Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
File: JmQ9Xo5785a-PNTesdkvYBtRFp8.mft (raw, json)
Hash identifier: U3XFqL9Vb1mY4CWK/p9GB6PduXTkO751Mluvtza33z4=
Subject key identifier: 60:69:59:16:2C:21:F4:4D:06:3C:FA:B2:82:A6:63:A9:22:02:F9:96
Authority key identifier: 26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
Certificate issuer: /CN=26643d5e8e7bf396be3cd4deb1d92f601b51169f
Certificate serial: 0194BD17A9FA81786836C16EF2602A3DA347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmQ9Xo5785a-PNTesdkvYBtRFp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
Manifest number: 0ABE
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: JmQ9Xo5785a-PNTesdkvYBtRFp8.crl (hash: A91U0Mnq6xxTQXcba0Tcj0/N5MAV6Ejrff1d6NnvDXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:fa:81:78:68:36:c1:6e:f2:60:2a:3d:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26643d5e8e7bf396be3cd4deb1d92f601b51169f
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=606959162c21f44d063cfab282a663a92202f996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:ff:95:78:57:33:76:f9:59:79:a0:59:7d:
51:8c:7f:12:6e:60:4b:a3:95:21:75:d3:77:57:4e:
e5:10:49:38:df:6d:99:0c:6b:d4:e8:28:84:16:43:
16:78:76:c8:1c:27:a0:af:48:2f:9c:63:da:1e:d6:
c4:cb:6d:be:16:98:f1:e3:aa:53:9a:57:20:0c:09:
98:24:8a:73:15:37:ec:e9:dd:7b:8d:13:c3:5e:40:
11:8b:28:43:42:f6:c3:96:c9:c7:4e:17:f7:ac:39:
49:ad:9e:9c:09:eb:1e:45:de:df:a9:38:ba:cd:7e:
07:7d:27:c2:0c:6d:d5:f1:1e:bd:ee:f2:1b:e0:4c:
e0:d2:04:83:da:42:74:61:9a:b5:e3:c9:4a:89:5b:
a4:a8:2c:d6:48:c2:36:73:83:25:46:01:02:66:f0:
bd:01:28:56:16:79:d2:35:54:78:5a:e0:f7:3e:d4:
91:b7:67:5a:b3:a2:b8:77:6b:66:de:6f:e0:2f:5c:
17:8a:96:63:7e:3a:63:c3:d4:0e:d5:ad:66:26:3e:
10:5b:47:c8:8d:2b:aa:d0:9c:2e:4c:25:ee:8b:a2:
9a:80:88:57:11:84:e7:93:53:f5:6d:ed:b6:c4:15:
28:33:6d:82:15:78:77:62:34:34:9e:c1:2e:0a:62:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:59:16:2C:21:F4:4D:06:3C:FA:B2:82:A6:63:A9:22:02:F9:96
X509v3 Authority Key Identifier:
keyid:26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmQ9Xo5785a-PNTesdkvYBtRFp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:fe:eb:05:c5:44:f8:bb:4c:4c:3d:a3:f8:2c:b8:d0:56:
c8:0c:f3:6d:e5:71:e1:00:5f:0a:42:7c:ba:64:02:c4:c5:6e:
c7:44:a3:56:95:5d:d9:30:b3:50:40:f3:d5:24:6c:ed:0a:eb:
26:e1:3c:25:33:29:89:52:db:2e:90:43:2d:f8:ed:d0:77:6a:
90:62:1e:d3:9d:02:09:e9:72:2e:fc:32:61:a8:38:a1:e8:8a:
3c:6a:78:6c:9d:42:a8:39:e3:81:94:a3:a5:2f:ac:e0:fa:cb:
4d:60:a1:b3:0e:3d:c3:d3:1b:15:4f:45:44:bd:d3:15:2f:25:
22:71:96:49:94:f8:63:c0:b1:d4:5b:ba:c3:33:59:fe:80:bd:
e6:62:e6:75:e2:1f:e3:c4:0b:24:f3:b4:c7:0c:5a:49:b9:a8:
fd:85:d4:9c:a7:79:06:23:5e:bb:4c:c6:e4:c0:94:0a:1c:3c:
c1:16:da:d0:6a:b1:32:34:39:19:3b:4c:d3:bf:33:05:d9:6e:
22:0f:7a:7b:5e:ca:dd:0b:2c:36:ed:bf:12:ba:bd:08:1f:c1:
80:19:05:ea:e2:15:3a:59:24:4d:65:38:10:78:39:37:b0:23:
0e:81:a7:41:3b:d1:4f:ec:f8:df:bc:b9:9c:f3:97:5c:8d:3f:
4e:71:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:42 2025 by rpki-client