Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: DgAtETi3sF8w4tsTA+F0b4MjChBEq9MnINN73iG6YgY=
Subject key identifier: 94:5A:0B:23:6B:97:E0:CE:A8:92:2E:95:E4:CD:C0:9B:B3:BB:5D:B2
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 0194BD857B579CBDF9BEB60734C4415AE17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0321
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: HLN8lLwJsFcm7BRD7yJ1LqSASsCGJl2NAuKr3T7ZKkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:57:9c:bd:f9:be:b6:07:34:c4:41:5a:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=945a0b236b97e0cea8922e95e4cdc09bb3bb5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:66:fc:3c:f0:9a:8e:1c:fb:2a:bf:9f:c0:
71:b0:e9:bb:33:ec:96:5b:0e:b5:e0:c7:05:14:e9:
dd:2f:f9:de:0f:b5:fe:18:14:01:b9:5c:be:8e:0a:
a3:85:ee:48:71:0b:87:42:1c:08:e9:d3:15:55:75:
25:df:d6:17:21:e1:ee:02:c8:53:b5:f1:9d:49:1e:
2f:4d:3f:96:69:ee:c4:aa:34:6d:84:0d:2c:a0:e1:
28:34:ed:90:c6:b3:0d:62:97:72:97:5c:7d:99:ec:
bf:79:cf:b9:f1:f9:30:99:5c:72:ba:aa:0e:c2:dc:
47:fb:7e:c9:33:ed:de:56:15:0f:29:bf:89:80:18:
f5:c1:b6:2c:ea:57:64:29:d2:9b:b3:93:13:73:7d:
cd:f1:6a:47:25:31:03:51:7b:31:c1:32:ff:dd:88:
e5:cc:f8:cf:00:e2:2a:ea:cc:bd:24:06:c5:11:0f:
74:3e:78:16:25:32:76:d5:cc:44:eb:e4:cb:e6:9f:
be:97:e0:94:db:be:e4:cd:8a:07:5c:0f:d4:b3:84:
3d:49:69:03:5c:56:3f:17:00:21:af:ea:90:2d:f8:
13:5f:4c:6b:41:51:ab:63:6f:6f:dc:63:77:43:09:
43:4a:88:f8:1d:77:c8:fe:ed:6f:73:ba:64:a8:dd:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:0B:23:6B:97:E0:CE:A8:92:2E:95:E4:CD:C0:9B:B3:BB:5D:B2
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:48:a4:2f:bd:82:95:46:6d:1c:82:6d:b9:56:6a:3f:46:2f:
9f:5c:ab:7e:ac:23:2f:ad:a6:19:dd:3b:46:f4:71:30:62:59:
90:f9:4a:a8:cb:ba:a0:b1:db:1c:3f:38:8b:2f:05:cd:ca:49:
a9:5c:56:e3:c5:3b:ab:a4:13:ab:4c:56:82:27:fb:e0:61:43:
d1:4c:de:3c:6d:98:ad:17:0f:a4:3c:f5:06:3e:49:b8:53:f9:
c7:12:d8:53:54:42:92:f4:f7:dd:e9:6b:03:49:4c:c5:4f:0b:
21:93:12:fe:1f:9c:c0:f7:86:a6:c3:e4:ab:c2:e0:c5:e2:dd:
a5:02:e0:8f:e6:1a:96:a9:37:9f:e7:8c:de:d7:16:20:05:11:
4c:2b:9d:d5:04:e6:e5:26:6d:0d:41:d7:a6:0e:20:19:48:5d:
0b:37:4e:f3:1d:75:56:49:05:a1:0a:7b:65:69:7f:ca:aa:93:
96:20:96:d5:16:e1:bb:30:15:0d:fa:3b:c7:a6:95:1e:8d:af:
ba:4e:15:2f:21:a7:4f:e4:3c:6d:65:66:cc:cf:b2:ea:f6:30:
e9:54:1c:47:7c:4f:83:6f:7f:8d:36:62:4f:24:60:1a:12:6a:
3e:f3:03:8a:d4:19:42:0f:68:ff:fc:97:26:22:f2:b5:5f:46:
20:ef:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:38 2025 by rpki-client