Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: lHMZqRuU2l528dbsj3q37Q7mpd9SZz4s26yWSft6QXU=
Subject key identifier: F9:42:E9:B3:8B:1E:A6:D0:CD:C8:EF:F8:1E:C8:39:4F:8C:10:B3:6E
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 0194BBCE2F0A0DEA0E8901C138F9973AF324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 05C0
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: olbZEZw+ZuJ8zw6A8YO+pI3yHQU6djhf996rz7lg9Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2f:0a:0d:ea:0e:89:01:c1:38:f9:97:3a:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=f942e9b38b1ea6d0cdc8eff81ec8394f8c10b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:a9:ad:fa:14:c2:e5:34:2c:d8:17:6e:ce:
0f:37:5c:26:dc:8e:15:14:36:ce:48:c6:c9:93:f5:
d0:49:26:76:bc:3c:0a:f7:26:68:ec:8b:e9:b0:af:
4b:08:b6:97:0e:92:8a:6c:cb:38:53:d5:61:2a:5c:
e7:0f:ed:0f:3a:35:e8:c0:b7:d6:a8:f5:d7:d1:28:
be:c4:2c:f6:f2:cd:40:c8:07:a3:d0:3a:73:4e:4f:
5e:73:3a:09:51:bd:1d:c2:81:78:b6:df:19:07:11:
33:dc:e8:33:5b:5f:01:ee:2a:f9:2e:28:d9:13:3b:
b8:01:64:34:83:56:22:2b:ec:4d:09:33:fc:45:08:
6d:61:3c:2d:d0:a7:92:fe:55:67:5c:7b:bc:45:d1:
0a:59:b1:1e:97:17:95:55:b0:f7:6f:2b:2b:13:32:
50:64:77:0a:da:57:21:d1:7e:6c:29:5b:dd:c2:d4:
7e:c0:4b:d8:da:50:4c:69:df:cd:d5:aa:32:b9:a8:
9e:8d:7b:40:f0:bb:37:cb:b3:aa:13:e2:f1:54:76:
01:20:7e:f9:3f:1e:01:07:a2:0b:83:be:ae:a5:19:
ff:39:96:b4:a9:a7:79:6e:69:5f:f4:7b:f5:02:86:
d3:aa:92:6e:25:8f:e9:b3:83:65:cc:a6:d3:57:d3:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:E9:B3:8B:1E:A6:D0:CD:C8:EF:F8:1E:C8:39:4F:8C:10:B3:6E
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:df:66:4c:ec:0d:a6:e1:70:74:cf:08:42:b2:eb:c2:fe:
f2:e7:73:5e:4e:d6:d3:50:d4:16:31:4a:0c:e5:18:dd:e7:3f:
15:07:79:e8:c8:04:55:8a:ad:f1:53:e0:4e:0d:a2:36:65:24:
34:8d:20:5f:96:32:fa:94:98:fe:f9:bd:16:ef:3a:4a:2a:8c:
e3:13:4e:95:38:eb:55:e7:b7:4a:a6:81:69:89:17:ed:94:06:
7c:77:3c:4a:be:69:f8:1a:a4:81:54:34:72:66:82:a9:96:fd:
aa:48:fa:34:cb:7e:27:05:07:cc:4c:da:a0:52:6f:56:a2:32:
bb:16:13:7e:44:a3:2b:5c:58:a4:a9:3b:0a:6c:3e:86:2d:53:
9c:65:08:27:e7:37:b2:a1:e1:74:af:ee:49:57:f6:0b:89:58:
06:28:79:60:fd:65:b0:4f:d2:c9:a8:dd:46:c0:d4:1f:e7:7e:
f6:35:a1:6f:1f:3d:6a:8c:4d:e1:e6:d0:45:51:fe:08:96:c7:
6e:cf:fa:ca:11:f9:e5:da:c4:af:c1:af:c7:a9:83:fc:d2:56:
94:9e:0a:33:e0:7c:7a:96:39:08:48:9f:4b:96:91:43:b1:c9:
0a:00:74:84:fc:d3:58:7e:72:c0:a2:fd:ee:d1:8b:c2:54:64:
49:e6:17:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client