Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: 4UWBiQbFfjIF/1eURSq6q5bbgIHGL7jfYbwAXmwWPDI=
Subject key identifier: 34:A4:75:D0:48:D1:23:78:AB:2C:7C:C5:A1:11:42:E4:82:C2:1F:0A
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 0194BD178E92A36F626A8B9819DBDF84FB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 0325
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: ZBNMk2Qi+pnxX2uk4yMbbIIOJ1DW/RxcKFvHCcTLnC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:92:a3:6f:62:6a:8b:98:19:db:df:84:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=34a475d048d12378ab2c7cc5a11142e482c21f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:47:b6:7e:12:d3:4d:a1:47:2c:48:7f:48:
5f:c0:67:a3:1f:ad:d2:18:0d:ed:f6:e4:e7:63:84:
12:b0:a0:9a:b4:de:7a:76:75:58:ee:31:c5:9e:96:
3e:eb:6d:cd:7d:4c:91:c8:67:ce:24:bb:c8:17:22:
83:73:3b:fa:96:d3:22:fa:98:25:34:45:2f:b0:66:
4d:0a:b7:7c:5d:55:eb:55:bb:cc:39:a0:be:49:81:
a4:d9:c1:04:64:31:25:8f:e9:cc:a9:26:8a:d8:58:
7e:47:46:89:62:bd:44:b9:1f:98:47:1e:f1:d2:33:
25:39:ed:c6:17:d8:1d:e9:1d:33:38:6e:3c:1e:cb:
af:b7:37:ae:3d:4a:ed:42:4b:39:28:13:05:f0:8e:
8f:25:05:c8:a3:e0:a5:fd:d8:ec:77:e3:c1:52:f0:
50:f8:33:93:b3:26:d2:e5:c7:f3:92:50:03:40:9c:
cf:e1:b6:8a:d7:ca:69:09:f7:b8:f4:d2:56:63:a4:
d6:bd:29:3f:3e:c3:11:45:e0:eb:c1:74:d6:08:cb:
ab:a6:bd:a3:e7:1d:81:64:fd:85:43:80:ec:bd:0b:
bc:0d:6b:fa:7c:81:fd:99:20:12:6c:82:59:41:a6:
84:93:28:a9:a3:69:6c:1a:4c:f9:46:3c:7a:43:6a:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:75:D0:48:D1:23:78:AB:2C:7C:C5:A1:11:42:E4:82:C2:1F:0A
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:a9:6f:fe:8e:3a:2e:21:79:d8:6f:a4:e4:5a:5b:62:f2:
04:fd:71:aa:8a:42:9e:bc:6d:88:7c:a0:79:9e:2e:ee:77:c4:
29:ae:31:37:54:d2:e3:33:fa:4b:33:a1:c9:40:02:4a:4f:19:
53:2f:ba:4e:93:8b:1a:ea:b8:3a:3c:f1:f2:af:37:9e:13:82:
ab:7a:97:20:55:2c:3b:8d:04:93:d5:54:ff:79:82:f3:a6:96:
1a:62:d7:fc:e2:ff:8f:1d:c2:99:10:b1:a6:31:6f:71:1e:78:
ac:55:fa:c1:03:a5:b7:43:d1:6b:86:2c:c2:36:d3:8e:49:ae:
3c:ee:e0:25:60:5e:71:ff:88:07:42:9a:16:1e:c6:6b:e4:4f:
44:2e:b9:f3:47:21:d8:3a:21:38:0e:cb:80:1a:b7:07:eb:2c:
a5:77:23:6c:44:a1:ed:88:8d:c9:7d:48:8e:1d:e9:92:fe:7e:
bf:87:24:64:d5:a9:3d:61:76:a6:8b:2e:45:ac:ff:45:3d:d3:
ad:55:06:ad:dd:5e:4f:51:d8:5d:6f:db:9c:7b:6c:65:14:f9:
ec:7e:37:4b:e0:90:0f:54:d4:d9:47:31:c8:86:7e:93:b3:88:
9b:a5:f4:59:57:51:46:c7:5f:28:ac:b4:a2:cc:77:14:c9:d6:
38:14:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client