Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: dEaQstieH/guMdE/aBOyfBv7IbUM7m+uAaaNq7Epctk=
Subject key identifier: E6:AE:FF:72:44:FD:90:AA:B6:BB:98:36:30:F8:69:AA:DD:4F:D8:D7
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 0195E158FCCF19853B0ECE30C3337D9046F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 10:01:00 +0000
Manifest this update: Sat 29 Mar 2025 10:01:00 +0000
Manifest next update: Sun 30 Mar 2025 10:01:00 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: eP/p0k5DXEPvIxJb6KDmxcjDNKnaBf+5+gC5TF8exDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:fc:cf:19:85:3b:0e:ce:30:c3:33:7d:90:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Mar 29 10:01:00 2025 GMT
Not After : Mar 30 10:01:00 2025 GMT
Subject: CN=e6aeff7244fd90aab6bb983630f869aadd4fd8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:8d:7f:57:26:9c:cb:26:8f:b3:7f:f6:b3:
5e:95:0a:e8:61:f7:f4:1e:6f:e4:ed:8f:86:04:83:
d7:77:00:2e:97:9d:03:eb:42:0f:fb:32:55:e2:e8:
da:68:0e:14:90:95:3a:bd:08:fe:83:c5:b4:fb:94:
74:2f:d0:6d:2e:c5:c3:78:18:d9:d9:df:60:78:ed:
53:8d:5e:2e:3c:d8:1a:6f:0c:43:9c:6d:08:e1:93:
b8:9d:82:02:30:03:bc:28:bf:50:5e:b5:28:a3:49:
a1:00:f6:fb:73:c9:f5:15:cc:f6:90:ff:25:57:fc:
84:3f:fc:1f:33:82:b8:76:71:18:d7:0c:f2:35:85:
9d:d5:5a:8d:d9:40:08:48:59:4d:ee:40:30:23:ae:
46:0e:1d:b4:d6:d1:37:a0:2a:24:d7:88:3a:e7:42:
6a:c0:9a:96:a4:d3:ff:b0:77:72:07:02:8e:3d:c7:
3d:99:23:e7:89:4a:80:8c:50:64:d0:46:fc:a4:08:
0b:ac:53:6d:00:98:d8:41:7e:e3:db:e0:c1:8f:1f:
11:07:9a:a5:d8:35:a3:81:c9:f4:fa:8c:71:89:05:
a7:2c:77:ed:e9:63:54:e4:33:5e:b1:c0:c9:c5:21:
5a:c4:22:13:3b:79:28:7f:d7:36:c2:c6:1f:30:6e:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:FF:72:44:FD:90:AA:B6:BB:98:36:30:F8:69:AA:DD:4F:D8:D7
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6a:c3:27:5a:63:f5:e9:ed:7a:24:f0:66:7f:a5:95:51:05:
62:41:33:35:a2:72:ad:0f:3d:64:8a:3e:9a:df:f1:8e:86:95:
5c:c8:84:a6:ea:31:6d:47:1c:90:2e:c3:17:6d:ee:7d:8e:5a:
54:48:5a:ba:2f:b1:04:1e:88:23:a1:37:c3:a8:4b:c5:ee:df:
4a:cf:3f:7f:93:7f:28:26:0f:15:d2:01:0e:43:0a:6e:05:8e:
c9:ce:53:ec:98:8d:9f:43:65:13:6c:83:02:be:2c:10:e3:91:
e6:d7:5a:d6:09:3d:73:93:4a:34:19:e6:15:a4:21:f9:ed:1e:
05:1f:e0:d4:80:1a:ea:1e:40:13:c4:a1:fb:d5:55:9b:f5:34:
32:5d:dc:c2:20:fc:ab:38:63:25:73:24:cb:c6:35:a9:47:85:
41:d8:9b:6f:0b:fd:8d:96:bd:6b:e7:d5:60:de:3b:10:a1:eb:
1c:de:fa:c6:b5:61:98:12:e6:78:94:62:7a:58:00:24:68:cb:
32:eb:8c:4f:9a:a9:3b:b0:a7:bc:26:ce:56:b7:0c:b7:c0:98:
36:2b:8c:fd:50:0a:8c:46:bd:40:23:15:b7:d5:89:c1:fd:8d:
9b:78:eb:ae:8a:a1:eb:36:03:63:bc:6e:36:22:d8:4c:f0:d5:
5a:bb:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:28 2025 by rpki-client