Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: RvfheDSm0IaOILDHtbhvCypkGagROq7bVmMVn/ANjvg=
Subject key identifier: CD:7F:79:D7:80:A1:70:E0:CF:86:FF:B3:BC:A5:DC:AF:BD:0D:B6:1E
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 0194BBCE30AB0DAC907C08C0F27705A5872D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1169
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: 8gt32M59awTCVCaqLZfPTOf58yC4hAKqVPivU11UiNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:30:ab:0d:ac:90:7c:08:c0:f2:77:05:a5:87:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=cd7f79d780a170e0cf86ffb3bca5dcafbd0db61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:5c:cd:1e:13:8f:36:ea:50:b4:60:15:14:
f0:f6:c1:08:30:15:76:50:b4:d8:e3:89:f0:62:44:
8c:16:11:be:f2:b4:be:dc:eb:c6:24:de:c4:11:68:
d9:8f:ec:c8:1a:2e:83:3b:a7:0f:13:77:ff:e4:de:
88:31:0d:a3:5f:d5:51:fc:a1:1a:70:24:fb:c9:37:
a8:6e:62:bd:74:7b:4b:4e:9c:d2:ac:38:f7:75:5a:
2e:ab:a4:09:4f:da:73:9b:d7:9d:1e:89:b0:40:3e:
0b:d4:b5:7f:1a:1b:50:1f:da:0a:55:cf:ac:07:41:
81:d3:52:ac:91:36:76:8b:08:b3:e1:31:22:3c:1b:
15:f2:14:bf:67:55:e2:90:fb:bf:ad:d9:b8:a6:6a:
a2:ef:43:06:f7:dd:3c:15:d4:8b:0a:e0:d0:ec:16:
f3:f9:a3:55:87:19:13:7a:06:aa:d8:09:35:55:19:
d0:f7:08:21:f1:8d:48:62:a7:1c:4e:e3:79:7c:d2:
fd:9b:4c:0a:6b:4b:b1:f1:7a:93:1d:91:9a:b7:cc:
71:4b:42:12:3f:76:43:f9:3b:9d:8e:f3:9c:71:1f:
ea:bd:8e:d1:46:b8:e4:2c:37:e3:4d:24:94:b1:45:
61:6c:48:19:35:a4:cb:37:6c:4a:11:d6:0f:54:fb:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:79:D7:80:A1:70:E0:CF:86:FF:B3:BC:A5:DC:AF:BD:0D:B6:1E
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:ac:91:fa:de:ef:fe:ed:32:5e:5b:96:9c:5a:9e:83:29:
aa:57:2b:f5:eb:08:e8:88:0f:39:33:f6:46:49:b7:ca:d5:53:
91:ed:b0:f4:09:ad:51:b1:08:11:76:2d:39:29:8b:26:cc:ee:
32:8f:ea:18:a6:ae:95:33:ea:0a:a9:08:1b:42:58:06:37:28:
01:0f:5a:b7:59:e3:7c:e7:b6:8f:27:78:47:fc:cb:34:57:20:
be:22:db:e3:1f:c0:19:13:6b:75:c2:db:98:01:e6:28:d2:93:
d8:b6:6f:ab:54:3a:7c:f9:46:29:e8:77:41:23:c1:ad:da:94:
01:77:3d:c5:c5:ce:e6:78:77:12:e6:25:6f:92:f7:85:77:9d:
b3:93:4b:34:73:1d:f7:28:62:9c:ee:f9:e7:3f:dc:3e:49:64:
69:4a:b5:19:14:15:b3:76:cb:9b:02:13:1f:0e:05:43:e2:3d:
aa:82:5c:c8:c0:18:37:32:23:f7:3b:0f:62:2c:93:b7:b7:4a:
e3:59:4c:1d:ce:64:25:63:64:bc:37:32:5b:20:f3:6c:80:7b:
0c:1f:ff:0a:91:b8:08:4a:ab:bf:54:95:18:16:38:18:12:44:
83:96:0d:d8:6e:c3:5d:d2:54:c3:52:5e:32:2c:a2:b8:ad:4f:
2c:82:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client