Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: hDGWJ2yw9gPFjuJ1djKKZR3kKzamdVXxR/8YauZJO3I=
Subject key identifier: 75:28:23:2C:DA:BF:68:0D:B6:6A:3F:D4:65:60:76:D5:AD:93:A7:F4
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 0194BC731D8EE85175AC407115FD03008BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: EK9S/TtJ9U5fCEFpTaq1nm/LYcdEn1ohBYd9u4SdFJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:8e:e8:51:75:ac:40:71:15:fd:03:00:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=7528232cdabf680db66a3fd4656076d5ad93a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:9d:cb:60:66:fe:d3:ac:f3:31:6c:4c:2f:
a1:c9:78:e4:63:12:74:19:4a:de:c0:80:87:b0:47:
48:f0:f4:41:bd:a8:e9:2a:81:74:2f:cc:cf:98:6f:
15:9d:22:15:8b:be:5f:54:b5:c3:b2:5d:61:cf:e4:
4a:ed:76:09:3e:8a:03:b5:a0:9d:f2:b3:63:d3:f9:
62:a1:b8:bc:ad:45:e5:2c:17:52:79:95:cc:1f:23:
92:a1:df:c2:05:01:61:5c:08:3c:7c:62:51:62:9f:
f8:63:c8:d6:b0:19:67:ca:b3:31:d5:d3:f1:a5:6f:
cd:95:6d:88:f3:a9:c6:6b:aa:1b:7f:11:2c:c1:c8:
92:66:50:a6:9c:95:b9:e8:92:21:9a:da:f0:3a:5f:
b2:f7:4d:43:13:89:9f:39:14:24:d6:54:4e:b0:7c:
2d:97:d0:14:aa:74:cc:c1:99:62:6f:d0:d1:67:3d:
cf:8b:a4:3a:ae:3e:26:60:a5:17:90:87:87:a4:a9:
dd:23:4a:2c:b0:a0:4b:61:8d:f7:b8:8c:56:4f:b1:
9c:ca:a8:4a:0f:0a:92:54:b5:2c:e1:3f:5c:27:31:
b3:5d:f8:bf:0c:d3:01:71:e1:d5:87:1d:79:9f:47:
fd:5f:aa:e1:d7:c7:18:ba:86:e8:9a:46:8e:df:d9:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:23:2C:DA:BF:68:0D:B6:6A:3F:D4:65:60:76:D5:AD:93:A7:F4
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:63:13:31:36:6b:04:42:ba:40:b4:07:da:43:73:be:75:
26:89:e4:98:57:32:3e:d2:8c:83:8e:42:d0:81:8b:81:2f:78:
05:a6:84:bc:24:98:4d:d8:38:de:d7:ac:78:b1:d7:6e:a2:eb:
af:57:4e:32:4f:f7:a6:42:07:5c:a3:d3:fd:bb:00:2f:0c:fa:
19:ec:85:47:87:4b:66:49:71:13:e0:eb:26:69:33:a8:bb:ac:
bf:2c:54:eb:7f:5e:1e:16:ea:45:a5:ac:09:fa:9d:6d:78:35:
82:9a:a9:a3:84:51:7a:22:32:f9:9b:c6:06:c6:b0:c1:3c:d7:
76:37:b4:68:4b:53:80:9b:38:5c:a1:a7:22:f0:22:19:a5:41:
2c:4a:d9:c5:1d:0f:5c:e2:b1:eb:8a:27:99:53:59:32:0c:a0:
8b:9a:de:16:47:d1:5a:dd:31:d1:de:c0:89:24:36:48:37:74:
b3:4a:e0:d6:56:f7:10:e8:48:03:ab:e9:10:7f:1e:68:4d:66:
b3:cd:c9:34:e9:7a:8e:d5:fe:c4:88:9a:96:82:1d:77:f2:a7:
15:5f:f6:7c:e2:14:1d:e2:30:bc:17:af:68:7c:f6:31:63:32:
d5:b8:60:8d:f2:1c:39:a0:79:48:8f:90:73:d1:42:7b:06:18:
55:92:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:10 2025 by rpki-client