Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: 6tP7w2db0IqYR1cPzPOq2d8r1qz53l+gLbQRbPQoiNE=
Subject key identifier: D5:65:7B:2B:C4:02:01:3B:F7:A9:8E:5F:79:DB:AB:D8:24:5B:37:30
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 0194BBCEE3E7CCF1000AA5FEDB81A494EAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: K67ylXY3/gk/hpzm4jnUSOz9IyIF1UVO+yoZYz796QE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:e7:cc:f1:00:0a:a5:fe:db:81:a4:94:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=d5657b2bc402013bf7a98e5f79dbabd8245b3730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:de:d4:a0:c7:0e:96:5f:58:72:f4:b7:ed:
8c:9b:b2:84:f0:4f:4e:18:f5:1c:99:58:02:54:bb:
2a:ea:50:4d:4a:9f:5a:34:67:75:7d:23:10:38:09:
78:0a:43:63:de:4d:aa:11:9d:a7:f0:df:bb:95:93:
cc:60:f5:eb:27:92:90:c1:d9:3f:96:6a:2f:cc:42:
f5:8c:3e:d2:41:30:4d:16:51:d0:c5:2f:36:df:af:
0c:13:db:a0:32:24:61:9b:57:3a:9f:6f:b6:d7:e4:
85:4f:69:a9:a3:19:ee:b6:7b:52:50:5f:c9:49:8f:
d6:85:78:ff:47:19:18:39:33:5a:67:8a:a9:2f:7e:
9d:a2:d3:1d:c5:94:10:54:06:92:07:3b:0d:ac:af:
a7:2f:74:fe:23:ce:1d:18:35:dc:da:14:d9:95:7d:
65:91:6a:61:83:48:10:39:7a:76:91:85:42:b0:5a:
e4:33:be:85:40:e9:79:0c:c0:db:e1:5c:dd:eb:19:
b8:e8:70:9b:04:94:8f:d9:03:73:68:c4:80:46:eb:
81:4d:52:60:0a:5e:d1:10:41:e6:5e:0a:31:95:c1:
68:72:ea:6d:76:be:2f:6c:f0:bb:bc:c8:f3:7d:e1:
a1:f5:17:d6:2a:5d:d2:20:e7:f0:89:da:ce:c2:cb:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:7B:2B:C4:02:01:3B:F7:A9:8E:5F:79:DB:AB:D8:24:5B:37:30
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:03:10:6c:b0:5b:35:3b:d6:5c:89:6c:61:51:23:22:29:
9e:71:96:45:73:d2:6a:1e:08:0d:81:a2:50:89:ee:7b:d7:be:
81:11:21:1b:91:40:e1:b1:dc:48:ef:0b:f0:e3:03:65:40:d7:
c3:bb:ea:9f:46:7b:52:c1:13:65:22:41:ac:7d:cf:3c:f4:09:
6f:3f:03:ae:fc:4f:1d:76:f4:d4:9d:ef:a7:77:40:8b:9d:dc:
f3:20:cd:bc:03:53:9f:1b:61:34:5e:0e:e7:64:6d:f9:e8:c3:
a6:15:2f:c9:bf:e6:80:c7:5a:cb:8d:43:86:38:2f:e1:53:58:
ab:eb:d0:ad:30:d3:bd:5f:3a:d1:18:08:6d:c8:61:8e:4c:ad:
6d:ae:aa:b5:20:ad:fe:74:0c:29:ec:ad:bc:e6:fe:c1:51:e6:
46:8b:a1:ea:ab:31:e5:8d:34:30:d1:1a:31:48:f3:77:76:d7:
95:c2:eb:9f:a1:4d:a2:e3:82:2a:f9:ee:a9:bb:7b:57:4b:4a:
10:8e:97:5f:d2:33:47:5d:4a:d0:c7:a6:63:20:d2:6a:21:17:
d5:58:14:c1:66:84:e5:cf:4b:3e:49:1f:e4:49:73:1e:93:71:
ed:63:eb:42:e4:53:ad:53:d9:7a:9b:34:29:6b:44:a8:76:df:
9a:48:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:15 2025 by rpki-client