Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: nUgapiF9IeGLwgW2i5bzKnzCwVqp7+x3m0nAiVnLiAk=
Subject key identifier: 0D:8F:B2:99:13:01:C0:C7:A4:CC:4E:9F:6B:7C:C9:6A:07:78:22:A9
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 0194BC3C8D1DC9437A73A790C6E105F0DF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 0E47
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: WA2911HRq+UJjykNFXKYAisNtLSShy9odoe+QA2lYYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:1d:c9:43:7a:73:a7:90:c6:e1:05:f0:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=0d8fb2991301c0c7a4cc4e9f6b7cc96a077822a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:27:7b:e9:7e:63:b2:c2:ec:ba:e0:b6:1f:
2f:5b:ec:4c:cb:3f:20:3c:43:4a:7b:db:5b:8f:81:
94:a4:59:5d:cf:9b:86:a9:f0:36:f1:7f:f5:8f:bf:
7b:fd:0e:3a:72:83:cd:bb:1b:e3:a5:3e:35:05:1e:
81:7b:db:bb:0a:36:fd:af:bf:26:41:dc:67:0f:14:
3d:5e:f1:61:28:57:87:aa:a5:72:b7:6c:a5:a0:28:
50:fa:7c:e2:1d:1d:55:3f:11:6c:7d:24:ca:6d:64:
7a:c6:04:21:1a:8b:6b:c8:9d:40:32:ac:d2:3d:76:
07:42:59:38:5a:58:8c:8f:b4:56:16:07:99:be:df:
67:75:e6:81:0d:d7:bc:9a:4d:3c:df:1a:d9:53:7b:
71:e5:14:fd:e7:ae:5c:d8:66:56:ac:ca:c8:de:27:
03:97:65:4c:8c:5f:9a:af:9d:d7:c3:f6:53:96:88:
45:0b:e0:b8:a1:0b:99:93:c3:92:79:b8:65:fc:d0:
4d:af:2f:4a:c9:be:55:12:8e:2e:f4:58:e9:4f:8c:
b7:2e:3c:bf:7f:84:21:2e:d4:0f:89:8f:a4:9e:b0:
d1:d0:82:11:7d:4d:fb:6f:6e:b3:2c:54:15:b5:f3:
cf:1a:d4:76:cf:a1:41:e0:2c:b3:6a:47:d2:f3:57:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:B2:99:13:01:C0:C7:A4:CC:4E:9F:6B:7C:C9:6A:07:78:22:A9
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:2f:0d:1c:3e:ab:18:32:39:38:ee:af:31:02:17:42:ce:
10:ff:1b:15:53:e8:a4:48:63:d1:e8:68:89:5d:c7:8a:1a:00:
70:00:1e:43:34:85:cb:60:c9:ff:0d:b5:df:9d:8c:8f:7f:ed:
e4:c8:c1:d0:fd:96:2f:6b:63:d7:55:a2:a1:8c:39:e1:22:c7:
2e:93:0b:b7:ff:d7:62:39:1c:7e:b4:5c:57:1c:8e:ca:9d:7c:
b7:ee:c7:f2:e0:91:ce:05:d8:bd:31:e5:6d:d9:74:aa:3b:d3:
2b:cd:f2:ca:35:72:d5:23:8c:52:87:40:60:9e:b2:77:5a:84:
87:4d:44:f2:a6:63:bc:53:29:d4:f3:9d:05:b8:7b:b8:61:b0:
49:dc:87:ed:e0:83:ff:f4:eb:38:28:04:d8:e2:0d:0c:2d:1a:
d2:59:b2:08:ff:23:7c:99:6d:9d:bb:b8:55:7a:c0:0a:15:de:
f5:a2:7e:d6:d1:32:f3:7a:9c:8e:6f:c9:f4:7b:0d:9d:d0:66:
f7:8b:23:5b:e0:1c:77:ae:04:8a:50:75:85:2f:94:b4:81:99:
3c:99:46:b3:f1:74:7b:4f:75:dd:c8:41:d8:40:99:3d:99:72:
4a:5b:a3:f9:25:4a:59:00:52:d4:77:70:89:38:f4:45:c7:c7:
54:77:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:39 2025 by rpki-client