Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
File: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft (raw, json)
Hash identifier: sbsvld9g4y6YgcL7ajY95wS4Gxh6AsSZUDGV5B7n4Ss=
Subject key identifier: CC:B1:5F:E6:F2:76:2D:97:7B:A5:57:71:98:2C:10:4F:DB:F7:C2:39
Authority key identifier: 7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
Certificate issuer: /CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Certificate serial: 0196843600C89FEC66FB6C01A8B196BA7753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
Manifest number: 04AA
Signing time: Wed 30 Apr 2025 01:00:53 +0000
Manifest this update: Wed 30 Apr 2025 01:00:53 +0000
Manifest next update: Thu 01 May 2025 01:00:53 +0000
Files and hashes: 1: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl (hash: yfZS+huAl240XwRzGOV6FhpmMtjsaMk9E6ozuZX15EQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:36:00:c8:9f:ec:66:fb:6c:01:a8:b1:96:ba:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Validity
Not Before: Apr 30 01:00:53 2025 GMT
Not After : May 1 01:00:53 2025 GMT
Subject: CN=ccb15fe6f2762d977ba55771982c104fdbf7c239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:84:c1:cd:71:97:56:2a:16:f0:53:d1:f1:
24:15:ca:5b:55:2a:42:e8:60:bb:b5:4d:68:54:23:
12:a6:bd:72:01:d8:6c:7b:b3:99:12:c0:68:fa:db:
40:ef:e5:06:c6:25:9f:8f:ab:e9:45:16:ae:03:ed:
62:a4:2a:2a:51:da:ce:d7:bc:2d:24:7c:b6:ef:14:
f7:30:79:42:a5:68:46:c4:ee:92:16:8d:3b:bb:3a:
79:47:6e:19:1f:9e:b0:9a:4f:a8:c9:f1:38:73:0b:
5f:cf:20:fa:14:5c:57:df:ea:33:de:b9:47:45:7d:
88:10:02:61:81:5c:3b:d6:38:8c:4b:ca:08:2e:fd:
b0:ca:e7:3a:d3:a4:0d:ef:d9:cd:6d:80:07:5d:1e:
df:42:d3:86:5b:45:98:98:de:b0:df:3f:b1:b3:59:
6a:67:47:f4:bc:09:cf:c4:5c:cc:a2:98:aa:5c:ff:
ba:0d:37:59:7a:40:be:34:32:e4:08:16:21:01:4d:
29:3c:fe:6e:61:f7:4d:67:b6:6d:6a:f7:6b:8d:4d:
d0:1d:46:a8:fc:e6:db:56:63:47:f8:0b:7b:f2:b8:
db:c9:4c:3f:f4:55:a9:f8:f0:87:9b:11:2a:0d:c7:
95:d2:96:5e:00:d1:94:5a:19:bb:89:5d:50:5f:15:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:5F:E6:F2:76:2D:97:7B:A5:57:71:98:2C:10:4F:DB:F7:C2:39
X509v3 Authority Key Identifier:
keyid:7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:86:80:e8:6c:a0:9a:ca:38:47:b9:52:43:2d:e3:40:cd:
e4:dc:af:0a:9b:7b:e8:03:d4:84:73:be:3d:32:17:9f:44:48:
f5:d7:06:1f:8b:1b:96:d7:55:f9:7c:65:51:45:2c:55:88:36:
0d:6b:22:9e:de:14:c7:8f:17:a9:43:35:10:10:b8:71:b6:0d:
84:bf:1a:af:2e:74:2b:8b:f0:41:fd:ca:13:ca:6b:56:e4:58:
8a:9a:00:60:a8:e7:c5:47:ef:19:35:b5:ef:32:a1:77:12:f6:
cc:12:6d:63:94:11:66:a1:2e:2a:30:98:ab:f6:b8:e9:a9:2d:
bf:0d:6a:57:67:56:45:44:ee:af:fa:d8:1a:1b:1a:56:75:b7:
02:71:b3:67:60:9a:ad:58:b9:39:a1:6e:42:56:ac:1b:85:80:
f5:d9:21:73:36:d2:f8:8a:d0:c6:0e:8c:9e:1b:d3:af:b4:16:
3f:9b:a4:02:6c:48:f3:46:be:48:3a:23:ba:88:33:51:af:85:
d3:a4:b0:de:af:63:7d:95:83:33:2d:d1:a5:6a:c9:fa:6d:4f:
f6:56:ba:0e:97:30:87:6e:3a:c2:f9:0a:52:31:bd:01:a4:ad:
00:9a:4f:3c:64:d1:af:48:65:6f:47:bc:d9:fb:72:2e:fa:5b:
ab:24:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:03:42 2025 by rpki-client