Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
File: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft (raw, json)
Hash identifier: k8XFTbzYsSTYAeBRm15iv0YM4Gh2vCMSluYm8unaTjs=
Subject key identifier: 17:F8:1C:CB:D8:98:0E:6B:52:E3:CD:DF:38:AB:7E:9D:D8:B1:ED:EC
Authority key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Certificate issuer: /CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Certificate serial: 0194BC050726E2B08F8BDD7E5D1ED49F6052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
Manifest number: 027D
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl (hash: wsvpCwSfk1Al6F9UOLaIeU7SaFUMxS6LshCemfFirpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:26:e2:b0:8f:8b:dd:7e:5d:1e:d4:9f:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=17f81ccbd8980e6b52e3cddf38ab7e9dd8b1edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:1f:ea:92:42:7c:42:02:4c:76:bd:60:c6:
42:40:16:be:fa:6f:2a:5a:e3:43:cd:34:5d:7f:2f:
86:19:0d:f9:19:11:8f:62:1e:3e:d1:30:d3:e6:81:
f0:3a:dc:ee:fb:ee:3e:8e:17:d9:1a:31:a2:ff:05:
99:9b:9d:9d:57:19:88:56:26:51:4c:47:9d:3b:f0:
5c:87:bf:68:26:3c:27:c5:69:16:06:e2:47:b3:a2:
7d:6e:90:24:fc:92:94:ce:75:24:57:cd:2b:de:ef:
dd:7d:ef:69:40:12:94:2e:9e:52:9c:da:29:e0:b1:
7c:58:b6:7d:77:6c:fc:3a:0a:e5:17:50:f4:10:32:
21:02:1e:fd:a9:a8:4b:7f:8d:ae:a7:b4:4f:89:48:
e1:3b:c8:29:29:a9:d6:df:cb:58:7a:e6:c1:6a:95:
d6:63:7a:87:82:c2:18:9f:1b:02:91:cc:a5:ba:19:
55:be:20:bd:08:c6:9f:60:4d:bd:f9:8e:87:2d:1b:
52:08:d6:bc:fb:64:cc:b5:6f:c7:c4:da:b6:29:2a:
98:e7:9a:1b:db:62:f7:5a:93:66:2f:c8:09:11:7a:
1a:9e:aa:c8:98:9f:11:8a:86:65:ad:d1:28:92:48:
de:d6:df:8f:5b:d1:75:61:a5:90:f7:d7:db:8a:48:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:1C:CB:D8:98:0E:6B:52:E3:CD:DF:38:AB:7E:9D:D8:B1:ED:EC
X509v3 Authority Key Identifier:
keyid:8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:63:89:9e:91:c7:d9:b0:f4:3f:cb:34:6a:44:9c:d6:78:
9f:e6:ad:c6:d7:44:83:9b:73:4c:26:a4:4a:a7:91:cc:71:57:
db:ce:58:26:9d:20:c0:22:a8:b8:d9:53:2b:46:0c:92:cc:90:
fa:a7:3a:29:6c:60:0e:fe:0f:c4:86:c2:ff:09:cf:ab:6d:c4:
92:67:c7:1a:2b:37:97:74:1c:57:58:59:a6:6a:cc:8b:15:21:
14:7a:be:b1:12:24:59:5d:67:c7:79:58:e7:3a:ff:8a:b0:4a:
05:cc:e2:dc:ea:b5:d4:9b:6f:76:dd:d2:44:38:d4:e6:f6:16:
da:30:1d:44:21:8b:5a:ac:a1:28:46:22:c0:24:0d:1c:ec:a7:
a3:87:ef:82:bf:04:ff:4a:48:6b:52:25:fa:a9:22:fa:a7:b0:
60:62:44:e1:f4:ad:c6:c2:57:ef:e9:79:d2:27:a1:3b:1c:fa:
e7:81:d1:7e:b3:aa:2a:1c:90:54:86:a1:c2:7f:e1:ba:76:69:
90:9b:e3:34:d2:2c:bd:81:32:a1:14:f6:6e:3a:21:ed:f7:07:
e8:9d:55:32:a7:4a:97:03:20:f7:5c:bf:fe:08:c5:59:17:23:
2d:9e:7c:8e:d8:9f:a1:9f:6d:42:db:24:60:6f:0f:b1:dd:d1:
19:7e:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client