Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: PURvlw+ISa8miDlg4aygVOMijgau/3qIDlib390vTXk=
Subject key identifier: 1D:11:FD:BE:CD:DA:DA:4D:6E:AB:9D:A9:72:FA:FF:BD:C2:13:A2:A4
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 0194BCE0CD7E65D28DF32B3D1222731B8FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 038C
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: tJmIi1T4hUJ2vCAoFHH8vxujDxxdowLjvh925nvuq0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:7e:65:d2:8d:f3:2b:3d:12:22:73:1b:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=1d11fdbecddada4d6eab9da972faffbdc213a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:a9:65:13:4e:4a:81:6d:61:a5:51:35:5a:
38:90:1f:de:2e:35:ab:65:0a:58:59:6e:8e:3f:23:
38:1c:9d:26:19:42:31:91:ac:05:c5:d9:fd:fd:f7:
1e:a6:35:0a:ed:32:7c:53:aa:2b:00:87:0e:1b:0d:
34:7c:fd:43:bf:03:54:91:2f:a8:9f:24:a6:17:c5:
7c:05:5f:3b:66:86:fd:a8:82:fd:20:ad:86:ff:a7:
1e:43:16:3f:6b:3b:34:9c:1e:f8:ba:ae:b0:0f:39:
8f:2f:0e:78:00:5b:d5:fa:c2:f2:83:f4:8f:37:be:
5a:97:2b:44:b5:dd:48:19:dd:36:ce:8f:7b:65:1c:
64:c1:c9:08:2e:ea:14:a1:d9:7e:9f:78:a9:b9:27:
ca:f9:f4:9e:32:1e:df:69:b3:b6:b9:06:5a:81:5a:
11:17:6a:1d:58:f5:b1:3e:5b:e9:9d:35:66:c3:3b:
02:64:21:46:64:52:db:60:33:ab:81:77:5c:11:82:
5e:b3:e1:8e:6b:78:65:6e:2f:bc:76:ed:b7:42:b5:
6a:54:0c:d1:7d:b4:ae:aa:47:2f:a4:3c:66:29:ae:
66:2c:06:76:b6:75:df:28:78:d4:dc:4a:d9:9c:01:
78:9d:75:7a:76:49:f6:56:57:a9:68:ed:8e:d7:dd:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:FD:BE:CD:DA:DA:4D:6E:AB:9D:A9:72:FA:FF:BD:C2:13:A2:A4
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:7e:5a:95:24:e5:bc:63:73:24:1f:87:67:e4:74:81:74:
d6:d7:7f:25:06:55:3d:60:f7:4c:67:aa:96:94:2b:f1:65:76:
37:de:6a:db:87:97:dd:c7:7f:2a:82:4c:13:80:58:4c:53:11:
5d:38:0e:fd:95:f3:ee:77:ff:00:7a:b6:1a:6e:86:1d:c9:fd:
85:c4:1e:8e:bf:32:51:d0:28:32:2b:dd:a8:2e:6a:2c:a0:9d:
90:05:3f:d0:48:7f:dd:ff:fc:65:ae:e8:f0:55:d3:6b:df:0a:
98:66:62:49:52:13:7c:df:5c:85:51:f1:30:15:28:24:ae:39:
97:be:e8:a1:e3:29:fd:6e:01:df:ca:4b:ce:c8:64:d2:26:97:
70:39:59:39:e8:7c:9f:3b:a4:a5:df:b4:77:5a:b2:ec:d1:04:
3c:eb:4c:12:e2:33:42:d3:44:84:9b:f5:90:6d:4b:cc:ba:32:
17:52:b4:8d:a4:b8:3d:3d:23:86:31:89:8b:a0:45:74:28:27:
0b:46:0d:a2:7f:e3:5b:11:39:e1:4d:59:a8:11:ee:1f:22:4f:
aa:e4:38:ae:3c:1a:47:41:6a:b2:16:3d:05:a1:85:be:07:36:
88:06:d7:b2:60:04:f5:3a:b4:2d:e4:1a:98:30:97:59:55:f6:
75:2c:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:37 2025 by rpki-client