Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: bmX/ATuIgScs7ZfFC8CHYhdvrYv3DbC0qDa8HOjRyrY=
Subject key identifier: C6:92:AA:ED:94:0E:16:5B:EC:41:21:30:ED:20:D5:34:75:7C:BF:A5
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 0194BBCEEDAC41E7E51BA7B0C857DAC5828A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 042E
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: P5Qe7UlFuI6lfkeApllcIhvVV7WZBZmChRbDY/o8qtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:ac:41:e7:e5:1b:a7:b0:c8:57:da:c5:82:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=c692aaed940e165bec412130ed20d534757cbfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:1a:3c:47:f0:f3:88:2a:49:40:ce:ea:8c:
46:d5:5e:ce:0a:e4:51:03:7d:8a:87:ca:12:9e:8e:
89:f1:83:dc:27:d1:56:57:d1:e2:4d:0a:6f:88:c9:
4e:2c:d6:43:c3:4e:f7:30:f8:3f:b8:bd:09:be:60:
28:16:aa:03:e8:44:ab:ea:9b:14:70:44:3e:83:b9:
65:94:a4:23:8e:6f:c7:33:21:cd:99:14:cb:b4:db:
b8:ab:0a:ad:bf:12:22:03:a9:0c:73:9a:94:87:38:
0d:95:97:af:25:97:68:bf:40:aa:b7:8f:43:56:55:
4c:eb:55:ba:d6:64:eb:68:2a:ac:aa:d3:7f:59:67:
7e:10:5c:ab:af:57:11:68:ad:e8:a4:f2:fc:81:be:
cc:b2:85:ef:44:a1:e3:2d:f8:ad:ca:3e:e7:04:d8:
6c:cc:c8:17:ee:8c:09:e6:31:b8:c0:97:d5:fe:1d:
47:d9:63:85:51:38:e0:59:a3:2a:b9:b1:1b:8b:e2:
3d:0d:74:3b:bb:02:17:11:44:6a:bf:18:c9:07:f7:
f9:ac:cc:51:a5:e3:d4:e3:30:47:f4:51:6c:08:cf:
2f:44:d7:3b:4e:02:94:f7:c7:71:a7:b3:b8:39:8f:
0c:26:6a:5d:39:6d:2e:39:96:63:42:87:1d:0e:05:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:AA:ED:94:0E:16:5B:EC:41:21:30:ED:20:D5:34:75:7C:BF:A5
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bd:4d:86:f7:dc:c3:7b:2b:d6:49:8c:a7:28:bd:77:61:3d:
a9:b9:08:e9:1e:54:45:fc:d7:e2:08:1c:6a:85:b0:6c:49:3c:
90:94:20:5b:f4:7f:dd:b3:4d:a5:6f:14:93:11:1d:67:11:62:
19:ca:39:cb:b8:a1:b4:fb:22:80:21:d7:33:e6:14:88:f6:aa:
50:2d:95:6e:7a:78:ba:4d:61:c0:af:5a:69:af:f4:1d:ca:6b:
9f:d1:9c:2b:3a:77:44:72:96:8f:aa:0d:3f:6f:6a:f3:0c:ab:
72:e3:d3:df:93:88:e2:58:a1:7f:ca:58:d3:f7:5f:8f:af:a5:
ea:c7:10:ae:31:a9:ca:d5:0a:4d:92:fe:90:88:0d:8b:41:65:
55:b6:ab:a1:8b:a9:4d:75:c7:2f:4a:80:c0:ab:80:68:29:a0:
47:9c:8b:49:5e:af:29:71:4a:79:d4:4c:39:b1:0e:1f:6e:d5:
1d:09:12:34:39:12:6d:a8:a0:d3:c3:26:26:6b:3f:f1:b6:a9:
7a:a3:68:74:84:fd:f3:1d:09:23:fc:d9:a1:49:e1:02:ad:ab:
30:90:85:88:6b:9d:0f:52:ab:5d:79:2a:01:e1:83:0e:e8:d2:
1c:32:82:cd:ca:ae:a5:72:60:1e:2b:ba:dd:31:6f:06:71:52:
f6:97:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:39 2025 by rpki-client