Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: unr2EycqAaYjYRcCJ8sbMnB1BplUfepeNeg2+D+GvMk=
Subject key identifier: 74:D9:F5:4C:98:3D:6C:54:31:78:1D:21:53:53:72:9E:A1:6A:B3:21
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 0194BBCF001183B2CA2BFDCD8D6D1ED84F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0BFE
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: Srrui5d/DJFm6e+xPmmxpBfavxPFlrzyH3QUi5SUJ4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:11:83:b2:ca:2b:fd:cd:8d:6d:1e:d8:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=74d9f54c983d6c5431781d215353729ea16ab321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:12:8a:9e:0a:c2:b5:9e:d0:1b:b5:40:ce:
02:0b:81:21:f0:01:2f:e6:a4:ef:11:69:af:66:76:
36:01:72:1f:9a:71:37:fd:46:53:f2:27:99:e6:f4:
ac:22:bf:96:de:81:c8:91:f6:e8:0a:e2:77:99:0a:
cc:05:e3:92:21:8e:69:97:a9:89:74:a2:8f:97:a3:
eb:1e:90:15:08:74:04:2b:0d:cf:aa:c0:60:f1:d4:
d6:b4:ae:73:d9:91:22:6d:6d:66:ec:cd:7e:f7:67:
ee:4b:4d:6a:52:18:23:89:49:6f:92:14:56:b3:81:
3a:87:36:12:70:97:ab:c5:fd:37:a4:bb:55:dd:61:
44:e8:b3:90:ee:19:3e:ab:4a:be:75:ef:bc:67:eb:
2d:f4:35:cd:e5:02:49:d5:90:54:e7:38:c6:3e:ab:
7f:63:23:bb:b5:9c:65:73:de:58:7b:91:e3:8b:2f:
3c:c2:a8:59:a4:61:b1:83:72:48:6f:15:a8:01:80:
d4:39:c0:53:df:7f:33:ec:36:6a:b6:34:7a:5d:34:
9e:80:76:6e:2c:78:7e:2c:be:7b:76:3b:ee:f5:84:
52:40:f0:18:69:00:26:2f:74:3d:e4:21:5a:22:fa:
66:6c:1e:63:bb:3a:3b:9a:7c:ae:26:67:9d:ad:e3:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:F5:4C:98:3D:6C:54:31:78:1D:21:53:53:72:9E:A1:6A:B3:21
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:fa:a7:4d:93:19:a1:2b:f4:df:a6:5a:f8:d6:55:d6:07:
8b:ca:22:9e:27:46:d4:45:d3:d1:bf:a0:d6:d7:b7:5b:b9:3f:
bd:cc:05:7a:9f:e4:86:af:2c:14:d8:12:5f:52:9e:60:ca:80:
b8:21:f9:35:06:13:2a:34:92:ae:6b:f6:e7:d5:ac:b2:79:10:
f6:6a:39:90:7c:90:75:18:c2:f5:2d:9c:0a:05:97:3e:84:60:
6b:e9:2b:35:52:2a:b7:7a:1d:58:8c:75:a1:c6:f2:ee:11:34:
91:c7:a2:e5:cf:39:86:54:03:d2:f2:48:71:b9:79:cd:30:a7:
81:5a:e3:f0:f6:b8:78:4e:85:e6:f0:a4:1a:92:5f:7c:2f:96:
33:17:2a:0b:c6:54:90:4b:08:b6:74:f2:e9:80:11:ad:85:be:
1f:a2:4d:f0:26:89:53:6f:3b:d1:7f:f2:03:12:e3:84:da:44:
47:a9:1b:6e:e3:b4:d6:28:1e:55:cc:89:cd:7a:48:80:fb:a1:
bf:05:1e:01:6b:05:48:a3:9f:6b:eb:3f:4a:50:39:9e:83:50:
d3:21:08:22:92:0c:0d:f5:e2:98:a4:40:a6:1b:08:06:42:d0:
f7:19:ee:2a:89:3a:e8:4d:6e:6b:f7:3e:4b:2c:8b:ac:b3:38:
48:b8:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:58 2025 by rpki-client