Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft
File: enHaxjEjasASLLYtzMR4r_hQ6ok.mft (raw, json)
Hash identifier: 98+YFOGBvHURX8uF2h7KYLau1ekVbvLiX+N4jEAcETw=
Subject key identifier: 97:F5:0F:FC:5A:A6:41:68:97:8F:8A:2C:04:A9:5A:B1:2B:70:4E:87
Authority key identifier: 7A:71:DA:C6:31:23:6A:C0:12:2C:B6:2D:CC:C4:78:AF:F8:50:EA:89
Certificate issuer: /CN=7a71dac631236ac0122cb62dccc478aff850ea89
Certificate serial: 018636983456D8FC56BB29566DBDCB793B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enHaxjEjasASLLYtzMR4r_hQ6ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft
Manifest number: 0387
Signing time: Thu 09 Feb 2023 14:33:09 +0000
Manifest this update: Thu 09 Feb 2023 14:33:09 +0000
Manifest next update: Fri 10 Feb 2023 14:33:09 +0000
Files and hashes: 1: enHaxjEjasASLLYtzMR4r_hQ6ok.crl (hash: hz/8SNTGqX+41hMLqspHAkOj4SVN2BLkZkNBrmahHmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:98:34:56:d8:fc:56:bb:29:56:6d:bd:cb:79:3b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a71dac631236ac0122cb62dccc478aff850ea89
Validity
Not Before: Feb 9 14:33:09 2023 GMT
Not After : Feb 10 14:33:09 2023 GMT
Subject: CN=97f50ffc5aa64168978f8a2c04a95ab12b704e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:e8:5e:dc:fd:c5:fe:2e:a2:17:2d:82:1d:
a7:d6:d7:0a:a0:72:07:b3:62:58:55:48:69:c1:db:
76:6d:79:ea:40:8b:b7:f2:82:9a:4b:73:b6:c3:9b:
04:e7:56:e0:9f:e7:23:95:c2:84:15:55:31:cb:17:
3e:e3:a5:24:4d:5d:e1:a4:a7:e9:e7:91:e6:51:8b:
7d:b2:4e:5c:55:8c:60:9a:75:68:1b:b2:be:48:b2:
49:b1:fd:af:bb:07:50:74:5a:96:37:ed:8d:df:46:
2a:36:5a:3e:82:3a:3b:9b:09:f0:a6:82:ba:87:00:
f2:24:73:06:93:9b:ef:b2:08:2b:7c:4f:08:85:8a:
eb:c6:b1:7f:fa:b6:c0:d7:cf:b1:66:09:20:b5:81:
35:e2:83:33:38:2a:db:c0:26:51:85:bd:29:ba:90:
a4:4c:62:9d:c8:7a:95:0e:03:5e:13:4c:c0:ed:18:
55:5f:56:0a:fb:02:90:0c:ea:1f:c4:a0:f6:0b:cf:
ac:30:0b:23:00:0f:38:07:b8:6f:bb:81:74:c8:b2:
67:fb:3f:75:30:8b:1a:96:26:f5:b6:ba:c7:81:f0:
c0:4e:1e:b5:e7:93:a8:64:76:08:ce:37:ad:57:f7:
ec:fa:14:45:a0:5c:b0:09:1a:3a:2e:27:13:8b:11:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:0F:FC:5A:A6:41:68:97:8F:8A:2C:04:A9:5A:B1:2B:70:4E:87
X509v3 Authority Key Identifier:
keyid:7A:71:DA:C6:31:23:6A:C0:12:2C:B6:2D:CC:C4:78:AF:F8:50:EA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enHaxjEjasASLLYtzMR4r_hQ6ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:e0:6d:71:61:4d:ac:96:3b:f1:fe:9f:8a:cd:22:48:3f:
dc:97:0f:94:ee:c2:55:2c:24:56:74:4c:f0:9f:c3:64:8e:51:
df:cc:df:e3:08:8d:aa:eb:e0:95:f1:c0:da:a7:d4:4a:f5:ee:
e4:9b:5b:f3:cf:59:01:35:bf:42:68:2f:88:4c:b3:46:91:65:
02:43:fe:d7:7f:83:05:1d:d8:1f:d3:41:95:ea:f4:ed:2d:52:
93:87:b0:b6:15:22:28:5d:e3:7d:c8:89:b4:b9:91:0b:64:07:
a2:2b:82:6f:ad:d6:b4:3e:4e:b5:ca:59:55:a1:60:56:5a:0a:
2b:f8:dd:ab:76:85:80:b0:6e:df:37:fc:91:f1:ce:69:a8:ce:
a9:b2:d6:15:4f:f4:84:44:6d:24:f7:08:a6:8a:ee:f4:c1:1e:
af:6a:71:c7:a8:30:5b:70:e0:3f:fd:9f:cc:58:66:b5:f6:02:
30:80:24:d4:63:6b:3f:6b:97:ed:b7:5a:ea:37:9f:25:fd:b3:
d6:3c:96:fc:53:78:d1:f6:9d:72:4d:13:74:b4:f4:e5:6a:33:
8c:14:44:b4:8e:ad:23:ad:92:1b:30:39:21:d7:9d:73:f8:a2:
77:b6:7b:b6:1d:85:75:67:62:be:79:03:bd:36:0d:4d:12:f6:
2f:cb:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:33 2025 by rpki-client