Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: z6619hJ7/0o/b4Q/Vlcg6Ajc9SdWLN8Se+FLfMLk+Ds=
Subject key identifier: 8A:FE:DB:20:9E:BB:79:B8:48:9D:1B:7E:76:C0:07:F5:FA:54:77:3D
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 0194BBCE2CF00526ECFDA84AFE9F66700EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 033C
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: YV6jJdKvojWE0NA+61ak1temPwehH12bWRGqQfe4kLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:f0:05:26:ec:fd:a8:4a:fe:9f:66:70:0e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=8afedb209ebb79b8489d1b7e76c007f5fa54773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:6d:d9:7c:ef:17:13:60:49:64:06:6d:d9:
b7:f9:9f:c5:64:a8:60:06:6e:e7:43:1c:db:23:67:
fc:cd:fd:8a:e6:e1:83:81:5c:fd:d4:ce:2a:76:46:
85:f2:0d:3c:a7:19:b3:07:ea:46:d2:4d:b8:6f:b7:
de:ba:50:74:3a:dd:a4:89:60:7a:1f:f3:51:71:37:
e4:d9:46:72:d3:15:03:7f:5e:bb:56:1f:dd:76:4a:
1a:86:6a:b7:09:71:30:24:1b:6b:23:e8:53:73:e0:
67:b1:8d:1e:11:69:6c:8b:87:24:fe:00:7f:05:32:
a7:0f:73:95:41:fa:e4:2b:66:f7:0b:fa:f0:98:20:
61:59:dc:50:2d:75:92:6c:0f:76:e3:6d:05:ca:23:
38:e7:db:8d:43:5d:d4:20:99:ac:fa:b9:2d:d5:4a:
d0:45:9c:88:a1:e5:52:56:ca:b1:76:53:16:3e:98:
74:f3:b5:3a:e4:c3:05:31:89:55:8e:4c:9d:20:ab:
81:c5:b7:9c:b9:f5:9b:20:2f:59:c4:11:d8:0a:c4:
df:6c:cb:75:fe:61:38:f0:80:61:50:cf:42:da:c3:
17:b7:0d:21:06:71:1d:be:ba:6f:8e:81:68:4e:78:
49:11:a9:11:db:48:5d:7c:f6:18:b7:43:f5:e8:7c:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:DB:20:9E:BB:79:B8:48:9D:1B:7E:76:C0:07:F5:FA:54:77:3D
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:d7:93:59:75:70:ba:8e:4f:c6:fa:d9:21:b4:98:ce:5e:
1f:db:21:8e:30:23:0e:25:ad:84:14:6a:ae:22:ac:64:a5:b2:
70:78:54:aa:42:5e:70:02:10:98:61:98:dd:fb:a4:f7:42:ad:
c3:b9:20:d4:2a:61:f6:2f:be:a0:f8:13:91:59:5f:13:e7:77:
d8:19:06:14:92:3c:fd:9b:e6:87:2b:3f:8d:97:a2:23:e2:52:
07:1d:58:11:36:8e:a5:5d:c1:8d:9b:4a:36:12:f4:03:24:54:
61:b9:54:06:e9:53:db:12:67:f7:4c:3f:0e:1e:44:55:69:99:
67:be:9a:b5:69:9a:4b:9f:d6:aa:7b:50:8d:b0:cd:bd:11:bd:
c3:cb:45:c4:17:fb:7f:c8:6a:1c:8f:08:54:2f:be:9b:03:10:
34:9d:d6:4e:e7:bb:54:41:af:c4:d9:a9:bb:34:7a:fa:60:0b:
f4:df:e2:e2:1e:6a:54:67:d1:e2:8b:13:76:b4:d9:dd:f9:72:
04:aa:74:28:e9:df:af:a8:ee:cb:e9:50:c2:53:5a:55:35:46:
24:45:78:c9:99:3e:c3:27:48:e7:51:3c:88:80:5d:0e:f8:15:
06:04:ba:83:bb:6c:d1:8c:6b:a4:e7:88:66:28:3f:84:a3:5b:
b8:dc:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:37 2025 by rpki-client