Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft
File: J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft (raw, json)
Hash identifier: qTwxVjNmfjJ0NlzH80I8hM9uzqhOLGma9sIcTvfhcdc=
Subject key identifier: EA:93:58:C3:F9:0D:DE:B9:F2:73:10:D4:F9:94:52:4D:73:36:84:93
Authority key identifier: 27:C4:06:DF:29:BE:9F:2A:D5:0B:3E:C5:BD:53:DF:B9:22:D1:AF:A0
Certificate issuer: /CN=27c406df29be9f2ad50b3ec5bd53dfb922d1afa0
Certificate serial: 0194BC72E102B15BA97D02747AA66C98EBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8QG3ym-nyrVCz7FvVPfuSLRr6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: J8QG3ym-nyrVCz7FvVPfuSLRr6A.crl (hash: pzZEPTAornWiJZFBwNtwjNeNN9+0qNFELXIL+dERWxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:02:b1:5b:a9:7d:02:74:7a:a6:6c:98:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c406df29be9f2ad50b3ec5bd53dfb922d1afa0
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=ea9358c3f90ddeb9f27310d4f994524d73368493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:38:6d:f9:3d:85:02:b4:e4:ae:bd:e6:41:
4b:0d:5b:0d:c0:06:70:da:83:98:ef:81:f3:dc:c7:
ef:3b:1d:af:09:71:14:e2:45:e8:a9:01:a8:2e:bd:
0b:aa:12:68:bd:d7:7f:fb:15:6c:54:e7:94:96:7a:
f9:cd:4b:ee:0e:2d:dd:48:ef:33:d7:50:ca:15:59:
64:22:3e:2a:50:fd:19:f3:9c:f7:d6:53:10:c9:eb:
dd:d5:15:b4:07:da:50:ea:f2:70:9e:7b:10:32:77:
21:d2:d1:de:32:13:74:b6:ad:44:d5:6b:ae:45:40:
ed:ad:6a:e6:93:06:13:f7:97:f2:9c:c5:02:a0:8b:
0a:e2:8a:9a:5c:e2:af:c7:d8:08:cb:ff:0b:11:13:
e1:ef:ed:9c:a6:14:8c:d4:9a:48:27:1c:b4:b3:10:
b7:41:0b:04:a7:e5:49:a9:9f:b9:d3:11:fd:7d:1d:
d1:79:56:00:42:47:31:3f:7c:6c:0a:cf:4d:6b:58:
9f:3f:1c:8b:77:77:fa:58:06:26:f7:c1:0c:c8:a5:
fd:c7:92:ba:ee:61:21:8e:e2:fd:d4:6d:35:46:3a:
9d:62:5b:0a:d6:d4:69:9b:cf:8f:1b:66:9e:bd:f5:
d4:71:df:d4:d2:5f:08:03:c8:c3:55:2b:06:fb:7f:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:58:C3:F9:0D:DE:B9:F2:73:10:D4:F9:94:52:4D:73:36:84:93
X509v3 Authority Key Identifier:
keyid:27:C4:06:DF:29:BE:9F:2A:D5:0B:3E:C5:BD:53:DF:B9:22:D1:AF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8QG3ym-nyrVCz7FvVPfuSLRr6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:5e:7b:0e:aa:ab:13:34:60:21:0d:7f:33:52:56:fd:61:
ca:c6:17:4b:dc:82:bd:09:07:9f:4e:f5:06:35:cc:62:b3:74:
33:59:cd:0f:8a:cd:92:d5:bb:ff:1b:0c:63:e0:e7:f1:9f:95:
48:4f:e6:d9:2c:e9:0a:ad:e5:69:0e:3e:e4:17:4d:27:f0:3e:
55:31:6e:fd:48:93:00:98:3e:33:6d:19:8b:31:00:6d:6e:82:
68:10:d8:00:92:bb:98:2a:b5:bb:29:73:eb:33:ee:c2:4f:3a:
1f:f3:f7:89:fd:4d:6a:9a:41:f1:01:37:51:33:94:5f:95:4b:
e0:c7:0f:75:37:b3:a1:b5:b7:a0:da:ff:c7:fe:ff:d2:55:2a:
35:5d:5b:e8:bd:b3:79:92:75:f3:31:1b:a0:1a:c7:72:d5:b9:
06:e9:f0:d3:5b:8d:ae:35:20:84:9b:19:a7:31:24:35:cf:43:
2a:cd:90:38:71:8e:ed:a0:06:1b:5a:b0:9a:7d:c2:69:23:4c:
d1:50:f8:f2:48:4b:f4:87:3e:14:15:f9:1c:cd:e8:13:df:9d:
7a:64:4d:32:34:aa:5b:0a:86:b5:69:06:38:f8:33:47:e3:9b:
5b:a1:14:b5:c8:a6:31:49:22:08:3b:cc:ba:b3:6f:2c:d3:cc:
cb:ba:b6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:10 2025 by rpki-client