Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: K4gBRlPZXdh1PhrVxL4HM+aTrTO0oUF/SEHnpyfYw0c=
Subject key identifier: 44:46:DD:C3:FB:41:6F:10:AF:C0:36:55:1F:A6:D3:89:77:5B:70:56
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 0194BD85A3079BAB14116C1A8BCA76EF950F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: VTmujrQeMOZL6c9dfsHMQ6fhXW2/ZxHovhSwi+ddXaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a3:07:9b:ab:14:11:6c:1a:8b:ca:76:ef:95:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=4446ddc3fb416f10afc036551fa6d389775b7056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:f7:0d:84:3b:c8:3c:24:d8:72:ad:c3:db:
11:3d:2a:c0:55:91:83:f4:af:e0:e7:8e:51:4d:40:
47:ba:5a:89:21:e7:21:08:19:24:5a:5e:92:b2:e3:
b1:72:19:82:e7:17:07:32:88:11:1c:e3:0f:d7:36:
12:f9:9f:c0:63:28:52:e4:15:36:b8:01:e0:ef:da:
cd:5b:02:c2:7c:63:34:da:ee:3b:ce:01:31:1b:74:
2f:5c:ed:96:78:b2:ee:c6:55:91:e4:27:1e:33:de:
c8:37:c1:e8:15:6b:3d:74:66:e6:e0:eb:11:60:4b:
71:45:a9:4c:03:a9:fe:b9:4e:6e:e7:ee:05:5e:45:
dc:6a:7a:c6:c6:07:11:a9:ed:96:d3:a5:ad:ed:5e:
0c:c9:58:58:6d:ea:97:c1:30:7c:a9:0e:43:4c:60:
d6:36:13:08:69:1c:05:e7:65:23:94:f1:29:8b:a1:
c3:39:43:93:0a:3e:37:3d:03:51:a7:4b:70:1b:82:
91:f4:be:fe:8a:a5:ed:dd:5d:c9:4f:0c:b4:b7:7c:
69:0e:15:39:6f:5e:63:4d:8e:f7:ad:50:4a:a2:fb:
99:b1:0c:f9:df:77:8a:8e:ab:c9:f3:03:2a:0f:16:
f5:c4:01:64:4e:45:a7:51:e3:6f:0e:26:8c:7a:a5:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:DD:C3:FB:41:6F:10:AF:C0:36:55:1F:A6:D3:89:77:5B:70:56
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9b:0d:16:ca:36:20:cc:a2:e4:dc:1c:10:d0:34:ce:0e:cb:
cf:8e:f9:a4:64:7a:5f:ce:87:96:01:86:6f:c7:60:9d:b8:9b:
34:a4:26:c8:ad:64:4f:01:a3:7a:36:a6:a2:d7:8e:1c:31:75:
54:93:1c:58:50:46:44:7b:11:37:db:c8:85:2a:36:81:cf:51:
0f:f7:50:a1:00:18:ee:0b:73:e8:2c:7a:a2:3f:c9:34:98:b8:
6c:02:a0:a1:34:5f:a8:af:b7:fd:65:b0:88:ab:42:2a:85:f2:
44:cc:b6:d6:be:f7:19:9c:dd:d1:39:c2:f5:de:17:be:c7:05:
25:06:52:c1:cf:0c:40:09:e1:51:3f:fb:72:3a:56:b3:51:eb:
fc:b8:e1:94:64:fe:eb:d1:ec:68:61:51:e0:a4:70:81:45:6e:
ef:ec:78:79:d8:3e:23:fc:6e:92:86:fa:dc:42:09:da:36:44:
54:1f:ea:90:6d:79:c9:6b:22:d5:90:c8:27:38:b4:48:93:7d:
bd:41:c7:80:fb:1b:a4:a3:29:3e:42:85:1a:bc:1b:24:cf:ce:
71:69:64:1e:98:90:4c:74:87:59:f0:74:48:a3:49:f7:af:ea:
69:d2:40:60:25:82:1f:ee:5a:2c:76:51:97:a7:bb:5a:a0:43:
7e:4e:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:46 2025 by rpki-client