Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier: 0sL1PLUhHMn9VHDkFkstGccQhfychGhoRr5D8Z0wgyE=
Subject key identifier: D7:90:50:C7:C2:80:C6:0A:42:9F:48:92:8B:00:0B:3D:AB:52:B9:F4
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial: 0194BBCEFC700714F7E17817650A25A5D97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: uRQY1khDO578Uc6fysf75bdkAi8zyTxvO0ncQwMJX7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:70:07:14:f7:e1:78:17:65:0a:25:a5:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=d79050c7c280c60a429f48928b000b3dab52b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:27:37:14:b9:57:86:7c:7a:04:92:b4:a4:
93:76:88:4a:ea:93:ee:a5:77:24:ec:13:d9:94:6d:
35:e0:25:c9:94:2e:a7:29:9e:13:17:52:f7:97:ed:
79:6d:e9:f6:8a:c4:0e:5d:7b:74:2c:35:88:02:bc:
81:88:07:2a:2b:d7:62:15:4c:fc:b6:58:90:6f:90:
83:3a:e8:81:46:c2:7d:b2:6c:74:3b:4f:80:46:9c:
d1:49:9e:cf:62:05:d3:6b:bb:e8:c2:d7:28:71:73:
e4:26:fa:15:47:36:cb:c7:14:a8:36:ae:65:66:d7:
c0:a0:a2:3f:4a:bd:54:d1:3b:ce:2b:93:d9:31:f4:
c0:e4:af:20:e2:b0:18:69:45:fb:64:a4:1c:52:b5:
3d:6c:cd:9f:10:89:c9:f5:af:f6:79:b0:90:ff:86:
f4:9c:2e:a1:e0:f9:d6:62:42:40:4a:d2:9d:33:e6:
9d:06:e9:16:b3:32:a0:67:7d:39:52:83:b1:1d:b5:
f9:b5:79:54:c2:fb:dc:d1:bb:e9:b2:71:fe:b1:1a:
4c:d9:03:a0:00:9e:04:8d:53:7f:3f:7d:70:d9:1a:
ae:3a:aa:3b:96:86:38:f4:33:4a:31:44:28:08:6c:
28:21:0c:ee:ff:0e:ca:19:00:cd:14:4f:64:37:21:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:50:C7:C2:80:C6:0A:42:9F:48:92:8B:00:0B:3D:AB:52:B9:F4
X509v3 Authority Key Identifier:
keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:19:c9:40:88:07:3d:47:c9:0e:7c:7e:39:50:84:6a:48:ca:
8c:90:a3:17:6d:7f:5c:d8:53:93:71:53:33:eb:1d:b5:36:27:
2c:24:01:db:49:aa:be:0a:d4:88:47:73:b7:c9:be:95:1b:67:
3c:ef:cc:f6:1d:8d:87:d4:06:79:bd:69:09:b6:ed:24:a4:3f:
ae:77:ac:b5:e8:1e:fa:8f:d5:4f:b6:4f:4e:a5:5e:d6:3f:c6:
66:71:e7:9a:e1:e7:5a:7f:bc:83:ba:bd:5f:9e:0d:a7:77:8e:
e7:7c:7f:aa:57:a2:81:59:5b:ff:e5:ec:38:b5:c2:16:5c:bb:
9f:b6:0c:0d:ea:b1:4c:44:53:1c:e1:0f:ca:c0:97:e1:46:9c:
f2:16:22:19:3c:a9:00:44:73:48:7c:72:4e:24:68:6e:2a:1f:
3f:c3:3b:b7:c0:05:d3:18:68:ba:f5:d6:f4:49:39:f8:d2:03:
42:fa:ec:de:c9:2b:b6:08:8c:ba:c8:9a:8b:5d:d0:d5:a8:14:
d4:3a:c7:dd:8d:c1:63:98:77:25:bd:9a:33:4c:47:5f:1f:86:
30:02:77:db:1b:03:de:fc:42:50:7d:4c:f0:fb:bb:83:7d:5e:
6e:80:3b:1c:ca:8f:44:43:af:ef:ad:bc:40:ad:b3:1c:0f:ab:
99:f0:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:37 2025 by rpki-client