Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: d8JvuqXAqSoXS2vqiPXiZTdAa33EgTJ6YSfHpG+oKa0=
Subject key identifier: 53:0B:D0:93:9C:AC:8B:34:38:4E:64:53:6D:A4:91:92:59:3E:2D:C5
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 0194BC3C56FC13FAF765F86CAB26F2E0D71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: YKb3TIJKcNvI7JVMx0G1KaRhRtcQh6RM+YwUCQD6nAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:fc:13:fa:f7:65:f8:6c:ab:26:f2:e0:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=530bd0939cac8b34384e64536da49192593e2dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:67:65:8b:df:b5:80:03:39:fb:84:ce:4f:
21:67:de:a1:a8:eb:4a:c1:e8:71:67:2f:b7:f6:e3:
55:ad:bf:f7:8e:17:6a:58:48:4f:f3:64:74:9e:bd:
8e:06:ac:b8:43:a3:d3:93:88:d9:d2:ee:cb:97:a7:
dd:e1:c4:2f:40:46:68:4d:b4:82:09:99:cf:78:69:
08:b5:c9:e9:d4:dc:2a:f9:71:20:c9:0a:8b:6b:b5:
6a:57:8c:32:59:a4:39:47:89:b2:9f:99:31:da:fa:
c5:e8:84:5b:51:bd:8e:86:20:be:73:5c:f5:17:5e:
b7:8f:1e:83:0f:ef:69:d2:5d:b9:6f:16:a7:a4:b5:
e3:1d:2e:66:f8:23:f8:c2:21:4e:d0:3c:d1:f6:c9:
36:2b:18:77:aa:26:4b:d1:50:f5:c8:90:12:5c:5e:
72:51:42:55:f7:e0:d8:d4:d8:fa:f8:54:51:ee:07:
61:61:5e:e5:56:fa:3c:53:b6:41:05:89:c9:60:fa:
94:99:15:42:02:13:97:fd:e8:53:60:14:34:3d:90:
ff:51:a0:f3:8d:e1:26:2c:90:58:32:1e:c4:65:80:
db:af:72:85:27:07:bc:95:5d:da:d1:96:10:c3:a2:
42:fd:52:98:2e:ad:67:88:ea:d2:b7:e2:67:85:60:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:D0:93:9C:AC:8B:34:38:4E:64:53:6D:A4:91:92:59:3E:2D:C5
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:7e:98:e2:ff:80:04:00:14:be:0d:c7:71:a9:69:e2:75:
ee:2a:7c:f5:5f:fd:05:1e:5b:d1:57:5c:c9:5e:12:b6:9d:c5:
c4:44:38:6a:38:b0:6f:67:45:9f:73:40:ea:d9:1f:2b:c6:88:
4a:e4:c5:75:20:cd:aa:bb:68:06:b5:6c:ac:94:d8:4f:51:79:
df:85:a4:1c:f2:a3:29:3a:6b:2d:14:5e:16:99:47:b8:ba:04:
e7:95:a5:63:38:54:71:51:fd:5b:6b:6a:57:9a:a4:32:9a:e9:
b1:9b:8f:62:62:46:f1:59:2f:e7:1b:3c:e2:be:c1:f3:6e:88:
2a:8f:59:d5:9d:04:45:27:a0:a5:e3:f0:e0:ec:88:fe:87:c5:
64:37:59:47:cc:27:f1:ea:f9:b9:c5:56:81:7e:76:a7:0a:1d:
d5:4f:d5:06:50:b1:2c:48:89:37:4d:6b:34:13:63:18:6d:d3:
d1:9c:66:1e:a4:00:b8:7f:de:66:48:e7:6d:e3:b4:ed:31:1b:
0d:ac:a6:f1:59:20:75:c5:b8:21:e5:9c:00:36:95:d0:38:e5:
b9:92:55:2b:9c:aa:7d:dc:57:d1:5a:9c:bc:18:7c:92:77:31:
56:dd:ed:39:b5:e1:ee:7d:a7:d6:c5:75:5d:49:21:00:b4:7e:
e4:79:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client