Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
File: JQfjIVuSyGWOv0lfa4fOC6anvSc.mft (raw, json)
Hash identifier: 9ibgkcMRW7y0XQyJ+vloiSsDa2ActdixF2x5HFR0Bfg=
Subject key identifier: 17:5C:60:A3:90:5A:68:BC:F6:AF:12:06:BA:82:19:C9:68:6F:62:F9
Authority key identifier: 25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27
Certificate issuer: /CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27
Certificate serial: 0194BC7319FBD51C35DFDAA7471EBC626DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
Manifest number: 05CA
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: JQfjIVuSyGWOv0lfa4fOC6anvSc.crl (hash: 0W+YRW6XXZyMmXOQvt3zNlGk8s0hXh8gauQNegfBNRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:fb:d5:1c:35:df:da:a7:47:1e:bc:62:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=175c60a3905a68bcf6af1206ba8219c9686f62f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:4b:f4:13:40:28:8c:7d:26:3b:66:7c:09:
9d:04:2f:77:b9:33:be:49:75:e2:d7:26:2f:86:69:
fa:a7:a5:6a:c3:d2:96:4e:49:32:b7:48:38:0f:99:
ac:29:06:e7:66:04:73:e8:4a:45:2c:5f:1b:84:a8:
d5:b7:7b:8d:0c:93:6c:02:06:04:f4:55:4d:1d:8d:
c1:22:13:4c:c0:e7:21:15:c7:5c:e8:eb:04:4f:cf:
1e:0f:a9:19:66:b6:b1:48:d6:42:e7:2e:6b:be:12:
17:28:8c:2f:b9:c2:67:38:c6:9e:23:9d:68:fb:75:
a5:11:5f:e0:75:65:ba:f9:09:3c:df:59:13:3e:53:
3c:65:10:fe:e7:01:7a:73:c2:12:c8:7b:d1:c9:e9:
67:ca:5d:49:9b:34:95:cd:7e:26:9a:a4:6e:8a:3c:
15:d7:91:ee:eb:4a:14:2d:1c:95:f0:cb:2c:e2:7b:
d3:bf:1b:5e:fe:5e:fa:83:f4:01:46:30:37:71:e8:
45:81:07:a1:8e:b4:b8:af:d6:f7:94:04:5d:7b:82:
2b:d0:68:29:ac:57:a4:2e:40:9c:c1:6a:85:e7:5b:
73:30:4f:41:bf:6d:63:9a:e9:5f:ac:85:06:16:4a:
28:f9:68:70:79:9e:5b:0f:0e:af:02:64:bb:ec:f8:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:60:A3:90:5A:68:BC:F6:AF:12:06:BA:82:19:C9:68:6F:62:F9
X509v3 Authority Key Identifier:
keyid:25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:01:1b:66:59:9b:ff:a5:88:21:a8:8c:fa:7a:86:6e:3f:d4:
ed:50:a5:cd:71:31:b1:aa:61:49:77:9c:b8:51:9c:3f:aa:29:
87:24:b4:48:c4:00:a9:3b:04:d1:29:b7:0d:e2:1f:74:89:e0:
09:68:4b:53:17:8f:4b:e7:e4:e5:9b:39:1b:39:04:ed:89:48:
c5:2c:c6:e4:7e:b1:f7:28:85:cf:fc:64:d0:3d:60:39:1a:cb:
2a:9e:f3:39:5e:98:bb:41:97:b3:bc:5c:df:7a:d9:fb:44:9d:
09:58:b1:74:10:d5:d0:19:27:19:2f:c6:15:51:3e:6a:e6:69:
8c:c3:37:8e:b9:82:37:b0:09:c9:f9:63:94:a4:56:82:72:8f:
db:94:e4:f4:4b:69:df:b0:ae:69:64:8e:6c:4f:94:55:4e:e3:
df:40:8a:86:5f:6d:8d:21:54:1a:6b:96:7c:f2:11:70:e6:78:
2d:af:4b:75:fa:fa:aa:1d:8b:14:5d:72:d5:0c:ed:b4:62:4d:
ab:dc:03:29:3e:a3:9f:a1:5c:db:22:f8:c1:d9:bd:79:70:61:
3e:f8:7c:6d:23:b2:cf:84:4d:47:bd:c4:8b:93:89:08:91:1f:
85:76:74:0c:89:3c:26:f9:af:03:e5:5f:38:f0:73:02:5e:e8:
58:b1:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:09 2025 by rpki-client