Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.mft
File: ev8oX8LKwE1c90jweJq2paBhZ-Y.mft (raw, json)
Hash identifier: LCCszd0WUCy+qxPiALyZMQ2WEYUWmG1V4nh4EYahIOM=
Subject key identifier: 5A:84:9D:F0:9F:F2:33:AD:4A:8D:C9:0D:8C:EC:A4:BB:C6:96:DF:0C
Authority key identifier: 7A:FF:28:5F:C2:CA:C0:4D:5C:F7:48:F0:78:9A:B6:A5:A0:61:67:E6
Certificate issuer: /CN=7aff285fc2cac04d5cf748f0789ab6a5a06167e6
Certificate serial: 01958693CE212A3E7ED44BFDD5300A5FB1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ev8oX8LKwE1c90jweJq2paBhZ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.mft
Manifest number: 01
Signing time: Tue 11 Mar 2025 18:59:48 +0000
Manifest this update: Tue 11 Mar 2025 18:59:48 +0000
Manifest next update: Wed 12 Mar 2025 18:59:48 +0000
Files and hashes: 1: ev8oX8LKwE1c90jweJq2paBhZ-Y.crl (hash: xI6/qPjq3G2yBDe1yis3FL3H2dKjIRkOMEpVt8dI1Ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:93:ce:21:2a:3e:7e:d4:4b:fd:d5:30:0a:5f:b1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aff285fc2cac04d5cf748f0789ab6a5a06167e6
Validity
Not Before: Mar 11 18:59:48 2025 GMT
Not After : Mar 12 18:59:48 2025 GMT
Subject: CN=5a849df09ff233ad4a8dc90d8ceca4bbc696df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:c6:64:2a:43:69:57:bc:19:1a:18:45:6e:
cb:15:50:80:05:d8:62:b5:de:39:3d:fc:da:d8:40:
f6:31:63:12:c4:7f:6f:1a:5c:0c:11:8a:6b:37:18:
3c:11:7e:73:d3:eb:f8:79:64:ae:f0:91:cd:ee:13:
d1:7e:9a:db:8f:e0:a9:9e:68:de:2f:fd:3b:2f:5c:
cf:65:e6:41:22:a3:ca:d8:91:81:41:39:8f:60:07:
d1:09:c1:80:33:2a:58:e8:b2:d8:50:08:6e:24:44:
ee:31:47:ae:4f:1d:30:4e:99:23:a9:e8:7b:a6:3d:
d6:8a:8b:b3:66:51:6c:9d:19:a8:e9:d6:8e:08:e2:
f8:6b:b5:1f:8e:7f:78:77:79:20:dd:70:b1:30:f5:
6d:e0:5f:3d:db:06:65:65:87:65:7b:11:85:c4:c6:
6e:ce:4a:e6:bf:3b:d3:fe:64:f3:0e:87:97:47:14:
2d:c7:4d:e3:e5:3d:8d:f4:10:16:48:f9:e3:7c:4a:
94:f9:0d:1e:79:ac:1f:ed:67:84:3f:7a:5c:1a:ca:
80:de:5d:d5:84:ca:71:fc:43:d7:65:a7:fa:4c:ac:
85:c6:ad:3a:f8:13:47:05:38:52:63:c1:ea:b7:9e:
ea:19:e3:d1:38:99:d3:39:90:15:bf:b0:60:fc:4e:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:9D:F0:9F:F2:33:AD:4A:8D:C9:0D:8C:EC:A4:BB:C6:96:DF:0C
X509v3 Authority Key Identifier:
keyid:7A:FF:28:5F:C2:CA:C0:4D:5C:F7:48:F0:78:9A:B6:A5:A0:61:67:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ev8oX8LKwE1c90jweJq2paBhZ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c7:9f:61:c2:8e:63:7e:c5:1a:f6:aa:81:9f:98:30:bc:d6:
61:8e:5e:b5:2b:2a:23:75:d3:3f:e2:bf:02:83:d6:c9:a9:b7:
df:4e:87:4f:b3:fd:78:20:7b:0a:92:8b:17:be:b3:7a:0a:b6:
cb:19:19:9b:8e:46:fe:a9:88:a4:fa:7f:35:e1:27:0e:7b:63:
6c:c1:4a:c1:f8:e7:07:42:81:aa:15:6f:2a:ee:f9:73:3b:0c:
35:5d:13:44:7a:36:c4:0b:12:6c:b8:9b:4d:31:76:60:2f:ff:
e6:ce:23:30:0a:c6:a2:a9:4f:63:ef:52:0d:6c:24:4f:db:d3:
26:b6:45:2d:f8:10:f5:94:40:ce:06:ad:c1:a3:5a:54:e5:8d:
eb:f8:c6:48:05:2d:ca:52:f3:7f:3d:e1:98:5a:f7:b5:b0:1a:
e2:da:f8:cc:ef:8b:5a:72:f7:22:1a:c8:68:3a:82:a8:4b:f4:
5a:8d:fb:0d:27:f3:50:d9:97:1c:c8:a5:2d:be:ce:55:53:d3:
43:a2:6f:73:08:c3:52:fb:b4:9c:89:b0:0f:5c:14:ad:12:be:
40:ea:ca:ee:11:5d:84:a9:5b:4b:d5:bf:a1:59:97:25:00:25:
b3:83:cb:5d:46:25:9e:85:86:79:58:27:36:57:79:92:d3:bf:
f1:9c:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:28:46 2025 by rpki-client