Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier: j+pFK79TlSeW7o7zswAtzNHxwaF0TMxvhovVeAlEyxY=
Subject key identifier: 3F:DD:BC:9B:11:DC:53:7D:07:FC:48:D8:68:AF:2C:41:C1:94:12:5F
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 0194BBCE5118EFE8FDCC0603ACF7C895C11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: K9+B70PUDcyrxKDzpW25lkWjTnnEHnS+6wCZ8y55MyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:18:ef:e8:fd:cc:06:03:ac:f7:c8:95:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=3fddbc9b11dc537d07fc48d868af2c41c194125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:67:30:39:0c:a0:25:46:c8:1c:5b:2a:2c:
24:79:c6:1f:84:7b:67:96:45:a7:54:44:f7:88:4a:
5f:c3:d4:54:b8:85:d7:5d:d2:25:9f:7c:d9:f4:10:
42:32:2a:af:8e:03:c0:e7:31:8d:ce:3e:6c:c7:0a:
c1:67:6a:5e:f1:95:08:ca:dd:fb:46:b9:39:ce:08:
31:29:39:fb:5d:aa:7d:7e:7a:c7:9e:8e:4b:57:5d:
c3:80:37:50:4d:fd:b6:aa:fe:72:b7:8a:fc:f0:73:
57:9d:13:34:08:1e:1e:38:83:b6:7f:c1:bc:1f:62:
9f:ef:87:5e:47:b2:cb:c8:5c:58:9a:49:ba:21:a1:
dc:c8:58:1b:00:0a:0e:38:b4:66:31:35:78:8b:54:
b7:5a:3a:14:78:db:4e:8b:dc:25:94:27:34:00:da:
2e:ec:d4:c4:80:8e:98:53:f8:2d:20:c0:b2:c5:b2:
ce:10:77:51:71:3f:a4:35:2f:d8:72:08:de:84:a3:
47:d6:85:fa:cf:39:ca:d7:f0:3b:70:4e:58:e7:61:
f5:00:43:bd:67:d4:a4:ca:52:80:1a:e1:e7:9b:03:
1b:35:e7:52:e5:74:16:49:b9:98:49:ee:9e:12:5d:
31:5c:d6:f6:b7:bc:94:ac:ce:7f:25:5a:f6:79:95:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:BC:9B:11:DC:53:7D:07:FC:48:D8:68:AF:2C:41:C1:94:12:5F
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:81:7a:4f:78:6f:7e:43:7a:cf:69:51:bb:8c:de:40:c7:
cf:f8:22:a6:e6:c8:6f:af:df:0d:9d:b7:27:ca:31:10:e1:22:
22:4f:34:f7:41:33:1f:c9:4f:8d:09:74:a6:83:3b:d6:bb:76:
c9:66:2f:c2:3c:af:82:40:70:f2:84:91:1c:cc:8d:2e:ac:35:
ca:7e:e8:24:30:fd:41:b0:15:e0:3d:39:ac:fd:ca:c0:42:9e:
8a:16:de:80:b3:fd:d4:21:15:18:f6:a1:e4:cf:43:67:2c:34:
92:dd:44:2f:cc:ba:09:1a:56:07:cf:09:f5:82:92:99:1b:fb:
75:02:bd:d2:91:f9:16:86:07:1e:2c:01:fd:16:fe:23:2c:fb:
3f:c7:f8:83:49:4c:5e:33:2f:5c:e7:95:e3:79:79:ca:50:e2:
35:87:0a:9b:a1:27:34:24:97:f4:b4:9f:61:35:cf:13:25:08:
43:e5:4e:bd:7a:fe:50:e3:eb:40:db:06:3c:18:75:6f:a1:b3:
94:5c:71:55:5f:47:d6:ab:f2:57:a2:93:cd:85:35:f2:2f:38:
97:02:98:a3:3b:8e:b0:4e:5a:21:04:f9:84:60:c1:01:a9:8f:
98:41:d0:d6:c5:e3:9c:7f:0f:65:f7:95:10:f6:97:4d:1e:90:
c4:57:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client