Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: FnWLrgBuWwRS2E1nVrUO0vDPIR9MFP83Bpp1pXW/Ym0=
Subject key identifier: 98:DC:CC:5E:10:C5:0B:D6:B2:60:BF:5C:6F:29:8C:D0:97:02:9E:E7
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 0194BC3BC15878151652DAC3CBB15E9301CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 0EDC
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: CQIgCykr4k6D1ocw4kdteGc+lyXnTjKs8bdR/3wrA+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:58:78:15:16:52:da:c3:cb:b1:5e:93:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=98dccc5e10c50bd6b260bf5c6f298cd097029ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:62:fe:7f:87:2c:e6:4d:e4:78:c8:c7:a1:
53:fc:66:c0:4b:1c:7e:c1:b3:3c:69:fd:f0:1f:99:
a4:aa:42:0c:72:c0:c1:e4:e6:55:6e:89:73:09:32:
17:81:4b:a5:ca:d8:44:7a:b4:d0:67:26:d6:03:31:
3e:2a:c2:64:ee:fa:d6:30:4c:08:ec:d7:5e:b5:1e:
85:2e:62:f9:54:4b:e5:3f:ea:fc:ac:46:0a:f8:cb:
21:df:78:bc:02:ee:9f:8a:cf:9d:d6:34:c0:18:e2:
5f:c8:8f:83:7b:b9:de:53:14:1e:c1:9f:c8:d2:b8:
7d:f7:27:3c:7b:44:b5:81:d6:77:1b:90:a9:25:69:
62:04:58:6f:a7:f1:40:f9:e0:18:89:db:89:8a:b4:
71:ea:f8:87:ec:dd:aa:15:35:37:e5:06:ee:2b:fc:
43:e1:02:76:22:92:14:90:6e:44:48:c2:f1:08:fd:
e8:a0:7f:79:68:53:b0:db:43:ce:69:91:76:e3:92:
f2:c8:68:79:1a:56:4c:f5:29:ca:3a:d1:57:2a:f7:
37:86:ba:9e:0c:81:23:a8:a5:90:c6:2d:4d:97:b3:
d3:05:3a:84:f0:03:11:dd:e5:a6:a2:da:b7:ce:55:
d0:29:f4:07:37:03:e3:f6:93:01:36:a0:7f:b3:32:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:CC:5E:10:C5:0B:D6:B2:60:BF:5C:6F:29:8C:D0:97:02:9E:E7
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a6:bb:14:8e:fa:fe:df:f8:13:f4:21:05:c6:5d:28:48:0d:
db:9a:04:5e:d5:ae:25:92:9e:e3:03:24:fc:f3:29:68:90:e9:
f7:bf:fb:0f:1f:20:9e:8a:49:c0:fd:63:c2:03:f6:f1:56:e6:
06:fb:28:f6:a7:ab:71:5f:76:6a:f4:14:a8:1e:a5:84:80:d2:
00:a5:0f:dd:f3:6c:a0:25:f5:0e:ce:55:56:8b:13:41:3d:a7:
b7:76:a5:3e:2c:0e:50:4b:9c:9b:2d:a9:de:d2:ff:15:7f:91:
43:81:d2:f9:9b:3e:c7:1a:a3:03:62:21:a8:19:69:e2:81:ef:
44:bd:d4:b0:1b:ac:e8:93:67:f9:3d:45:08:db:da:83:90:35:
7d:39:bf:1d:de:db:5c:2b:fc:74:78:8b:a8:1c:f9:b0:6c:4b:
6c:44:dc:2c:35:c2:fe:8a:67:0d:7e:67:37:5d:2d:ec:a3:c3:
94:07:2a:3d:35:f2:eb:22:c1:12:28:88:a7:d4:71:b5:80:c1:
1f:4f:ad:5f:60:36:92:f6:06:ca:d7:0c:90:86:55:57:57:bb:
95:ce:17:37:42:6e:8a:f0:a5:57:b8:73:69:2e:00:e2:0f:2e:
6d:d1:78:91:cc:d5:e4:bd:06:bc:bf:a9:bc:6e:d1:f0:7d:76:
58:f0:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:35 2025 by rpki-client