Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: 5ZK+dUYYXdf65jRRV/9VaO1+b0wbizy0Cl0T7DR7hm8=
Subject key identifier: E5:FC:2B:14:C3:16:73:79:D7:AA:22:D0:F8:90:04:CB:08:9A:B0:03
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0194BD4E5488D347BC6D7C1B53C814FD47AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 0E8F
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: A+V1D4CaR4uh4vBA1dW1VNPYoNxWft0NYdqQ/BCN4zc=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:88:d3:47:bc:6d:7c:1b:53:c8:14:fd:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=e5fc2b14c3167379d7aa22d0f89004cb089ab003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:e2:50:34:95:31:20:ca:42:d9:72:87:7c:
9e:fa:ea:64:3a:30:56:61:7b:ae:23:e3:d2:cf:40:
03:74:f7:ce:51:27:1b:6f:f9:e1:30:10:0b:63:c7:
40:5f:8c:d6:78:10:25:8f:21:46:8d:59:39:72:95:
27:5e:f7:49:f8:75:93:d1:d4:e4:52:73:81:92:ea:
0d:11:f8:5e:45:1d:c9:21:01:25:b3:15:64:0d:47:
74:ae:57:85:88:82:96:87:2a:97:a0:d0:90:ff:86:
a2:83:48:92:0d:14:45:eb:9d:9c:be:85:5d:02:cc:
7b:58:b8:90:86:26:d5:23:1a:e1:c4:7a:03:2f:83:
03:43:bb:d9:be:75:d8:2e:ef:15:5f:c0:81:50:e1:
b9:a6:05:56:08:c8:0f:11:cc:e5:26:03:50:d4:25:
c9:b9:b9:01:36:ed:63:e5:95:29:2d:16:34:cb:a4:
23:9e:42:5e:cb:db:36:b5:25:5a:84:11:12:31:8c:
be:82:b3:c1:c5:07:9e:fc:6d:bf:e8:0a:a0:28:c7:
0c:28:55:15:6e:de:c0:13:f3:8d:9b:e9:cc:de:9d:
c1:40:c0:7b:d6:45:9b:93:5c:fa:02:40:32:a0:cd:
c6:44:bf:5e:b3:0d:52:b5:06:ea:a6:64:67:7e:f2:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:2B:14:C3:16:73:79:D7:AA:22:D0:F8:90:04:CB:08:9A:B0:03
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:79:a7:06:32:07:e4:53:ed:f1:bc:c2:ae:8c:01:33:ee:
e2:a9:30:0a:01:49:d5:59:fa:d3:9d:f8:d7:d7:37:42:b3:e2:
13:74:7d:95:0b:9a:df:36:b1:60:5e:e2:83:a5:c1:c5:20:44:
9c:66:20:9e:64:6d:d5:ba:12:99:b9:12:80:53:0b:a9:94:58:
97:b0:ab:f3:9f:d8:9c:ba:6b:ae:f9:d6:41:67:a7:61:79:c1:
4d:27:d1:f5:e2:a8:96:ae:06:d0:2d:54:0a:18:1a:00:45:d4:
a8:b1:de:b1:62:03:5e:0f:00:9b:1a:9d:08:68:0a:34:00:e2:
ca:d0:34:03:5e:13:b7:25:de:5c:df:c9:10:e3:54:1a:27:70:
98:8c:42:21:84:b8:40:59:f5:d0:67:59:31:a4:08:dc:a4:26:
ba:6d:1c:25:ca:bd:63:a8:b6:b6:63:28:c7:3a:ae:23:f0:8a:
20:8a:c2:3a:5b:98:c3:eb:e7:ee:4d:65:71:84:bf:e4:64:c3:
bd:b1:af:51:43:1c:70:fe:80:41:70:55:cc:60:c5:29:88:e3:
b3:8f:1c:4d:50:73:d0:7e:fa:87:dc:6a:b5:bb:7a:9a:05:b0:
7b:07:43:6f:a7:8d:67:00:9c:ab:95:df:07:bb:9c:92:ba:4f:
a9:26:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client