Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: DfCz2PZ9MGqTki7TSC9K2OcSWHrmZ2zEs2YzPT1R6bw=
Subject key identifier: D7:C2:CE:BB:57:04:9C:3F:04:0E:3D:C2:79:1F:8A:BF:05:BE:95:46
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 0194BBCDD7EA8F21CEE5E3BA4C5D24E5CF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0CFD
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: WU46nniEDLfQQPmRoESQ3F88KSjI3b0Ua+eH0uUaXlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:ea:8f:21:ce:e5:e3:ba:4c:5d:24:e5:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=d7c2cebb57049c3f040e3dc2791f8abf05be9546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:c4:a3:44:bf:2d:ea:6a:87:68:54:e6:5e:
66:3f:95:fd:df:fb:a2:79:cb:57:32:de:cc:d4:97:
38:e0:2d:e1:76:83:69:76:de:e5:b3:8e:35:d5:31:
55:6e:31:da:14:39:00:1b:ca:29:66:3b:86:2a:e2:
b2:7e:cb:3c:c4:86:6d:2b:7a:97:78:8b:24:a1:4f:
2c:ee:71:77:65:3f:7f:be:df:3e:a2:97:27:f0:78:
21:2c:e4:72:8b:28:bd:d3:d5:80:47:36:1b:2e:78:
97:48:bc:a2:a0:51:ff:1a:a6:99:ee:8d:30:19:5e:
39:62:ea:2b:ed:5f:11:01:44:a0:b3:7e:0d:9d:99:
7b:e9:f3:b2:aa:4f:09:6a:a8:fe:bb:1a:d8:6c:fd:
a0:e1:ea:8d:36:28:f1:1e:ba:ca:ba:bc:b9:14:70:
9e:fc:71:04:d3:b2:14:82:75:70:ef:79:21:90:7c:
58:9a:d1:8b:e3:a9:89:77:d4:e0:30:32:23:a9:3f:
62:ca:04:79:48:7b:e6:db:e7:96:b6:d5:2d:d6:d8:
2e:69:95:81:e6:08:e9:eb:b5:fc:ab:f8:8e:20:20:
ef:ae:88:a6:a9:a8:56:f1:e9:08:ce:07:32:fc:c0:
ca:40:c6:d0:a6:95:70:ad:b2:1b:1e:05:e3:52:18:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:CE:BB:57:04:9C:3F:04:0E:3D:C2:79:1F:8A:BF:05:BE:95:46
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:e5:01:76:ec:55:0c:e7:e9:dc:98:b8:7c:4f:bc:16:64:
ed:85:6a:6f:5f:d4:ed:2d:1e:91:11:9b:eb:bd:2e:1a:a1:36:
30:3d:38:83:c2:9d:01:ce:5a:34:41:2d:5a:08:26:e3:70:59:
ac:d8:ad:3e:ab:41:11:92:27:84:68:41:33:7d:e9:29:a9:d5:
94:7f:5d:ac:5e:c8:a3:18:9a:53:7d:55:ea:c7:f1:13:26:de:
c9:ee:54:7a:75:fc:16:70:ba:f9:02:3d:57:00:d7:fa:3f:ca:
4e:1d:e7:3a:81:cc:d9:c8:2a:d5:e0:ca:ec:e8:5b:dc:2b:92:
2b:ac:a6:01:64:30:c6:99:02:0f:4e:44:70:ec:04:7a:84:1d:
8f:b4:2b:ae:d4:a3:fc:37:e8:de:a8:f8:73:e2:a1:b5:c9:ee:
e3:5f:a4:13:f3:24:80:14:a7:1a:6c:1e:80:87:80:d4:74:71:
ee:fd:d3:cd:42:0a:bf:56:17:f6:56:d1:d7:d5:04:a0:1b:b6:
a6:5c:5c:cc:ef:b7:27:6f:33:80:e4:e6:8b:ae:53:c6:92:c0:
90:80:45:de:90:7e:d9:18:76:eb:81:14:87:57:37:ca:e1:49:
9d:ee:9f:bb:09:68:f8:6a:17:fc:d0:f7:d2:7c:ea:6a:5f:d7:
ec:ce:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client