
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: YxPGOgIKngskR8wjGsIBdko9c7whI9b9U6H3SEDkByo=
Subject key identifier: 82:8B:16:FA:45:56:D6:CB:2A:71:DD:8E:DF:95:63:C7:30:BD:9C:CC
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 0195E00F735E61E4B9889C134C26042BFB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 68
Signing time: Sat 29 Mar 2025 04:01:03 +0000
Manifest this update: Sat 29 Mar 2025 04:01:03 +0000
Manifest next update: Sun 30 Mar 2025 04:01:03 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: cqQ6/nNclHnYMzwAhH5zxplSQDv7/bA2+ZTBY2WuHTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:73:5e:61:e4:b9:88:9c:13:4c:26:04:2b:fb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Mar 29 04:01:03 2025 GMT
Not After : Mar 30 04:01:03 2025 GMT
Subject: CN=828b16fa4556d6cb2a71dd8edf9563c730bd9ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:9f:18:c2:d3:a2:b5:9b:32:f6:ae:54:01:
35:44:cf:5a:eb:e3:af:0c:3d:bf:71:1b:7e:55:a2:
d7:94:6d:91:b9:d0:2d:de:d4:b9:b0:e6:de:2e:6e:
a6:8d:c9:25:3f:7e:e3:73:4a:2d:56:40:68:6c:01:
2f:4f:50:26:4f:69:45:2d:ba:4b:2c:70:6b:c6:29:
18:c9:5c:9e:14:17:53:43:a1:16:bc:6b:c2:07:aa:
13:a1:06:d6:5f:4f:bd:d5:c1:a6:25:85:89:32:24:
7c:a1:53:44:ac:88:09:be:0b:f5:de:6d:93:7b:e8:
c4:dc:d1:83:56:07:8e:c4:a7:9d:1c:a9:56:c0:25:
48:3a:e0:5c:2c:3a:4c:4e:5b:50:2b:7c:34:37:30:
40:35:ee:99:a7:f8:e5:d9:4e:ae:a0:45:38:a0:e0:
97:9c:99:49:5d:fb:60:dd:bc:f8:4b:43:fb:e4:67:
04:bd:6a:36:9b:ab:bc:13:ef:ed:e4:ec:97:4b:66:
51:c6:dd:fe:ad:e9:1f:7e:02:9a:0c:57:e9:c6:22:
da:b2:e9:cb:f6:22:84:8d:3a:2d:0c:f0:ca:ca:a9:
7b:1d:b8:ee:8c:f3:34:96:46:e1:19:a2:c9:2d:61:
9f:44:33:84:ca:28:6a:72:59:fd:83:6d:03:68:b7:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:16:FA:45:56:D6:CB:2A:71:DD:8E:DF:95:63:C7:30:BD:9C:CC
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:ba:8f:43:55:d7:f6:c0:32:12:c4:51:b9:94:13:0c:58:
ad:de:c0:c5:f5:e5:9a:a2:c5:41:a1:ca:fd:80:ab:4d:34:e4:
4a:3b:d6:20:a1:60:d0:3b:64:4e:63:9f:dd:d8:c9:b2:c3:f1:
dd:72:70:a2:f9:67:94:d6:d7:c4:87:fd:8f:f6:bb:9d:9e:9e:
4f:ed:a7:35:7b:35:e5:09:29:ba:05:05:8d:dc:55:c9:c0:4a:
68:eb:e0:75:b0:67:2e:67:65:1a:ff:cf:d2:0b:c7:5b:3c:f7:
87:7a:85:e6:31:b4:f0:e0:b5:e4:fd:bf:c0:2f:6c:3e:7a:f1:
ee:3b:79:b9:16:ad:e7:01:64:52:17:8d:20:b5:00:1b:67:1c:
37:4a:d0:a3:31:e7:05:17:f8:55:40:9e:18:23:4e:45:7c:e4:
54:fa:a2:ec:cb:35:f4:88:03:c5:38:31:f7:f7:b4:1b:cb:72:
c2:8f:a8:3b:88:d4:43:f7:19:b9:04:43:90:b4:b8:06:73:7d:
52:de:4a:99:21:84:1c:85:b7:62:71:ca:80:ae:ee:52:5a:03:
83:47:1c:14:1f:85:06:42:ab:f1:3b:7f:3d:0c:32:0a:cc:dd:
2a:c5:3d:67:8c:14:d0:26:ba:1a:3a:d9:ab:21:df:f9:ae:1a:
c6:fe:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:42 2025 by rpki-client