Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: iCmd6JjnAmiTCQKITo12NE+U5D+qGR5dkXatoSedOaQ=
Subject key identifier: 40:71:DF:01:0D:01:14:6B:39:6A:77:C2:45:CC:70:A4:E0:86:67:96
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 0194BBCE9E6CCE4676238EC31C266CA1E8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 08E1
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: fgRnzFhgQdcaY6jPa10wZx28RdWts2ey3JtanBwVEvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:6c:ce:46:76:23:8e:c3:1c:26:6c:a1:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=4071df010d01146b396a77c245cc70a4e0866796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:a2:6f:8b:f7:15:13:2c:38:cb:62:e4:ca:
f5:fe:b3:03:0b:d2:0d:20:63:16:e0:36:4a:e6:34:
46:02:70:25:a7:47:4c:c2:9f:fb:21:15:02:88:1c:
20:2b:26:27:6c:dc:2c:46:1d:71:ba:b5:e9:93:c0:
5c:a2:4d:a9:f0:09:0b:a6:ac:15:4b:9e:e1:b6:e1:
a7:3e:4c:e1:72:09:f1:6f:37:bb:66:e9:85:9f:e6:
63:9f:c3:08:ac:6a:44:08:e2:f9:02:a7:65:6d:14:
1a:71:62:0d:6a:6e:fa:99:d4:63:67:50:bb:ff:c0:
e8:39:e7:8d:5e:93:f8:2d:29:0a:a2:35:13:f7:6e:
9e:08:e2:34:ca:5e:68:9d:97:07:1a:46:da:d0:5e:
3e:ae:37:f8:23:b4:8d:86:b7:82:4b:48:36:c1:b9:
5e:c0:cf:1a:92:27:27:63:be:cd:7e:aa:c6:33:48:
f0:a9:c8:60:bc:c4:96:e7:06:d3:64:91:6f:23:13:
ad:a3:fa:f2:d4:7a:2a:88:9f:8f:5b:2e:85:19:2b:
fd:57:b0:9a:8d:1e:11:ed:08:fb:f1:d7:b0:91:2a:
ce:6d:5b:c6:b8:83:f2:95:42:af:94:53:28:d8:1d:
85:32:01:a2:6c:98:bd:88:36:13:d3:ce:f8:92:9a:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:DF:01:0D:01:14:6B:39:6A:77:C2:45:CC:70:A4:E0:86:67:96
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:be:69:b6:e6:19:de:0b:64:be:09:ee:3c:08:06:69:72:44:
e5:15:49:2c:80:cb:ee:07:91:19:a0:cb:23:38:f8:d6:98:9e:
4a:5b:94:08:d4:e0:f7:f2:a7:9e:0c:08:ca:ec:ea:23:34:64:
12:90:dc:8e:73:85:51:9e:e5:cf:9f:d6:60:6c:eb:8a:f9:cb:
d1:dd:6a:a4:90:f5:34:8e:0e:eb:e1:20:c5:49:5d:49:d6:25:
10:9a:61:50:fc:5c:1d:ea:10:37:b7:2c:c1:b7:e3:73:34:b3:
2d:a7:22:1c:68:8e:4a:5b:1c:44:19:43:8b:3e:43:35:65:e5:
4a:a6:64:a5:3d:7c:3a:e8:76:b1:fc:07:11:27:b2:5a:f7:ac:
ba:c6:bf:e6:6e:06:c4:8a:a8:9e:31:59:b5:a8:47:01:29:9f:
18:6a:ea:01:95:ab:5e:f2:8c:cb:ed:9d:29:87:a6:e2:61:4e:
e6:f0:00:39:59:a2:b5:a4:8b:9f:b4:c6:40:80:cd:88:ca:51:
27:d4:8f:e0:ff:5f:b0:b5:4e:0a:0f:bf:a5:a8:2b:80:80:80:
b7:1a:63:ef:e9:e2:9c:aa:db:65:1d:a7:47:3d:78:da:e5:27:
1f:01:ac:1d:b8:d9:1f:24:92:38:8c:d9:11:07:97:13:ce:4d:
a5:96:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:47 2025 by rpki-client