Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c971a3-2e3c-47c7-ba73-6ed99ffec0e1/1/jiu7gA3HCU5aRxSDFMYCuV-L6u8.mft
File: jiu7gA3HCU5aRxSDFMYCuV-L6u8.mft (raw, json)
Hash identifier: kD2xv1O3JqC+fhcCHvCn0z1aeESJ0KzneBOcSwlR6ro=
Subject key identifier: DC:AC:BF:C4:39:2B:53:13:5E:A6:2F:15:F4:A9:0A:7C:11:FA:37:EE
Authority key identifier: 8E:2B:BB:80:0D:C7:09:4E:5A:47:14:83:14:C6:02:B9:5F:8B:EA:EF
Certificate issuer: /CN=8e2bbb800dc7094e5a47148314c602b95f8beaef
Certificate serial: 0194BBCE4EA2BB186C0B34D8700AF3E27990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jiu7gA3HCU5aRxSDFMYCuV-L6u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c971a3-2e3c-47c7-ba73-6ed99ffec0e1/1/jiu7gA3HCU5aRxSDFMYCuV-L6u8.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: jiu7gA3HCU5aRxSDFMYCuV-L6u8.crl (hash: JVXKzQgJr8todpCKp1x1BtsyD7+sauVK2rtFCVvXu1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:a2:bb:18:6c:0b:34:d8:70:0a:f3:e2:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2bbb800dc7094e5a47148314c602b95f8beaef
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=dcacbfc4392b53135ea62f15f4a90a7c11fa37ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:19:e7:69:69:1b:51:6c:d2:ac:0d:3c:d4:
25:7c:22:e1:81:f6:6a:93:5a:bd:db:82:c8:84:60:
ff:09:dd:9a:23:06:4e:ca:e9:82:98:a2:aa:2f:97:
85:ed:15:54:e1:46:fc:29:6b:4e:80:87:6b:0f:b5:
a8:7d:74:ae:6f:0d:fc:2c:94:66:d0:40:39:3a:ea:
ae:a7:61:0a:3c:2b:30:17:af:60:29:91:57:e7:24:
8d:d9:81:f9:0e:93:1c:bf:af:2b:ac:fd:f5:33:4b:
db:82:d8:0c:6b:83:82:14:76:62:78:ee:45:3f:8f:
16:a6:56:9c:59:92:bd:1c:99:c6:e7:c2:1f:24:45:
56:67:b3:29:9d:27:2d:02:1f:88:94:63:54:83:7d:
3b:9b:22:72:27:2c:f3:ee:5f:fe:c9:83:8f:10:74:
5e:a5:06:32:d6:bb:a8:43:ee:59:8f:d0:c2:86:e6:
4e:70:15:70:8c:0b:ea:e3:3f:33:2c:65:33:de:83:
be:8b:5f:c7:4c:32:8c:df:97:19:90:ef:88:91:b0:
9b:28:89:c1:07:63:ed:55:4e:78:ce:e0:7b:2f:fb:
52:9d:04:51:e5:6f:14:7a:65:87:e5:ef:50:1e:66:
09:a0:2b:b5:e7:25:90:d0:86:de:f7:41:fa:38:9f:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:BF:C4:39:2B:53:13:5E:A6:2F:15:F4:A9:0A:7C:11:FA:37:EE
X509v3 Authority Key Identifier:
keyid:8E:2B:BB:80:0D:C7:09:4E:5A:47:14:83:14:C6:02:B9:5F:8B:EA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jiu7gA3HCU5aRxSDFMYCuV-L6u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c971a3-2e3c-47c7-ba73-6ed99ffec0e1/1/jiu7gA3HCU5aRxSDFMYCuV-L6u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c971a3-2e3c-47c7-ba73-6ed99ffec0e1/1/jiu7gA3HCU5aRxSDFMYCuV-L6u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:52:d4:1c:4b:92:2e:62:e5:30:8e:47:eb:4c:1d:c3:52:b8:
d7:eb:df:a9:67:4c:01:ce:5c:a9:d9:90:38:1a:51:8b:f6:04:
31:49:0c:c3:cd:f1:f8:28:2b:ee:0d:a8:e6:51:22:29:09:ec:
3b:a3:95:09:04:b4:c1:ed:ab:05:8e:7e:43:20:10:9b:a5:fb:
b7:12:07:53:71:07:86:71:2e:4e:8c:0c:02:00:97:8c:17:1b:
f2:63:6e:aa:af:5f:24:10:7a:66:7b:a4:05:08:43:19:1d:8f:
e1:6e:f4:22:98:5c:f1:59:26:1e:80:58:ad:fa:75:6a:64:90:
65:90:60:a8:c8:b7:f5:b6:fc:c5:ed:a6:fe:43:dd:87:45:3a:
79:c7:9a:d3:97:01:29:1d:e6:f5:21:42:9a:a6:ca:98:c8:a1:
39:08:29:70:fd:fe:64:5e:22:40:d9:b8:e3:9b:24:52:6c:b8:
47:32:ef:73:46:6b:01:8b:54:e1:9f:af:a0:72:9d:6b:82:5d:
54:d6:ab:5a:6b:04:be:43:ba:ac:bf:e0:87:e5:81:ca:17:41:
60:e8:dd:00:b1:1a:04:ae:a2:b6:82:1c:f2:03:dd:18:7a:ff:
59:49:89:bc:78:64:b4:c0:a2:c5:dc:68:d4:e1:93:88:83:20:
ed:15:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client