Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: Nw2G+9xo09EslU09I9HvVkHK1M302B3+QVrbLxxkAvk=
Subject key identifier: DE:F5:3B:37:84:4F:00:5B:AF:1C:D0:E5:05:07:5B:6E:2A:90:5A:4F
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 0194BBCE409B5E9F10FB91195F6B5FF647F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: dhKFuxAKr0K8WF7HFn+wEUyjtvXPvAg9zGt9taud1KY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:9b:5e:9f:10:fb:91:19:5f:6b:5f:f6:47:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=def53b37844f005baf1cd0e505075b6e2a905a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:ee:a6:d3:de:65:93:59:88:54:e4:68:0b:
8a:05:ec:5b:01:21:a8:f2:96:e2:55:ec:f7:31:33:
3b:28:6f:e5:b4:0f:85:46:38:a5:a9:20:aa:90:d3:
d3:0d:7f:78:a8:86:a9:06:e4:5a:88:79:2e:e1:43:
35:70:3b:45:8a:59:21:88:47:c6:51:fa:2b:ae:c3:
17:55:00:7d:59:73:d7:62:5b:8b:9a:a3:6d:c1:13:
ce:88:71:b9:3e:04:8f:f8:71:d4:c7:49:ac:90:a6:
7f:dc:e5:44:f3:82:d8:74:05:8e:de:c0:9a:c2:87:
91:75:c2:5b:65:3a:d2:3c:5e:2d:ac:06:f3:47:d7:
06:c5:07:3e:54:8f:71:fa:b2:ad:6c:f2:b6:11:b9:
0a:a4:14:44:f3:f5:25:8a:7d:11:ab:50:8a:67:32:
f9:a8:af:15:53:0b:62:c5:9c:b2:dc:36:75:68:10:
70:12:ca:03:c8:f1:d0:51:d2:63:ad:6e:bf:42:67:
a4:8c:a4:06:a7:00:f2:e4:6d:9e:5a:7c:08:0e:a6:
d9:71:df:02:39:b3:1d:c0:f7:e5:81:f5:f9:7e:0e:
80:b3:b3:71:28:39:0e:80:5a:cf:0c:0a:8a:66:54:
d5:a3:38:d7:2a:09:85:27:7a:b4:2d:46:32:5c:d7:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:3B:37:84:4F:00:5B:AF:1C:D0:E5:05:07:5B:6E:2A:90:5A:4F
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:44:dc:e5:46:b2:9c:93:d3:db:ac:8c:53:6d:21:77:ff:
37:2d:ff:d5:9e:81:6c:45:04:80:da:35:54:a8:b7:a4:23:01:
dd:80:5d:96:05:4c:f9:9f:7f:99:87:31:a5:bc:05:2d:0e:73:
48:82:f2:e2:d0:30:f3:e0:1e:41:61:5a:61:27:bc:8c:78:7f:
33:63:08:f5:8d:7d:39:35:e5:c6:a5:2e:9c:1f:a4:c6:a8:70:
dc:5f:f2:f3:6b:2b:ee:23:61:f2:75:8b:15:c1:ac:e7:86:5a:
a6:0c:fc:ff:90:00:b0:de:a1:1a:58:ea:b8:44:d7:aa:3e:e8:
af:53:7a:48:fc:e4:b8:78:8b:d4:90:91:a4:20:c9:9b:e7:38:
12:a5:12:b2:76:92:41:fe:f8:74:d5:c9:4f:43:ec:34:17:d0:
9f:b5:86:11:93:af:81:eb:84:51:bf:68:fc:24:53:3a:26:cd:
18:25:28:c5:09:48:6a:ee:f2:0d:5c:55:36:a4:ea:a0:f9:66:
63:d9:09:69:8c:45:b1:0c:d8:f0:d9:0c:62:f6:84:35:25:e2:
86:f0:b5:9b:ed:e4:93:91:d2:e7:0b:13:35:90:c2:91:48:15:
75:a6:6b:8a:63:34:d3:3c:49:06:f7:8e:fb:a9:0b:fb:30:a0:
47:5f:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:09 2025 by rpki-client