Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: ZmCTWbQTtWowqAX4Etn4fIz5jo66s+sou7l4yJsbdjo=
Subject key identifier: 72:20:DA:4D:BA:85:19:07:DF:FD:9B:39:3C:C9:53:F4:A2:75:40:DE
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 0194BBCE2EFDCADD45B43ADE199CB8433440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 12DC
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: +OrwXgYoFZCcvr/a+gU1SXUk3yTBA/hHGBiCxAU2LjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:fd:ca:dd:45:b4:3a:de:19:9c:b8:43:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=7220da4dba851907dffd9b393cc953f4a27540de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:c0:c9:b7:3e:a2:1e:dc:9b:7b:8f:bc:fe:
4a:75:a0:cb:eb:29:d0:d4:14:23:7f:5a:a1:01:69:
e8:6b:fe:54:40:f8:69:68:cc:a1:84:63:a5:bb:ae:
d2:aa:57:7c:2f:56:86:bd:e2:cb:8a:6c:f0:5e:93:
fb:3f:72:2b:13:7d:e5:19:b7:a1:1c:42:9c:07:6c:
dd:ff:84:2c:3a:db:66:32:64:c4:19:d4:31:8d:cf:
4b:00:57:95:db:2d:96:c7:f0:df:65:ec:2c:9b:85:
89:06:b9:e1:70:65:9d:e4:db:81:ac:03:fa:8a:3d:
87:86:3b:08:6e:d0:b3:ce:25:a6:5f:89:2d:d8:31:
78:c8:94:4f:96:8c:18:22:2b:e0:ca:15:61:7c:39:
96:fd:f7:07:72:42:7a:5a:91:ac:99:f2:df:2d:53:
21:67:56:52:c4:55:b7:fe:14:7c:a0:ea:13:67:ad:
b6:9a:f0:fe:14:53:a6:99:0f:e8:a3:8e:9e:dd:d3:
00:3f:ab:13:5b:59:71:0e:b0:1e:e1:cc:0b:40:e1:
d9:61:2a:17:09:eb:de:60:c0:53:9a:66:f8:0b:90:
d8:8c:b7:d0:33:e8:e4:7b:2d:2f:c8:b6:88:93:61:
38:89:72:de:45:8e:6c:d7:6f:3d:f8:0d:f1:ec:38:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:DA:4D:BA:85:19:07:DF:FD:9B:39:3C:C9:53:F4:A2:75:40:DE
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a9:9b:e0:8b:85:da:5e:20:5a:dc:13:44:6b:ba:41:29:70:
9c:6d:8a:8e:2b:5b:4c:ef:12:ba:d7:ad:b1:5d:d4:6a:4a:ee:
0c:ac:ae:ad:35:8a:8a:29:35:a3:3c:24:e6:e1:d0:a7:41:db:
87:fa:8a:e1:89:2a:05:1e:4b:66:c5:7e:61:71:6d:c1:c4:d4:
65:73:cb:e9:7c:24:8d:76:3d:9d:e5:6f:c0:d0:94:05:87:f8:
ad:d7:4e:1b:46:e8:c5:9e:43:c4:e0:12:68:6a:f8:e2:87:4e:
ce:67:63:cf:2e:cb:a0:42:cc:68:fe:13:b0:a0:a1:54:07:7c:
c7:df:db:22:90:4d:27:85:f4:7d:bc:89:d4:5d:4d:46:dd:ff:
78:2e:38:26:5b:ed:7d:78:68:b1:49:46:01:94:9d:a0:52:0a:
d6:f8:2b:0e:56:6f:d1:19:c1:48:07:b6:47:ec:72:ca:c2:c0:
bb:d2:d3:49:84:4a:3b:3c:8b:c8:24:f4:31:31:87:15:94:82:
a4:bd:3f:98:e9:f7:82:5d:c2:49:3f:73:e3:47:78:61:a9:cc:
32:c0:b7:6e:2b:89:80:f5:b8:9f:a4:fe:9a:2b:74:88:35:0e:
d9:3b:78:90:80:e5:90:24:bf:47:3c:76:00:8b:fd:84:9b:6c:
51:7e:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:12 2025 by rpki-client