Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: mZrdnV4X/KY3lnqtVyPgGHqR5C6tV635RZF2wvuiAtY=
Subject key identifier: 0E:86:4C:4A:08:68:0C:21:5F:58:D2:C1:0F:7D:B4:AC:A4:0A:ED:B8
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 0194BC3C438F94092E903D199798BDCFDA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 02FD
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: sfbm085aoVBG2GjobXPPDyBgxq+HVy9x6x2ox4y0Cog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:8f:94:09:2e:90:3d:19:97:98:bd:cf:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=0e864c4a08680c215f58d2c10f7db4aca40aedb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:9a:de:69:cd:d5:e7:b9:5f:45:11:f9:fe:
3a:c9:16:85:29:63:13:35:3b:f9:f8:14:29:df:2a:
dc:f8:29:37:c7:ac:08:b1:ae:ed:d0:d6:a8:a7:66:
6a:d6:1d:b1:a0:1c:0d:04:b8:9c:10:0c:64:c4:ec:
b7:1b:b1:ae:fa:ee:d5:bf:a3:fc:04:a2:80:ec:91:
8d:4a:b9:4c:63:50:3c:43:2e:d0:b3:f3:e5:d9:2e:
64:28:ad:72:8b:f0:59:a4:5a:fb:dd:61:9d:9f:a9:
0b:ef:aa:32:23:ea:54:b8:d6:1c:88:86:bb:c0:2d:
eb:e4:07:a4:9a:b4:af:d0:37:d0:e2:4f:86:32:2c:
b5:85:fa:32:a8:a6:86:c6:25:0a:16:a0:b4:c8:de:
95:eb:c4:f2:e6:0d:5e:a5:e4:f9:01:62:31:9c:91:
6d:21:4c:32:6d:a8:1b:5b:81:bf:4c:b5:10:aa:e1:
79:80:47:d8:f2:b6:4c:c8:6a:33:c5:e5:b7:a7:22:
25:66:f5:88:96:51:55:2c:ea:77:c0:85:b2:07:ab:
90:09:ce:94:9d:66:de:71:db:59:a3:18:35:15:7b:
66:67:20:58:1b:47:5d:42:c0:30:45:22:df:9d:9b:
87:25:7a:27:13:3f:23:c6:df:6d:f9:b6:46:64:bc:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:4C:4A:08:68:0C:21:5F:58:D2:C1:0F:7D:B4:AC:A4:0A:ED:B8
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:e0:da:2b:b0:07:90:5f:52:f2:df:85:f2:4c:4a:de:d0:
c0:bf:82:96:36:ea:fe:20:59:39:61:09:c2:53:25:f2:93:26:
d7:c7:07:80:dc:60:66:1d:2e:7c:59:be:72:95:e6:e6:08:c3:
31:65:0b:63:2d:2a:72:76:f2:d1:ce:83:dc:93:14:54:9c:45:
19:84:81:45:17:49:d8:c9:ae:e0:63:d4:02:df:e3:ac:3c:11:
aa:3b:d5:6a:da:0b:de:fb:91:51:da:d0:fc:57:97:de:db:a1:
c4:1e:cc:d9:4c:2f:ef:d4:cd:5d:9e:6c:23:dc:e6:1d:cd:58:
b2:2f:e4:e3:3e:c8:41:22:62:7e:87:c0:cf:cb:4b:14:a9:13:
9d:79:94:38:9a:dc:0c:f2:f8:ab:0c:c5:74:55:4a:f0:17:22:
c0:3f:77:d9:8a:f0:50:f5:52:56:af:e9:db:42:2b:e2:17:2d:
39:ce:8e:bb:17:71:a8:2f:c8:70:9d:c5:bb:08:92:b0:4d:23:
9c:7c:6f:fe:e2:b7:2e:9b:88:29:1e:7a:9c:96:59:7a:3c:9b:
4a:6f:05:e1:73:31:5c:ed:77:1b:72:a4:3c:c6:70:da:f4:cb:
85:ae:a5:2a:86:73:98:b8:7d:74:e4:fa:64:92:27:5e:ce:2c:
be:56:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:24 2025 by rpki-client