Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
File: JAy7mUeWHigo2EdLysoem5FVZWA.mft (raw, json)
Hash identifier: Y4xCsTHoDaHbdDUxDVfYv2oaYodPDMvcqY7T9/awD+A=
Subject key identifier: B4:91:4F:C0:AC:73:28:AC:7A:CD:53:A7:FF:13:86:43:A9:83:67:19
Authority key identifier: 24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
Certificate issuer: /CN=240cbb9947961e2828d8474bcaca1e9b91556560
Certificate serial: 0194BD178ED6111EE06744EBAF78AB6F9B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: JAy7mUeWHigo2EdLysoem5FVZWA.crl (hash: K8j2tq3qiH9sTC9s9AO3gHG2XJfuvvZXCH1qBqbcZlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:d6:11:1e:e0:67:44:eb:af:78:ab:6f:9b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240cbb9947961e2828d8474bcaca1e9b91556560
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=b4914fc0ac7328ac7acd53a7ff138643a9836719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:a4:6f:f3:88:37:99:4f:90:80:28:97:ff:
2c:48:f5:76:bb:e8:25:46:cc:3b:fa:25:f2:c0:14:
94:08:b6:3a:c4:1b:b2:19:c5:8d:65:91:29:1b:92:
3b:16:84:9c:03:df:af:f6:1d:e6:6e:d5:5f:f5:02:
75:49:3e:80:ba:90:5f:85:d9:52:10:a8:ae:cf:00:
d2:ac:d5:0e:d2:e2:af:fe:3e:e3:81:cd:e8:1c:af:
50:14:9b:23:fe:f8:fb:cc:60:c2:76:fe:2f:8d:1b:
55:1e:bf:db:1b:f3:08:cd:d1:1c:c3:16:19:21:e2:
14:59:9f:02:ea:7b:57:2c:3f:74:75:0f:1a:2c:db:
7e:af:c8:ac:bf:fd:e3:f4:cd:c8:cb:ee:e3:1e:f2:
8b:63:f6:4e:3d:61:cd:7a:dd:d6:94:26:8f:1f:0f:
b8:28:ef:97:96:60:56:c5:0e:f9:56:d6:aa:63:6d:
ed:87:a9:66:fb:96:10:6d:fb:33:37:36:2b:84:36:
88:96:05:69:77:06:ca:25:91:f4:f0:0a:05:ef:9c:
67:2c:7f:e9:39:e9:04:6e:ed:7b:07:29:09:1d:31:
26:e2:a8:fb:67:55:52:06:89:ed:3d:23:48:c1:4e:
a9:8e:97:95:47:59:d3:b4:eb:19:94:d8:2c:2c:b6:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:4F:C0:AC:73:28:AC:7A:CD:53:A7:FF:13:86:43:A9:83:67:19
X509v3 Authority Key Identifier:
keyid:24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b2:02:0f:5b:7d:70:09:0a:56:ec:29:e6:34:c2:18:fa:8c:
b1:ef:c0:93:66:a4:58:2b:3c:3a:c6:79:b8:21:57:bd:b0:09:
a0:e4:ce:a5:ec:43:51:80:d5:2a:bd:f5:d0:ea:49:a8:c6:af:
31:87:fe:50:9c:30:15:3b:87:39:cb:93:54:c5:a2:52:f2:ea:
15:98:88:ca:83:7d:8f:3c:31:91:e7:ca:67:97:3e:af:13:65:
f6:fe:f2:65:e6:06:49:d5:92:54:af:0e:e3:6a:5a:8d:a2:23:
5f:92:27:70:f6:9b:7d:c6:91:9b:2c:dd:98:17:72:a4:41:ec:
e7:e4:43:fd:60:e1:4b:29:10:22:28:c0:10:0f:51:ea:1c:57:
7c:86:1c:e5:4d:8f:1d:34:96:56:76:49:8e:28:e1:2e:11:ab:
1b:e0:a1:22:5d:12:c1:87:7c:64:1f:d1:c6:6d:af:d4:5e:df:
3c:4c:01:43:13:ff:4d:00:a9:0f:cb:42:14:c4:8c:2d:59:6f:
62:97:40:08:e0:e8:33:ee:f6:4f:13:d5:da:50:df:4b:a4:65:
5e:ef:1e:97:b9:a2:5b:6f:11:30:0b:31:e5:88:56:2f:a6:46:
1b:68:58:ed:25:0e:9f:7a:82:31:ec:c0:57:e8:49:84:88:2f:
0d:0c:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:46 2025 by rpki-client