Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: TrwBtYolS3YwJIfBweMgkvn1CwyecJXITN2Rn6w1oos=
Subject key identifier: 3A:DE:EA:7E:90:69:83:3B:97:B5:E9:CE:4E:FB:32:3E:BC:D5:15:C2
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 0194BC728065FE256B82BB5F71E2C0E1A6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: 5MipWphzvGxDJ6pwUIN87/jr3F+pDczGHVTy1Np2G5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:65:fe:25:6b:82:bb:5f:71:e2:c0:e1:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=3adeea7e9069833b97b5e9ce4efb323ebcd515c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:3a:b2:92:db:84:a1:4b:b2:ed:10:67:75:
27:13:35:9a:e4:f0:fc:d1:a4:f6:08:f3:e0:59:b7:
2e:ce:70:e2:19:db:18:44:e6:30:aa:35:d6:bc:26:
25:a0:64:e5:79:f2:51:98:f8:8b:3b:ab:f6:95:dc:
19:d8:eb:dc:95:58:1f:91:15:a0:b8:47:4f:57:cb:
41:22:b9:c9:c1:d9:86:41:b7:7f:28:1f:4e:6d:bf:
40:27:f8:41:ea:19:0a:c0:2b:d3:08:81:57:96:8e:
d6:80:ed:6d:04:aa:76:9a:86:45:be:7b:17:a4:21:
f9:30:16:fb:44:ac:26:29:09:28:bc:ad:bd:b3:77:
ca:11:09:33:80:7e:e9:8e:93:49:08:e8:46:bd:3a:
07:6f:a4:2f:18:8c:68:41:50:1d:31:ef:09:51:ec:
7a:38:31:bf:16:8c:de:04:b0:55:e4:51:b3:29:a1:
0f:68:9e:c9:7c:3c:41:4f:28:3d:cf:88:aa:54:bb:
46:5f:7b:6d:39:9e:b0:4a:1d:1a:1f:9f:16:c1:99:
61:ff:fd:e0:3c:d7:26:3a:20:ed:29:84:1d:1d:65:
0e:65:6b:61:cf:ae:8f:f2:04:33:16:97:cb:92:93:
00:81:5c:71:19:42:bd:a5:c4:e1:6e:da:1c:46:dc:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:EA:7E:90:69:83:3B:97:B5:E9:CE:4E:FB:32:3E:BC:D5:15:C2
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f7:6e:b9:f6:20:c3:b3:8b:68:dd:ca:8f:e2:0f:c8:c8:97:
5a:af:cb:60:eb:e6:6d:7c:20:58:87:3e:76:82:bc:cb:28:93:
86:e6:e3:56:9a:73:40:eb:62:53:0c:89:3f:08:b7:66:f1:6b:
28:11:8b:33:cf:db:a8:f5:25:48:1f:ae:ba:1e:01:9c:53:03:
4d:cd:cc:7d:87:98:b5:9c:04:67:6e:4b:32:c5:9f:3b:43:3e:
4c:83:c6:3a:35:fd:11:51:73:28:d4:90:f8:bd:3c:a5:2c:af:
dc:5c:ab:27:b2:2d:13:25:f5:63:2e:e4:8a:db:f8:9f:04:fd:
57:37:c8:9d:0b:a4:7d:bd:a4:1d:1a:f4:29:fa:ff:c0:46:79:
a8:d7:84:28:30:95:5b:1b:8a:ac:5e:2c:63:12:8f:0d:09:24:
8f:2d:de:cd:d1:12:2c:a8:2f:0c:15:02:13:a6:80:44:b2:28:
28:ae:b8:95:87:5f:8f:65:64:a4:49:7e:26:a8:91:06:d4:2b:
23:b6:79:25:60:b3:22:fd:aa:5f:dc:c8:30:bb:b2:93:27:22:
de:39:7a:95:ad:56:68:81:38:a1:80:8a:1c:94:8b:e2:ef:7e:
c2:a3:3c:4d:7c:92:6b:ef:f1:b1:07:ea:35:c7:0e:2c:68:bc:
8f:3a:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client