Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/5c1041-7331-4542-a061-dc5ed427dd2c/1/ezPYQmadkvUcLA5k-71sx8Nn2PE.mft
File: ezPYQmadkvUcLA5k-71sx8Nn2PE.mft (raw, json)
Hash identifier: GcXDJN/WICA/NYo+SQVsD5H3l7WI9HFdc0O5Xm7k8e4=
Subject key identifier: 36:8C:83:95:4A:54:0B:80:B3:1A:B3:73:06:EB:D2:07:E4:AF:62:C3
Authority key identifier: 7B:33:D8:42:66:9D:92:F5:1C:2C:0E:64:FB:BD:6C:C7:C3:67:D8:F1
Certificate issuer: /CN=7b33d842669d92f51c2c0e64fbbd6cc7c367d8f1
Certificate serial: 019423AC1D31683B96E858F4353E1CBBE284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezPYQmadkvUcLA5k-71sx8Nn2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/5c1041-7331-4542-a061-dc5ed427dd2c/1/ezPYQmadkvUcLA5k-71sx8Nn2PE.mft
Manifest number: 0E48
Signing time: Wed 01 Jan 2025 21:01:09 +0000
Manifest this update: Wed 01 Jan 2025 21:01:09 +0000
Manifest next update: Thu 02 Jan 2025 21:01:09 +0000
Files and hashes: 1: ezPYQmadkvUcLA5k-71sx8Nn2PE.crl (hash: 4TrFQGkjgKwiIbDoTu8k5odAAGOETooPvz9WT4JW+zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:ac:1d:31:68:3b:96:e8:58:f4:35:3e:1c:bb:e2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b33d842669d92f51c2c0e64fbbd6cc7c367d8f1
Validity
Not Before: Jan 1 21:01:09 2025 GMT
Not After : Jan 2 21:01:09 2025 GMT
Subject: CN=368c83954a540b80b31ab37306ebd207e4af62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:4f:ca:af:39:13:3d:e1:f3:72:4f:e2:09:
57:13:1d:a4:37:0e:45:b4:0a:55:ad:bb:85:3b:d3:
27:9d:66:c7:66:49:3d:bd:d4:19:e1:82:fe:d0:89:
73:2c:c9:29:77:00:63:b7:9e:54:4c:18:87:ba:53:
22:84:87:ad:1d:cb:8e:a7:95:e0:d0:c0:76:84:ad:
a9:ad:09:f6:84:39:d3:2d:8d:6f:95:b8:0b:65:89:
71:04:7e:60:c3:46:46:e8:9a:f7:66:ef:57:6c:cb:
44:f1:cb:a5:bd:8d:16:32:58:9d:dd:e6:a1:06:a1:
7f:22:91:b8:9b:ad:7f:23:c4:17:99:7b:fe:95:6c:
2c:4f:b2:79:93:1d:03:b4:51:3b:36:f7:c5:60:86:
af:20:88:e1:a9:39:64:e6:4f:cd:d2:6f:b2:87:32:
55:bd:41:8e:31:1d:2f:ff:b6:37:03:55:6a:24:85:
94:8f:f3:4f:3f:fa:21:b9:20:98:c7:54:81:e3:93:
a1:3a:b7:5f:65:ca:0b:b4:b7:8f:0c:4e:55:5c:72:
d3:d5:f9:1c:4f:bc:fa:01:f6:94:bc:f3:4e:60:e8:
4a:32:75:98:44:21:b8:b0:7e:df:99:e3:81:0d:ae:
c3:4c:e5:b4:b7:15:0a:2d:d6:ac:d7:0f:01:80:65:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:83:95:4A:54:0B:80:B3:1A:B3:73:06:EB:D2:07:E4:AF:62:C3
X509v3 Authority Key Identifier:
keyid:7B:33:D8:42:66:9D:92:F5:1C:2C:0E:64:FB:BD:6C:C7:C3:67:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezPYQmadkvUcLA5k-71sx8Nn2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5c1041-7331-4542-a061-dc5ed427dd2c/1/ezPYQmadkvUcLA5k-71sx8Nn2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5c1041-7331-4542-a061-dc5ed427dd2c/1/ezPYQmadkvUcLA5k-71sx8Nn2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:1a:9b:a9:ba:c3:69:b0:33:14:ed:66:ae:9f:a9:84:6f:
d5:e9:30:3c:53:a3:2b:4b:ee:5a:e7:59:61:e4:4b:67:46:55:
e8:2c:ea:cc:c3:a1:93:cb:9c:03:66:04:17:5a:7b:e2:0d:a6:
91:c6:12:10:be:bb:8a:9c:cb:a0:b5:d9:b2:32:57:65:cb:7d:
8d:f9:38:28:e4:f1:82:f2:78:ef:13:99:09:04:10:b5:97:58:
7c:b5:51:58:3a:0f:c6:75:60:cd:8b:63:69:d5:11:86:cf:e1:
d6:e0:6c:db:19:98:62:93:d3:3a:58:d4:1b:86:67:a3:e1:5f:
a8:c5:e8:71:00:02:ae:e0:37:85:1d:31:6f:79:49:17:72:41:
86:b7:8e:e8:d1:8c:e0:d1:e7:ee:04:f9:5e:cc:57:ef:13:1f:
40:74:9f:72:3d:34:6d:45:4f:df:df:fd:b7:1d:ee:73:04:0f:
2f:45:5e:a3:3b:fe:4b:1a:e7:c5:8e:de:2f:ac:2a:33:68:5e:
1d:26:66:de:1a:d2:01:7f:fe:39:47:5b:85:99:34:9e:6e:b8:
4f:34:5b:05:ef:1b:62:a0:4b:47:3a:5c:db:ec:ae:34:77:62:
f4:2f:1b:ae:a4:7b:70:c3:3f:b4:18:21:29:55:39:da:8c:77:
52:81:bc:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQjrB0xaDuW6Fj0NT4cu+KEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzNkODQyNjY5ZDkyZjUxYzJjMGU2NGZiYmQ2Y2M3YzM2
N2Q4ZjEwHhcNMjUwMTAxMjEwMTA5WhcNMjUwMTAyMjEwMTA5WjAzMTEwLwYDVQQD
EygzNjhjODM5NTRhNTQwYjgwYjMxYWIzNzMwNmViZDIwN2U0YWY2MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5JPyq85Ez3h83JP4glXEx2kNw5F
tApVrbuFO9MnnWbHZkk9vdQZ4YL+0IlzLMkpdwBjt55UTBiHulMihIetHcuOp5Xg
0MB2hK2prQn2hDnTLY1vlbgLZYlxBH5gw0ZG6Jr3Zu9XbMtE8culvY0WMlid3eah
BqF/IpG4m61/I8QXmXv+lWwsT7J5kx0DtFE7NvfFYIavIIjhqTlk5k/N0m+yhzJV
vUGOMR0v/7Y3A1VqJIWUj/NPP/ohuSCYx1SB45OhOrdfZcoLtLePDE5VXHLT1fkc
T7z6AfaUvPNOYOhKMnWYRCG4sH7fmeOBDa7DTOW0txUKLdas1w8BgGWdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaMg5VKVAuAsxqzcwbr0gfkr2LDMB8GA1UdIwQY
MBaAFHsz2EJmnZL1HCwOZPu9bMfDZ9jxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpQWVFtYWRrdlVjTEE1ay03MXN4OE5uMlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81YzEwNDEtNzMzMS00NTQyLWEwNjEt
ZGM1ZWQ0MjdkZDJjLzEvZXpQWVFtYWRrdlVjTEE1ay03MXN4OE5uMlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS81YzEwNDEtNzMzMS00NTQyLWEwNjEtZGM1ZWQ0MjdkZDJj
LzEvZXpQWVFtYWRrdlVjTEE1ay03MXN4OE5uMlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn28am6m6
w2mwMxTtZq6fqYRv1ekwPFOjK0vuWudZYeRLZ0ZV6CzqzMOhk8ucA2YEF1p74g2m
kcYSEL67ipzLoLXZsjJXZct9jfk4KOTxgvJ47xOZCQQQtZdYfLVRWDoPxnVgzYtj
adURhs/h1uBs2xmYYpPTOljUG4Zno+FfqMXocQACruA3hR0xb3lJF3JBhreO6NGM
4NHn7gT5XsxX7xMfQHSfcj00bUVP39/9tx3ucwQPL0Veozv+SxrnxY7eL6wqM2he
HSZm3hrSAX/+OUdbhZk0nm64TzRbBe8bYqBLRzpc2+yuNHdi9C8brqR7cMM/tBgh
KVU52ox3UoG8NQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:55 2025 by rpki-client