Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: 2Z7tUPNSToxeVMjDuwwZ3sCJWPpI6mtHX9/uuqfqWRM=
Subject key identifier: E2:A0:4F:D1:D9:C8:C7:18:76:89:3F:96:0B:66:77:BE:8C:21:07:AA
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0194BBCE698BE9986452BBBAF39F212555F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0770
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: u+AMAa3JczbKIRVtYBbaX0af7sjz+2Vw8LsFiKjjzgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:8b:e9:98:64:52:bb:ba:f3:9f:21:25:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=e2a04fd1d9c8c71876893f960b6677be8c2107aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:24:68:db:e0:a0:af:1a:aa:07:36:70:65:
e6:0a:bc:31:20:fc:06:44:13:40:07:a7:5d:03:b0:
3c:66:4d:ac:a0:d1:44:e1:eb:5c:1f:50:99:92:80:
67:6d:1b:41:17:74:fe:34:46:0e:f0:cc:7b:3c:3e:
f3:7a:d6:23:cb:4d:6c:46:94:cb:a0:23:38:e6:92:
eb:dc:88:da:b6:b2:b7:45:9d:33:d8:b9:e8:76:e4:
f7:aa:d6:66:c2:00:ce:f8:22:a3:09:5a:46:62:a2:
8b:22:91:4f:80:15:1c:53:ac:7e:74:e4:8f:95:54:
0c:96:6a:24:4e:ab:55:fc:bf:f3:e3:e7:a2:79:aa:
43:92:3e:3e:13:de:a8:15:94:12:e5:5c:cf:e8:b1:
68:06:22:20:a5:18:e9:6b:e9:36:bf:5b:aa:bc:50:
7e:8e:6c:a0:81:90:bb:ac:84:e9:35:7e:46:a1:2b:
49:4c:85:fa:58:68:b8:90:a9:ac:0b:cd:57:21:8b:
ff:15:a2:36:e7:2c:99:85:f0:c6:e9:3d:ec:36:0e:
2f:0c:9e:b3:33:97:7e:e9:0b:ef:13:a5:74:1f:5d:
8e:6e:c7:1d:d6:1f:a0:b6:fe:9c:a0:14:59:89:7b:
51:85:b5:c9:62:12:74:aa:df:75:83:55:80:11:26:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:4F:D1:D9:C8:C7:18:76:89:3F:96:0B:66:77:BE:8C:21:07:AA
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:bd:85:8a:bb:2c:bb:42:fe:5e:2f:7c:d4:30:9a:68:d8:
1c:cf:7c:39:54:fe:c2:96:de:ad:58:a0:7d:93:77:dc:24:61:
85:5a:83:36:95:ab:03:a9:e5:31:f5:ce:dc:e0:5d:4b:74:9f:
44:9a:87:3b:22:24:ca:ef:bc:5a:cb:10:5d:63:b5:bb:32:8a:
fb:89:21:ce:1d:ed:dc:ec:91:d5:5b:a4:25:e2:a5:75:49:66:
3e:b1:6b:b2:f2:ce:80:9c:07:0d:ab:60:00:13:09:9b:61:06:
b9:f3:23:a1:01:38:7c:d3:59:0c:0d:c3:2f:5f:42:ed:42:21:
73:4f:46:01:a5:e7:09:f7:36:8f:3d:ef:fa:1e:48:14:b6:0d:
bd:5c:6a:d6:77:95:1c:6d:e4:54:07:4f:90:8b:2e:fb:bf:ca:
99:76:7b:41:72:9c:1a:15:00:17:bd:97:cd:ce:cc:e0:f8:77:
a4:9b:d3:de:f9:f9:78:7a:bd:f8:a4:ab:1c:79:6a:79:4d:0d:
5a:78:31:8b:02:8b:ca:de:4d:60:ff:58:c3:49:85:fb:9a:fd:
81:6e:13:96:77:c5:15:e1:8a:89:40:b4:41:a2:75:01:81:72:
e3:5c:50:b1:cf:18:10:1b:06:db:e5:81:20:e9:e1:00:35:dd:
7e:d7:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:19 2025 by rpki-client