Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
File: eiq2IdNR_j8HPogZQO680cht8-k.mft (raw, json)
Hash identifier: l4txq2fLx2Dt7XggKQyxrVarrwTq6BnYlSwcL9fsq/E=
Subject key identifier: 8C:16:DB:F8:85:A8:1B:28:0F:9F:83:F2:F9:40:C0:17:12:CE:83:8B
Authority key identifier: 7A:2A:B6:21:D3:51:FE:3F:07:3E:88:19:40:EE:BC:D1:C8:6D:F3:E9
Certificate issuer: /CN=7a2ab621d351fe3f073e881940eebcd1c86df3e9
Certificate serial: 01961245A1CB2072EC5B7A015082189DCD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiq2IdNR_j8HPogZQO680cht8-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
Manifest number: 14D7
Signing time: Mon 07 Apr 2025 22:01:15 +0000
Manifest this update: Mon 07 Apr 2025 22:01:15 +0000
Manifest next update: Tue 08 Apr 2025 22:01:15 +0000
Files and hashes: 1: eiq2IdNR_j8HPogZQO680cht8-k.crl (hash: Q97w4/eULhWaIsWK89uPfdomqaMN2I4AeggseidytTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:a1:cb:20:72:ec:5b:7a:01:50:82:18:9d:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a2ab621d351fe3f073e881940eebcd1c86df3e9
Validity
Not Before: Apr 7 22:01:15 2025 GMT
Not After : Apr 8 22:01:15 2025 GMT
Subject: CN=8c16dbf885a81b280f9f83f2f940c01712ce838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:25:e3:c7:7a:58:13:b8:dd:d5:37:9e:f2:
58:ca:60:27:02:da:04:02:35:02:3f:9e:a2:c3:c3:
60:d6:52:b7:f6:d5:47:44:53:c9:f4:f8:17:8c:11:
50:51:e1:17:82:d8:f0:94:37:f2:30:be:59:8d:f4:
2e:3c:d6:ed:0d:9d:04:f0:60:44:bc:a3:4b:64:e3:
11:30:be:87:00:93:46:3a:08:3b:d8:38:83:02:bb:
e9:93:97:5c:ef:c5:89:ae:f9:82:05:6f:e1:6c:f4:
b0:85:24:3d:f9:24:5f:71:b2:1d:c9:34:32:64:e4:
8a:d1:29:f6:43:86:02:57:1d:8a:09:7e:64:b0:25:
36:1a:fc:ee:24:b8:a1:17:31:06:f5:e1:45:81:16:
0e:e5:7d:21:1a:78:53:47:a6:6d:e5:a3:1f:bc:73:
af:34:c9:c4:20:4b:24:f9:43:5d:06:1f:5f:7c:78:
1d:36:9f:99:1d:86:77:bc:ab:22:7c:9e:a6:61:55:
c7:f6:8b:c1:bf:26:77:27:9e:4d:c3:19:0c:ca:7a:
1a:54:5f:21:13:00:72:cc:64:12:35:24:7d:b2:17:
2a:e0:c9:4e:06:39:8b:6f:1f:ef:a1:0b:dc:0c:6c:
f8:1a:3a:b7:3c:92:b5:db:e3:29:40:82:de:56:cf:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:16:DB:F8:85:A8:1B:28:0F:9F:83:F2:F9:40:C0:17:12:CE:83:8B
X509v3 Authority Key Identifier:
keyid:7A:2A:B6:21:D3:51:FE:3F:07:3E:88:19:40:EE:BC:D1:C8:6D:F3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiq2IdNR_j8HPogZQO680cht8-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:43:a8:91:29:6e:a0:94:dd:f2:1b:93:3c:05:aa:0b:b2:
c9:92:df:47:b1:54:54:3c:62:4d:43:ea:52:02:90:8d:c3:eb:
37:3a:51:e2:b7:69:de:48:77:31:8c:11:b7:a3:3d:e7:ad:69:
51:ba:8d:1d:e6:72:53:52:f8:32:4d:b7:f5:e7:15:fe:0e:91:
8e:87:78:6c:16:ec:fa:c1:a0:01:aa:b5:96:d9:29:91:36:d8:
1c:f1:42:47:65:a6:93:da:1a:40:9e:f7:78:0e:42:84:61:e2:
fd:02:31:ca:ec:c7:23:cc:6a:27:d4:20:10:e0:e4:ac:0c:5b:
12:81:aa:10:31:d2:39:a1:d8:f3:bf:24:fd:f1:93:1b:62:3d:
9d:63:b0:dc:52:2c:8c:5d:69:07:2b:15:b9:d0:58:12:72:5d:
48:71:21:22:1e:9a:93:1d:c0:13:ea:2b:8d:a3:db:af:88:8c:
04:f3:8d:c2:d9:5c:5e:68:0a:3a:f6:b4:17:68:ae:3f:68:53:
1a:c9:8d:6a:dd:71:8f:a1:91:3e:dd:05:09:09:37:28:fa:75:
4a:d8:81:18:01:8b:bc:a5:3d:f6:1e:f4:8a:3d:39:4a:1b:d2:
9c:fb:2e:e5:83:26:f0:46:8f:fc:f7:39:d1:44:0c:42:24:96:
64:e2:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:40 2025 by rpki-client