Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: 15ZC1/D+P7O1UeFN+bRFGS9HkP3X473o0YBPIcOdx18=
Subject key identifier: 14:20:C4:4A:F9:30:F0:22:62:3E:9C:FB:12:24:61:75:C1:C3:F1:52
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 0194BC7332F67CB839CED014F23A4CC4C081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: nUjV7tiz+FPyPfOdtVQ36AQfVywYJxj5mC431RAAfJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:32:f6:7c:b8:39:ce:d0:14:f2:3a:4c:c4:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=1420c44af930f022623e9cfb12246175c1c3f152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:04:02:bc:41:31:4f:3b:6d:54:55:94:f2:
3c:13:75:42:3e:22:e3:94:42:58:c0:48:43:a0:97:
09:ac:9a:1c:66:53:77:2f:94:97:26:b3:21:44:c2:
1e:6a:94:9b:dc:4c:0e:38:78:f2:73:ac:e7:07:39:
9d:34:8a:94:34:ca:af:bb:ba:53:81:07:ec:b2:4f:
cf:7b:bb:c7:86:db:08:f2:72:b3:a5:68:78:e8:8d:
29:e9:b7:68:a5:eb:c6:2e:43:1b:39:33:ae:db:23:
84:d5:cb:8f:99:3e:49:c8:b9:db:1f:22:62:4e:13:
3d:9b:41:c7:6d:5c:75:d9:7b:0f:09:57:be:7d:5a:
19:2f:bd:43:aa:29:af:71:14:d7:2c:d6:11:7a:09:
1e:19:71:19:56:39:f0:00:bb:d6:f7:a1:3c:da:7d:
9e:c6:91:ed:af:5f:e9:0f:ba:d6:d8:64:c5:c2:a1:
8a:00:56:c3:70:3b:25:19:db:e1:9d:e2:e4:9b:1a:
81:bb:1c:16:9b:61:58:48:9d:91:e8:47:9e:35:a1:
f9:6d:47:ea:b9:4b:51:e8:3b:f1:b9:eb:e3:57:b8:
47:03:9f:dc:04:ba:b8:1d:d0:75:f9:9f:cb:0d:76:
6d:42:88:a6:b1:98:4e:7d:17:38:f4:9e:07:51:09:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:C4:4A:F9:30:F0:22:62:3E:9C:FB:12:24:61:75:C1:C3:F1:52
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:f0:89:db:0d:9f:b8:cb:5f:fd:ea:25:47:87:6a:1a:10:30:
28:57:a3:8a:4f:ad:fa:cb:45:c8:a5:7f:e8:98:a6:80:f0:1a:
46:90:ea:7e:c0:8c:1f:e3:cd:d4:7b:f5:25:3b:db:e6:0e:53:
c7:c4:f4:80:0f:88:63:e2:d0:d9:cc:e3:38:85:ff:06:42:ea:
a6:bd:32:9f:f5:45:03:88:89:47:4b:19:1e:02:2f:5d:3e:ba:
34:4b:ea:3d:43:61:e8:d9:05:9c:d8:3d:03:da:ee:64:d6:b8:
85:ec:e6:a1:6e:2e:6a:f7:c2:07:cb:d1:16:54:b0:57:24:e5:
6b:a0:f7:f3:3d:3f:2e:55:72:6e:db:cb:2f:89:c8:89:39:01:
ae:47:09:07:1a:66:b9:4f:ff:71:a2:95:5e:1e:39:cf:64:3d:
23:c0:c9:9c:6b:df:e7:7d:33:ff:c9:d8:ba:45:bd:98:27:b8:
22:f0:ff:a1:8b:c3:24:6f:2b:fa:03:8e:f7:91:83:c3:0b:2e:
08:f5:04:13:8c:61:36:d1:b5:5b:57:0c:a8:ea:76:b1:45:01:
44:c7:f0:ac:65:7a:b2:43:77:28:ff:8f:9f:f4:a6:e3:4e:dd:
e3:2a:c6:1b:45:00:d7:cd:45:64:3c:f3:e4:12:c8:18:d4:57:
63:84:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:20 2025 by rpki-client