Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: nT1fH+yj3dsCdR7jFGwO9AkCbSMxSxQlCsCP+LJD0Ks=
Subject key identifier: 10:3C:DC:70:BC:18:6E:AC:53:A9:41:9A:AC:AB:1A:28:A9:0F:5B:57
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0194BC72F694453065C43E3E22BCF0FFD99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 67
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: b1V9ZvKw8tmf+VY9PwSnFTMqmLkIxg+AGK7IEFAouZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:94:45:30:65:c4:3e:3e:22:bc:f0:ff:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=103cdc70bc186eac53a9419aacab1a28a90f5b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:55:b7:57:81:72:3c:41:84:66:7b:43:ca:
95:39:ce:21:d9:65:00:5d:a9:84:5b:38:39:2c:54:
b4:c1:9c:ed:ad:c5:e9:d3:81:80:65:74:42:24:da:
85:50:55:72:6e:bb:79:8c:a9:92:88:66:4d:6c:d1:
4b:50:8c:1d:57:7a:c5:94:d9:f0:7e:94:1b:5c:79:
2b:f1:91:57:a9:0c:f4:ad:06:65:09:7b:45:54:5f:
59:93:45:44:69:1a:5c:0a:b4:0d:c8:75:a4:8f:32:
04:a7:d4:44:bc:ac:7e:21:03:1b:1f:69:94:c3:91:
fa:f1:8b:33:48:ff:96:e6:f1:7e:6b:64:44:88:9f:
45:7c:24:09:be:52:43:d1:e9:da:9b:04:53:41:ad:
10:91:51:58:31:00:45:02:b4:b5:9e:b4:8e:21:ff:
75:df:ee:27:07:12:aa:cb:e4:06:dc:c8:f6:89:81:
d4:86:0c:ec:b7:3f:00:b8:e2:21:80:5c:10:52:41:
38:6e:36:f9:b9:ca:19:24:a8:25:9d:72:3e:ae:ef:
6c:4c:68:93:ca:e7:2a:0c:84:88:ac:dc:97:76:98:
2f:6d:42:cb:21:b0:67:40:59:81:8a:8f:76:aa:19:
11:f7:63:ac:45:b7:e4:a3:90:2f:0f:1b:a1:37:f9:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:DC:70:BC:18:6E:AC:53:A9:41:9A:AC:AB:1A:28:A9:0F:5B:57
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:17:65:83:20:c8:f3:92:ba:8b:ce:fc:cf:70:c8:9f:1e:
37:03:18:f7:a3:72:70:d8:17:d9:66:9c:fd:cf:82:53:38:18:
6e:dd:3c:61:e5:0a:8e:bd:48:4c:47:65:45:c2:0f:22:8a:92:
4f:9c:71:9b:77:4d:23:d6:70:95:47:bd:24:bc:65:e9:bf:58:
c7:b2:5c:de:c1:73:1d:8b:bb:f8:b7:fe:9a:54:f3:d2:85:85:
70:21:ee:79:88:46:01:1e:d7:be:f6:31:e0:a2:10:22:c0:6e:
ab:93:9c:6e:25:3d:ba:b6:6f:32:cf:8c:01:80:f9:2d:cd:07:
37:72:09:90:07:50:61:7b:f6:73:69:cf:39:71:16:67:3b:a5:
d0:88:c8:d3:18:54:de:5a:87:5d:5a:af:61:f7:a1:d8:e4:af:
c6:03:3d:7f:a8:7a:ab:63:a3:87:86:f2:cc:63:ce:0f:72:9e:
3a:10:e1:d6:f5:67:b8:18:44:25:b5:9c:d4:fa:a2:a5:88:d6:
1b:a1:1b:b1:f2:cf:d1:58:3e:a8:9c:d7:46:f4:2a:74:93:ea:
4d:2b:65:11:d1:29:56:26:e3:66:33:31:f7:3e:b9:bb:9d:e1:
f9:36:b0:14:bc:b7:d6:b9:d2:66:5a:c7:1e:0b:08:5d:d0:12:
ef:2f:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:22 2025 by rpki-client