:35:c7:1e:f7:ed:60:4c:93:c6:2d:fb:60:07:ac:8f:f6:
25:3c:26:2f:af:f9:55:a7:a9:d0:f9:25:09:78:bf:ae:04:5b:
65:c9:e5:a5:b8:33:1b:54:96:01:71:58:8a:99:f1:1d:a2:9d:
7d:83:13:3a:e8:b1:2e:03:93:9e:46:19:c9:b2:a6:22:99:d8:
c2:e6:b0:b3:0e:27:32:fd:6e:1e:29:c7:60:7c:12:2b:e1:f0:
63:8c:50:d4:b9:6c:ab:a4:47:17:73:b7:d9:78:0d:77:bd:ce:
45:7b:c3:95:35:8b:db:dc:5c:ce:5e:71:c0:e6:a8:8f:1b:23:
12:81:52:42:fd:7f:38:33:8a:74:22:d1:35:37:d9:66:42:82:
27:e2:29:26:f1:05:2d:56:5b:6b:5b:00:b0:89:f3:11:71:52:
05:f8:97:1d:c2:ea:75:a2:50:75:27:5a:d8:a5:aa:38:af:19:
56:a4:8c:88:16:26:f3:bc:03:9f:5d:7a:47:39:92:6f:5a:2c:
6c:ae:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:28 2025 by rpki-client