Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: 8MH0eWUbNcf9Kb9W8Gd6LIHBQYB3HKLZcwEvUKf+ZJY=
Subject key identifier: 7B:99:09:EC:D5:79:45:73:19:34:72:5B:5A:A4:CB:48:1B:C3:C7:57
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 0194BC72FAD39E77DAE5276A2528021CBCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: rpbyuXMq+4gDg9EhQBOUkTcxkBopnmD/AwaYKab1pLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:d3:9e:77:da:e5:27:6a:25:28:02:1c:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=7b9909ecd57945731934725b5aa4cb481bc3c757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:85:a8:53:6c:84:1d:80:0b:40:86:dd:e7:
71:64:8b:ed:65:1c:2e:1f:e4:36:24:32:f5:0c:8c:
49:31:17:ac:39:36:88:30:5d:eb:58:f7:9d:c3:69:
9c:3a:07:47:15:ae:66:fc:82:9b:cb:c1:6d:ec:b1:
24:78:06:45:1d:fe:1b:a4:b9:50:aa:df:10:84:00:
69:a0:3f:44:69:07:4a:73:27:ba:94:4f:f2:13:63:
8a:9a:6e:0e:7f:e0:93:bc:cc:8f:3c:07:e3:ca:f6:
48:b9:92:08:05:d4:cc:98:7a:98:30:9c:7e:bb:b5:
2b:3d:6a:29:bf:5e:62:76:a7:ec:85:9b:7b:35:4c:
2e:db:33:63:c6:db:3e:67:5c:b6:6d:8c:85:e7:5c:
5e:e9:fb:0e:68:72:c5:2a:6a:12:16:d7:42:c3:ec:
ef:0a:a6:53:77:fb:95:b6:a4:b3:e2:e5:4e:e2:cf:
91:d2:94:e4:0a:cf:cd:a5:d1:a1:7d:f7:db:c9:7b:
90:42:f5:ac:27:b6:bc:46:80:9e:82:e4:ae:6c:86:
f7:42:84:4f:8e:71:05:7b:3e:a4:e8:3b:ef:01:d8:
af:1e:eb:c9:53:0f:75:73:2f:75:db:a6:ec:db:be:
ad:ac:84:88:34:ce:99:da:8c:3d:e8:64:07:5e:e3:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:09:EC:D5:79:45:73:19:34:72:5B:5A:A4:CB:48:1B:C3:C7:57
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:fd:4b:b9:48:3b:56:09:8f:80:6f:d1:de:94:a6:c0:d3:
6f:33:d4:96:60:ba:45:51:b4:bb:b6:44:f3:bf:7e:c4:44:8b:
79:a1:72:50:6b:f8:18:d7:0c:99:38:ed:e9:96:84:95:5f:e8:
de:37:da:39:64:b1:c7:a6:9a:64:24:c9:e1:5e:7b:67:31:d6:
97:22:ad:81:83:0b:59:30:00:e9:5a:bb:00:af:73:f8:5c:1d:
c1:fd:4e:69:f5:06:91:44:cc:e3:7c:ff:92:99:cc:95:58:cb:
05:00:f6:cf:79:10:67:22:1f:df:ff:53:53:93:fb:fa:52:57:
c4:71:6d:80:71:8a:12:85:79:01:5c:56:ad:6a:41:2c:6e:6f:
12:1c:a9:04:13:4a:50:45:31:b4:77:66:12:9a:86:9e:e7:7d:
ca:d0:02:78:0e:1a:f2:94:45:45:ee:bf:88:75:f6:94:90:c7:
bd:25:cc:d9:1d:49:c1:ad:a7:d6:7f:98:3f:d0:43:0f:e1:e5:
56:df:5d:98:a5:a3:ed:23:1b:05:c2:7d:df:d9:58:e2:c7:07:
46:ff:df:51:54:26:39:59:7f:e1:60:e8:dd:2e:ca:f8:0e:b9:
c1:eb:10:c1:17:04:3f:11:f9:85:de:5a:f8:c6:9f:c9:9c:19:
58:e6:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:31 2025 by rpki-client