Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: Oh/9dDpcB0A12HhTONZAHSKMJoDifYhPxl/GbpSso0o=
Subject key identifier: D6:53:F1:E0:06:B2:C3:EC:21:29:5A:22:94:3F:C3:50:63:AF:CC:2A
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 0194BC3C2C7E8DDABE4F51C405E45E27ACE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 0F5E
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: 1BHqPYj1xI3VZGTbtayVXQQ0egz2iDdIrzIwtNFm+6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2c:7e:8d:da:be:4f:51:c4:05:e4:5e:27:ac:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=d653f1e006b2c3ec21295a22943fc35063afcc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:a8:aa:99:0b:00:93:9e:4b:a0:bd:3b:99:
ec:cf:81:b9:b8:a8:8c:83:eb:2a:46:68:4a:ed:91:
8d:0a:1c:88:81:00:9c:f6:89:4b:d9:87:96:a2:70:
3d:fb:b2:9c:16:38:88:b5:98:2c:55:c3:70:b5:77:
12:e2:68:5f:b7:e2:c1:a6:e9:3e:a3:84:2b:48:c1:
2a:53:32:79:30:7d:63:25:60:65:dc:53:6e:81:ea:
b3:10:a3:87:17:c6:f2:70:8f:24:b1:51:cf:8b:73:
10:6c:77:a5:d5:42:53:f0:67:62:ab:2a:6d:33:41:
dd:66:ce:cd:6d:14:94:66:0b:ce:bb:ba:46:36:53:
f2:6e:3e:38:2c:65:dc:5b:76:b7:e7:d0:8a:97:32:
87:4c:d8:8a:8d:1b:72:05:6d:eb:dd:80:ef:28:43:
7b:16:36:38:ea:6a:eb:39:2f:e9:e8:ab:1f:7e:d2:
85:13:2b:c0:c7:6b:d2:32:78:29:e3:da:02:a5:ac:
d6:70:d3:33:91:c5:78:3e:32:f2:44:f3:2f:e2:8f:
30:ba:8f:73:05:90:8b:c6:e4:b5:0b:9b:dc:91:5a:
d6:8e:30:fb:75:d2:8a:14:5e:c1:00:5d:42:a8:16:
ed:cd:20:21:ec:77:ad:5b:56:6f:bb:71:9e:ac:c1:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:F1:E0:06:B2:C3:EC:21:29:5A:22:94:3F:C3:50:63:AF:CC:2A
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:07:17:c7:2d:a0:36:97:54:4b:be:f0:a1:62:a3:9e:a8:
90:bd:39:d6:65:f6:ac:90:22:8a:b6:94:4d:63:b3:9d:c1:ad:
14:b2:13:d7:4b:55:d1:7c:07:45:e9:0d:d2:39:d1:6b:38:67:
c7:70:bb:35:f1:46:56:bc:cd:f7:26:5e:c8:e9:de:5d:c9:ba:
cf:13:65:3b:8d:1c:4c:97:97:42:12:79:86:3b:46:a0:76:7c:
99:b8:bd:4d:46:f7:3b:9b:ef:4a:52:0e:04:76:f4:c7:f0:0f:
70:34:87:dd:4a:0e:85:b3:1a:fe:f9:b5:3c:4c:8f:61:c1:ff:
38:6f:58:b8:08:51:24:0e:76:9f:ac:78:17:e6:0c:66:3a:08:
7a:f4:ed:b1:00:12:46:da:63:ba:c7:37:0f:60:a8:4a:62:1d:
be:d9:1c:bc:3c:05:89:99:a7:74:4e:8a:a7:e3:19:9a:a7:40:
ae:61:48:23:c7:7c:f6:e9:f1:b6:59:a3:5a:fe:5c:5b:88:9e:
7b:33:57:9a:79:c2:d6:c8:d1:f3:1d:31:e9:39:f6:aa:f6:fb:
4d:a9:f1:10:f3:4f:55:26:68:40:45:7d:58:49:75:bd:38:d5:
31:f8:0b:e7:f3:f0:90:a9:d0:bb:a5:15:e4:09:27:17:ea:b4:
d0:a4:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:51 2025 by rpki-client