Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: KcFOOWULgVQgQLnVhF0oTaGyVZmeLzjAJ+mjk+SQryA=
Subject key identifier: 34:99:76:1D:CD:56:A4:9B:A8:5A:61:1A:C8:D6:71:F4:2A:24:8F:18
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 0194BCE0DFCB13C0B381BB87C83A731E3C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 02E1
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 6jsXZh0qMFHntNt/j7DnTqZX4+PL1RwQhDFq9C8Rf24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:cb:13:c0:b3:81:bb:87:c8:3a:73:1e:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=3499761dcd56a49ba85a611ac8d671f42a248f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:02:10:b6:bf:99:8b:f2:53:4e:29:b5:e9:
71:79:74:46:44:4d:cc:7e:c1:24:17:b6:23:d1:87:
86:28:7f:3f:9f:21:14:66:8c:ba:a9:bc:26:7f:17:
3d:7d:71:d1:d8:7b:fb:74:3a:6f:73:c8:75:fa:ae:
f7:8c:f2:ee:f9:eb:9d:98:82:ae:76:e0:ae:63:dd:
a0:cb:df:63:7d:60:03:9b:25:27:8e:20:11:40:83:
06:ce:79:dc:8a:4a:d6:59:93:f7:61:b3:d8:ee:56:
fa:56:4c:e2:35:25:04:56:94:6d:d3:ae:f6:fc:41:
37:b4:66:90:dc:7e:42:22:f7:45:28:89:1c:2a:c0:
06:29:4c:96:93:77:a0:ee:c0:27:ea:70:c7:35:6e:
67:f9:02:33:00:3d:f5:35:d2:9b:3f:84:ac:93:93:
4c:c7:37:77:5c:38:a8:bc:87:c9:b2:ca:bd:d6:af:
40:6f:6f:14:36:78:87:40:c0:37:4f:e7:31:0d:06:
e0:42:40:6e:45:00:8b:de:81:ff:69:90:59:01:52:
e2:d4:1e:ae:09:d2:c9:71:69:4a:0d:e5:21:d3:11:
7a:88:55:ed:35:d4:17:96:69:46:a7:75:21:27:c5:
8d:d5:41:00:7f:41:6d:ef:88:34:c6:e5:96:ed:dd:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:76:1D:CD:56:A4:9B:A8:5A:61:1A:C8:D6:71:F4:2A:24:8F:18
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:45:e2:10:13:ab:d8:92:6b:a7:9e:04:0a:50:d6:44:36:78:
c2:4c:3a:5c:e5:52:91:d8:11:78:92:28:80:6b:c3:ab:e4:60:
59:77:c7:bb:48:e0:10:48:c1:66:8b:c1:7c:38:0f:15:4e:69:
b2:91:59:9c:d1:cf:87:08:40:95:1a:2a:16:34:92:90:c2:8b:
8f:c8:3d:ed:99:60:74:40:95:3f:b9:2e:f6:f9:43:fd:34:ee:
75:92:c2:2e:02:45:90:91:ce:fe:e4:45:7c:f8:ac:b3:bc:c2:
4a:df:55:4b:25:af:1f:8b:80:3c:57:5a:fd:fe:46:91:82:3f:
88:68:e0:81:4d:bd:34:e5:11:70:96:be:1e:50:08:e2:72:81:
be:cb:08:d3:dc:da:fc:b4:c1:8d:a5:a0:1e:4f:71:b0:d1:23:
09:d8:43:5f:2b:05:5d:6d:69:37:67:a4:d8:b4:b7:fd:34:e7:
5f:70:fa:bb:ed:e3:14:4b:be:5a:0f:6e:9b:97:04:27:66:9d:
60:c6:b1:b1:58:93:62:89:58:23:0c:45:b2:fe:71:95:bb:ef:
62:e3:04:95:a6:91:b8:76:e2:97:c9:34:87:37:d1:a1:9e:8c:
f4:94:9c:45:2f:c7:53:27:05:5c:0a:3a:f3:68:d4:df:b1:24:
75:11:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:57 2025 by rpki-client