Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: hGquwNRWRCZATwdfoTUkX5Hhh3pPqG35a+NnSPIR0Hw=
Subject key identifier: AB:8C:54:21:3A:37:6A:AB:44:FB:B8:7E:56:B8:54:F6:01:ED:DD:2A
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 0194BC3C7210B7C43842B82719E3EDB7E35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: +WNvKfbxdME+EhFXYh90MGy5SfM/j10kf8Qc5CjPDO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:10:b7:c4:38:42:b8:27:19:e3:ed:b7:e3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=ab8c54213a376aab44fbb87e56b854f601eddd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:09:ed:8b:df:d9:0b:85:28:e8:0e:12:62:
ca:95:99:f7:e4:46:0b:cc:20:d7:78:af:a9:5c:07:
42:fc:4f:6a:ec:a0:e5:58:60:fa:9b:3f:1b:f0:50:
10:59:57:bf:1e:bc:fc:ba:52:23:ee:f4:1f:a5:44:
7f:b8:7e:ef:82:c7:a1:b6:1d:fe:2b:53:ff:0d:db:
43:73:36:e4:4d:2c:90:29:dd:6b:93:34:bc:0b:f8:
9e:cb:ef:b3:36:84:ee:7a:8f:02:b6:08:3c:e7:ea:
d9:e9:16:cc:78:e4:21:c3:f9:5d:c2:c9:11:d7:61:
d5:73:1a:fb:e8:7c:4a:fd:7e:cd:5f:9e:23:97:71:
49:b8:49:66:5f:b4:3a:3f:91:e5:7f:55:1d:40:b9:
0f:91:6f:48:fe:13:4b:4a:1a:1d:b8:73:3f:9d:9a:
71:8d:18:4f:ee:88:c9:c7:d8:73:86:a0:64:4b:b9:
7b:c0:6a:27:f9:dd:4c:be:d5:c8:55:3f:29:ab:6c:
49:1f:98:1e:40:8c:a1:6b:80:87:37:16:87:53:74:
e8:51:46:a3:ea:70:90:08:b5:7e:00:c3:e3:df:a9:
92:61:df:09:c3:0c:0e:3b:b8:3a:45:be:b3:18:5c:
5c:8f:70:19:0a:be:18:33:01:b5:68:90:98:2b:b0:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8C:54:21:3A:37:6A:AB:44:FB:B8:7E:56:B8:54:F6:01:ED:DD:2A
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:f6:46:1c:ed:84:60:cd:c7:7e:79:3d:07:52:12:da:62:
8b:c3:0d:30:61:23:e9:3a:6b:ef:2d:cd:46:dd:d7:63:f7:c2:
7e:39:7e:04:68:cf:f0:dc:07:e2:5a:7a:03:18:af:62:a5:e9:
00:04:f2:aa:b3:af:78:4e:66:9a:da:38:c8:4d:89:67:9c:8e:
11:bc:41:ca:5c:c2:b8:1d:7e:10:44:33:6c:40:98:d1:64:11:
4d:c0:18:96:54:9a:5f:84:09:87:24:40:9a:80:d0:77:3b:13:
0a:06:85:4b:3c:ee:56:c8:48:81:24:5a:e1:be:d0:5e:22:a9:
43:fa:27:94:8d:50:8b:ea:e1:df:e2:ce:3e:7e:7a:1f:d4:d5:
c2:bd:c1:54:84:d4:64:f8:c5:5f:42:1a:cc:d8:b7:b6:0d:6a:
8a:b0:54:06:a9:89:2c:3e:e4:a1:ab:27:2b:cf:22:90:27:82:
85:dc:bb:4b:f9:11:01:7e:45:59:2a:f9:77:0c:1d:a0:d4:86:
91:98:ac:f9:eb:4d:b0:37:41:e7:d7:80:52:6b:02:cb:35:72:
fd:10:7f:65:37:fb:76:b5:73:41:27:4f:ff:e0:f9:2e:82:9b:
4f:a8:12:18:00:7c:8c:f5:cc:af:16:6a:12:fe:9d:e9:6d:35:
42:9c:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:51 2025 by rpki-client