Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: rO7IgkDmbhQxfCJ9XHX0dARZ910WTpDNMKR96auMt30=
Subject key identifier: 5D:DF:0A:1C:0D:AA:11:95:2D:7D:21:46:F6:F8:49:B6:29:62:7B:50
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 0194BC72F21FC30F09D24D78D4A2DDA6A7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: jXRxNTPfaokd0OgCNHr09L+qmxzFuVMIcLwUV56vHjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f2:1f:c3:0f:09:d2:4d:78:d4:a2:dd:a6:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=5ddf0a1c0daa11952d7d2146f6f849b629627b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:22:ca:7c:83:03:bd:d2:44:c5:5f:20:fe:
a7:fe:c7:5b:35:56:87:d2:aa:5a:76:f9:5e:51:de:
27:c7:28:2e:86:2c:33:3f:9d:59:ba:b7:0c:bb:54:
0c:49:e6:47:18:43:1e:e4:84:0d:68:15:d2:af:f4:
9c:91:f9:61:3c:44:8f:c5:74:58:3c:3c:e4:47:cd:
ce:30:66:dd:b1:ed:30:37:01:f1:dd:45:12:46:06:
ee:e7:4c:47:ea:02:72:fe:0e:5d:a3:38:b8:79:d9:
08:e7:2e:93:c5:07:fc:e2:93:67:2d:64:80:35:6c:
c8:3a:d2:0c:86:7a:13:9a:0b:4a:57:f9:e8:d9:73:
96:6e:bd:88:6e:32:bd:4f:08:bb:d0:ac:06:fb:1d:
1a:6f:04:ba:3b:fa:8f:e3:c2:90:a1:df:6a:7c:9f:
db:04:ca:87:c6:bc:c1:39:cd:25:48:6b:59:b0:9a:
33:62:de:dd:3b:0f:d9:b7:68:6a:9c:af:e2:f4:ff:
7a:56:5d:c3:60:0f:c4:5f:36:e0:25:32:be:2a:b2:
5d:a4:56:32:f1:7a:6e:46:d0:31:31:f1:db:60:29:
d2:57:fa:e2:ff:f5:e6:44:8d:ee:51:0a:28:cd:48:
9c:e9:90:50:bd:d1:22:54:b4:de:96:da:b6:11:cd:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:0A:1C:0D:AA:11:95:2D:7D:21:46:F6:F8:49:B6:29:62:7B:50
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:25:ad:cb:df:db:ab:46:51:4b:87:d3:6a:c9:5e:05:39:
5f:68:7e:05:07:1d:48:55:33:45:0d:06:17:e2:e7:76:e8:e5:
03:b4:fe:5e:6d:63:60:c1:ad:91:fe:26:f8:20:b2:b9:ec:0c:
aa:bd:1d:2d:b6:41:24:e9:0a:f6:6b:6c:9e:e5:82:67:28:e5:
56:64:07:cd:ed:99:37:a1:0b:0c:f9:27:55:0f:60:85:27:d4:
e3:8c:5a:39:6f:4e:b4:0a:6e:1a:df:d4:fc:b3:87:95:e3:ce:
2b:a1:1f:a5:aa:5f:34:88:49:55:74:23:e1:d6:63:86:19:74:
6f:aa:56:3f:e0:d6:9e:fb:8b:eb:20:29:9e:f5:17:d4:21:62:
5a:cb:eb:67:c4:25:96:cf:84:5a:f3:f5:05:4e:d8:7e:3c:63:
01:59:9d:f0:e5:37:96:ad:45:6d:02:5f:65:42:e2:4f:df:ec:
f8:8b:29:eb:45:2d:fe:21:6b:4a:de:ef:fb:49:ed:51:30:cc:
cc:78:44:e7:03:27:0a:24:90:73:d0:05:56:5a:3d:71:08:a8:
44:41:d7:4c:b6:e0:41:b4:a9:88:40:58:b6:5a:82:b3:b6:f4:
8f:c2:8c:52:a5:ce:1c:b2:8a:c7:da:1d:06:68:e2:09:b9:b1:
a8:89:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client