Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
File: jHFLbLK61OdjmoqicQKPWqG8asI.mft (raw, json)
Hash identifier: EO7jU7yIRfKvjnaJ9sHnfC/o+Jam6y9/eE7Jx3PLDAc=
Subject key identifier: 8C:27:45:33:A1:27:17:95:FB:01:F7:BD:A1:D1:A2:45:44:4A:AB:3E
Authority key identifier: 8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Certificate issuer: /CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Certificate serial: 0194BD1758EA218B463F595C1190E92710EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
Manifest number: 03DA
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: jHFLbLK61OdjmoqicQKPWqG8asI.crl (hash: xTSpS5dWToAZU/BImVdtRm+rKZCf1JtEdqih771jU+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:ea:21:8b:46:3f:59:5c:11:90:e9:27:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=8c274533a1271795fb01f7bda1d1a245444aab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:ed:da:58:e2:dd:9d:9e:ee:12:ce:99:9e:
cb:bc:08:04:d9:ec:e7:aa:f2:3d:5b:00:5c:33:e5:
0e:3a:d3:2d:b8:91:51:b3:96:0f:18:50:6c:9c:38:
c1:02:d0:2c:d7:0b:7e:0b:0f:17:f4:5f:cc:bc:ad:
44:aa:a3:04:0f:3a:d7:6e:f4:5c:a3:e6:24:9e:9b:
9b:30:67:c4:3f:88:fa:1c:7d:ca:86:e8:89:f1:c4:
87:53:94:08:1a:d4:7d:39:d7:b9:19:71:27:0c:84:
d0:9c:22:8e:46:b8:8d:46:2d:9a:0d:13:c6:40:cc:
b4:f4:04:0c:6b:2a:67:66:15:21:a5:96:76:c5:41:
38:c7:0d:ca:e6:eb:64:c3:ee:35:e0:f1:7c:64:6e:
f4:22:49:aa:db:e6:f9:74:81:f2:25:ba:85:c4:dd:
e1:24:8d:ab:39:82:fa:74:15:36:98:ae:d1:0a:0c:
ce:08:c8:99:a6:25:af:c5:3c:39:66:e6:3f:18:e5:
c5:55:b1:ad:8b:e6:6b:b3:9e:91:9e:ef:eb:78:dc:
1c:bc:2c:37:d1:a8:87:ba:80:e9:f5:4e:7e:d1:40:
f3:76:81:6a:c8:b3:a3:64:76:7e:06:da:31:e8:c6:
13:64:2b:45:a7:a8:27:35:0f:3c:04:57:9b:5a:af:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:45:33:A1:27:17:95:FB:01:F7:BD:A1:D1:A2:45:44:4A:AB:3E
X509v3 Authority Key Identifier:
keyid:8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:91:ba:50:97:61:b6:75:8e:f3:11:d7:cc:ec:f2:f9:7f:ab:
66:6b:ab:0a:c2:5c:3b:bf:34:d9:1a:42:74:29:5a:19:e5:a9:
48:a1:2b:bd:95:ee:40:26:f7:33:6f:63:d4:5b:c3:24:b5:b4:
39:cf:8f:a6:63:ef:4c:d6:2a:00:fe:1c:3e:48:e5:31:53:66:
95:b2:e6:a8:12:eb:40:28:09:82:ef:cb:24:5e:ee:a5:58:73:
74:59:18:1e:52:a9:8f:6a:33:10:e0:9b:25:0b:d1:4d:30:02:
c0:6c:f1:ab:e2:fd:a1:91:1c:bd:e5:14:8e:b0:72:5f:6d:33:
ec:c0:d6:9f:34:d1:8b:9c:0a:82:df:62:48:b8:23:f7:28:7e:
9e:00:17:56:90:92:d7:46:81:11:80:88:b9:e7:3b:f5:01:07:
c5:b2:e1:a9:2b:9e:12:25:7a:30:2f:8f:22:10:6e:7e:59:1e:
96:de:90:e2:35:f9:18:31:39:ac:c4:2c:57:6f:65:03:47:49:
32:f7:2a:49:31:a5:3f:49:6f:b2:3d:90:38:dc:ec:0b:9c:e4:
b2:22:62:2c:4f:51:ae:2b:8e:d7:89:4c:20:8f:8c:e1:99:77:
19:2c:52:cb:8a:22:58:8d:27:f9:e5:50:cd:74:ed:47:1e:f5:
7e:9e:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:54 2025 by rpki-client