Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: HQed06KBF8dby71qjUtRZASZlosnMl6/EqYLq/zf6Uc=
Subject key identifier: 56:E2:6D:24:F6:84:D0:3E:83:2E:A2:74:26:36:1C:4D:15:D8:13:30
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 0194BCA9CAD838F3CFED98BC2B7D5A0965EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0BD5
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: 7oOi3mqPT7AcqgF9Za0Ks2rMboim+VCeACg3TK9Y9m8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:d8:38:f3:cf:ed:98:bc:2b:7d:5a:09:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=56e26d24f684d03e832ea27426361c4d15d81330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:41:62:42:43:33:a2:9a:14:b2:d6:20:63:
38:3d:cf:64:06:f9:16:a7:09:6d:5a:5f:a7:2d:9d:
34:e1:f8:f2:fa:cc:fa:8e:9c:eb:f1:6f:43:6c:86:
46:05:02:9d:5d:d9:21:9d:09:99:45:50:e5:7a:35:
29:a3:7c:9a:c9:51:f9:19:4b:df:d2:03:47:90:bd:
98:3e:e4:6f:62:4e:24:a7:d0:e9:52:1a:e8:af:cb:
6c:f1:64:23:d5:ff:f7:92:93:4c:b4:11:cc:31:57:
a9:c8:6d:ba:49:50:f3:e4:5d:1a:aa:98:83:5d:b0:
e6:55:c4:7c:f5:44:0e:17:26:5b:95:74:1a:5c:bc:
fe:0c:79:33:a1:fc:ee:2f:27:ec:30:60:1e:e3:73:
fd:4a:eb:4d:f9:f3:80:f9:00:0b:f1:de:82:cb:69:
07:d2:f4:a9:67:ec:07:74:28:c9:c1:99:79:66:ce:
f2:93:64:fb:f1:5e:b4:87:9f:95:0e:a7:43:e0:dd:
e5:f7:4d:09:7d:4d:0b:ca:d3:8c:f0:50:9f:d3:15:
a6:6f:16:3f:e7:dd:70:18:2c:2e:db:25:d6:f9:cb:
32:c9:82:f5:3d:6c:b4:6d:72:6f:62:ce:3d:99:56:
dd:cc:3c:e5:7c:04:85:02:52:0b:5b:de:3b:00:4e:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:6D:24:F6:84:D0:3E:83:2E:A2:74:26:36:1C:4D:15:D8:13:30
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:df:22:7b:2d:19:09:b8:8b:ec:f4:47:14:d7:08:ae:8c:
02:20:88:af:04:bc:55:1d:99:26:04:7c:a1:d7:23:ba:c0:09:
5b:94:e7:7b:49:77:3a:05:51:bb:e1:97:9f:c3:f8:53:f5:d4:
9f:dd:49:00:b7:10:4a:11:5f:58:86:53:ac:33:bd:d9:fb:cc:
b4:7a:ff:3d:29:53:10:3a:aa:1f:da:72:c4:75:d6:be:63:47:
50:d4:58:4c:02:67:df:1e:a8:39:ce:81:81:aa:bc:1b:b6:e9:
c5:10:8b:3e:e2:77:d5:8c:ef:a7:f3:93:4e:6b:34:63:ec:a3:
37:fe:5c:b0:cd:7c:74:23:88:15:92:5a:d9:63:01:f5:54:bb:
db:0c:eb:67:19:be:04:34:98:12:5c:72:54:61:6d:59:78:6e:
78:a4:95:85:71:4f:61:bc:41:64:a0:d9:92:e3:58:b1:e7:ac:
a0:53:c1:b7:98:e8:79:38:4c:fd:80:23:27:bc:7c:05:0a:13:
bd:72:69:2d:2c:be:58:de:9f:d1:33:f5:c5:fe:d3:5c:dc:76:
f5:96:28:0c:a3:18:2a:12:de:a6:ef:25:6b:b1:ff:61:70:80:
84:5e:6d:35:4f:6c:4d:bb:5f:89:b9:13:a4:e7:3e:20:ca:85:
29:81:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:08 2025 by rpki-client