Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: e74hWcmpMN+NrGPPWgNVHBNp3XDy+di6EXJiDCgVjj8=
Subject key identifier: 85:19:DE:CF:E5:43:51:64:CA:8E:58:88:52:47:34:1E:7E:C1:1B:F1
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0195E15A3B7680C480747DD6A3AF36903B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1450
Signing time: Sat 29 Mar 2025 10:02:21 +0000
Manifest this update: Sat 29 Mar 2025 10:02:21 +0000
Manifest next update: Sun 30 Mar 2025 10:02:21 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: nISxIOZKeM0cOR6+v4QSKnCM07cW6DDf8A/aGyFTyXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:3b:76:80:c4:80:74:7d:d6:a3:af:36:90:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Mar 29 10:02:21 2025 GMT
Not After : Mar 30 10:02:21 2025 GMT
Subject: CN=8519decfe5435164ca8e58885247341e7ec11bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:89:d1:36:3b:16:4d:d7:fb:5d:8a:0f:98:
94:fe:5f:86:d1:28:1e:b9:28:cd:13:4f:6e:09:5d:
3a:8d:ea:27:ae:d7:88:31:62:61:3b:2a:28:0a:5e:
fc:60:74:9e:9e:11:b4:4f:f6:7a:3e:0c:d6:87:94:
ae:11:b8:47:d9:d3:51:ef:c3:af:86:e2:51:b8:6e:
63:82:96:60:c0:1b:3c:bb:35:6c:46:95:2c:46:a2:
5f:03:b1:08:7b:e8:d9:d9:2c:7d:1b:95:ee:0e:a6:
51:12:e0:1b:66:34:99:82:ba:4a:b9:37:d3:6b:bb:
c8:53:38:2f:d6:38:0f:13:de:4a:72:d7:b8:d0:2c:
db:2e:80:28:fd:ad:18:57:8d:12:e8:f8:5d:74:ca:
d7:29:ed:ce:95:79:28:67:aa:99:42:c9:46:2b:8f:
93:35:bb:2b:c4:2d:d2:4e:6b:6c:52:94:da:9b:31:
a4:cf:c6:17:62:10:a3:4d:64:21:45:b1:79:79:a1:
7a:46:29:76:1b:18:09:b7:71:e5:1a:e8:6a:c4:62:
13:5f:f6:8b:aa:19:60:49:12:dd:37:d7:a2:af:03:
c2:bc:94:43:e3:05:07:a4:b7:68:c4:dc:7e:79:97:
11:dd:40:4b:c9:8d:c5:9c:6a:94:e3:6e:96:83:35:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:DE:CF:E5:43:51:64:CA:8E:58:88:52:47:34:1E:7E:C1:1B:F1
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:df:be:f6:40:4e:d4:89:4f:20:4e:07:ca:78:ec:5a:d1:
cc:2b:2a:9b:7e:47:b0:f4:f7:fd:96:7b:4c:c9:37:c0:68:6a:
c7:06:67:27:83:c5:e5:4d:00:1b:76:7e:9b:d3:31:46:00:72:
c7:59:71:52:b4:37:6a:da:ad:d4:28:ff:6a:f7:6c:14:c8:f7:
73:73:f3:a7:b9:91:ba:cc:d1:3f:72:90:5e:00:6f:8a:0a:e3:
f5:95:81:0a:a5:b6:25:05:d3:82:9a:f6:65:95:e7:89:4d:7a:
ee:ab:61:57:0f:34:c9:b0:29:50:3e:ef:b1:5a:8c:77:1c:4b:
9b:d1:8e:b5:4e:cf:7a:3c:9d:75:d6:16:84:00:b5:b9:a4:19:
bb:d3:b7:63:d5:f0:92:07:09:0b:bd:a1:29:9c:9c:ee:a1:bf:
5e:81:3d:40:63:3f:fb:24:60:7a:74:a3:7b:be:5b:a1:44:9a:
ce:71:54:0e:3f:64:e1:85:2b:17:11:e4:a7:9b:32:06:d1:8e:
d8:b4:01:1c:9e:f8:d4:d6:4b:f9:10:ca:b7:6a:61:e4:9b:cc:
e1:05:23:da:4f:9f:c8:9c:77:e1:64:67:c8:8c:72:b7:ad:9e:
8a:bc:84:ac:ae:ca:6b:01:14:2a:1d:c5:4c:9e:59:a3:cf:d8:
dc:56:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:39 2025 by rpki-client