Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
File: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft (raw, json)
Hash identifier: wwFSo8mjHJoNET7gkdAXC2Q5bdLh6snGnM03AOPvZgQ=
Subject key identifier: D3:04:CC:29:CC:2F:39:38:B6:1B:3A:D6:87:E9:31:52:B5:24:14:24
Authority key identifier: 7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
Certificate issuer: /CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Certificate serial: 0194BC72C728B7C6766E70D1B5554FD72C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl (hash: NXIK+1clgqlEtZtze7OQifMGh+vOagMCPGDYZQz2v5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:28:b7:c6:76:6e:70:d1:b5:55:4f:d7:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=d304cc29cc2f3938b61b3ad687e93152b5241424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:6c:7e:9c:0f:ab:e1:c2:8c:82:18:0d:eb:
3f:4f:37:6c:40:cb:34:23:3e:fd:e5:c1:25:42:45:
9d:e3:22:cc:59:eb:17:f6:84:2c:05:ce:75:a0:03:
f0:f2:54:a5:2f:cc:57:26:1d:db:fc:c3:62:98:26:
49:25:73:3e:97:b0:54:96:66:15:c1:70:66:e0:f0:
19:16:84:61:fb:4a:ef:40:1a:17:ec:57:8b:43:5a:
cf:7c:e7:c6:90:50:59:6b:03:e0:1c:26:14:5c:a0:
f8:9f:f0:98:19:0c:bd:8f:0c:60:f9:0f:28:22:f4:
3a:8f:02:d3:d3:03:3e:88:21:2f:af:ec:20:56:99:
b6:37:9f:08:9d:91:92:3f:bf:b6:60:66:7c:52:c0:
ac:02:24:20:f4:1d:42:e3:22:23:81:7c:a3:56:f5:
a6:b2:2b:35:14:c3:b7:2c:75:cd:9d:e2:72:01:63:
57:fb:1a:ff:e5:a9:62:cb:64:90:68:06:7f:c3:78:
9e:91:dd:e3:52:86:9e:fb:6e:13:74:ca:74:b6:95:
4a:17:75:69:9c:34:80:8e:23:b6:ac:c7:10:b2:22:
eb:73:9f:b8:d6:24:46:f7:70:fe:61:d7:03:b7:e1:
1a:c0:30:c0:76:42:f1:45:c4:33:8c:b4:22:af:ea:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:04:CC:29:CC:2F:39:38:B6:1B:3A:D6:87:E9:31:52:B5:24:14:24
X509v3 Authority Key Identifier:
keyid:7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:91:ab:f1:65:ab:84:a9:92:4c:ec:72:d2:99:7c:99:89:
16:b5:f8:23:7a:65:a6:ca:1e:33:96:7a:53:26:60:6c:b8:62:
47:dd:fd:e3:d9:87:35:35:c0:22:b6:a7:2c:56:48:ce:82:52:
99:db:13:cf:1e:0a:e9:a9:28:f3:0e:6f:79:13:01:d0:8a:c5:
ee:71:da:76:98:d6:57:6f:b0:16:bb:6c:5e:32:4e:56:2e:32:
5a:eb:30:85:02:04:10:7f:eb:6d:fd:14:2d:b3:b0:0f:53:2c:
b1:97:b1:4c:81:9f:59:b6:c1:a5:c9:45:97:ba:68:4f:cf:f1:
a5:82:88:a7:13:ed:b6:b5:03:26:24:40:d6:83:89:5d:ee:ea:
fc:c0:64:78:66:37:91:91:09:c8:b8:bb:96:b4:9a:88:ef:d2:
67:ef:8d:66:a6:ba:56:b9:4a:f3:24:1f:4f:2c:bf:c4:60:d9:
19:00:55:16:ed:45:9f:05:65:08:d8:2e:98:25:f0:62:83:e1:
51:cb:c0:ed:1c:75:85:7f:bb:24:07:65:fe:5f:2e:ba:6b:2c:
0d:7a:b8:d3:80:f4:ad:94:e7:99:c3:00:6e:e3:11:17:d0:7b:
40:f0:40:6f:3d:89:39:d2:8a:44:a7:49:50:eb:21:7f:d8:50:
00:18:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:21 2025 by rpki-client