Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier: jdt3QqVzc6xNNSgnuZ//gQIBVnqDt9HVlWOnhLUYxtg=
Subject key identifier: 70:AC:C8:3B:F3:25:61:B4:E8:91:79:B9:E8:85:C0:00:E1:3D:B5:96
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial: 0194BBCED4B9E949CBD0EAA9F58D075F8F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: 8vBcMEIX3ZPSfJBWqgeIlPrKD+X3HdouNWuzp39QTAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:b9:e9:49:cb:d0:ea:a9:f5:8d:07:5f:8f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=70acc83bf32561b4e89179b9e885c000e13db596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:3e:fc:c5:fc:c5:5e:65:bd:e5:88:80:4b:
fa:7c:7d:6f:37:6d:be:f5:a3:9d:02:a6:f3:a8:35:
3d:db:4c:55:3e:b2:c2:f1:27:d9:92:d3:85:94:28:
84:39:fe:fe:c6:22:b0:f7:22:f0:02:60:4c:bf:fe:
d1:a7:c7:4b:1b:9e:1b:0f:66:97:bc:c6:98:e6:7f:
fe:88:13:57:6f:54:e1:c5:c2:f4:8c:b7:b3:a7:e9:
52:42:69:94:f7:25:57:92:87:a9:5b:1e:f0:50:c8:
27:f4:86:77:80:15:79:4e:2f:06:a0:ee:02:ad:8c:
f7:55:cc:ac:1f:38:50:37:f6:01:2e:bc:bf:f4:65:
05:b4:8c:95:87:27:87:4b:b4:10:8a:a8:6a:e4:c3:
39:df:ec:8d:0a:f4:53:ee:b6:ae:86:fa:1d:e5:2f:
14:09:ec:e8:32:e0:b6:4b:45:3c:29:20:ae:c6:24:
ca:c3:e7:ee:cf:68:e0:cd:8c:ff:3e:f5:03:2d:17:
28:54:97:ed:56:83:7a:d8:0d:f2:d4:e6:ec:eb:53:
7d:42:b5:82:7c:59:63:a3:8f:39:61:e4:b5:62:cf:
f4:53:e3:a6:b9:17:9d:0a:5a:99:82:fa:1e:e4:01:
0e:22:d0:7c:32:b6:39:ef:a7:15:6d:25:88:01:09:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:C8:3B:F3:25:61:B4:E8:91:79:B9:E8:85:C0:00:E1:3D:B5:96
X509v3 Authority Key Identifier:
keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:06:79:0d:ad:fb:8d:58:29:47:39:ca:b3:f4:2c:e8:84:
bb:63:82:80:bb:64:ca:f1:a0:4d:60:a0:db:3a:08:62:21:78:
0a:7c:cd:e9:bb:94:dd:a2:98:ab:4c:42:38:72:73:33:2d:9d:
b2:45:1e:c7:12:61:c0:5c:51:a5:b8:12:45:ce:13:13:70:04:
75:57:6a:3d:68:b7:f6:b6:53:3a:4e:76:5f:ed:73:73:d7:4f:
67:c3:2f:41:b6:90:0f:7d:eb:0e:ab:92:de:3f:9f:2b:2d:ef:
74:5d:98:65:a1:2a:a9:1b:e7:fa:0a:43:c5:c8:e5:0a:a2:26:
a2:65:f9:ed:c4:f3:f3:f9:b4:d9:87:c0:03:80:26:9a:59:2d:
ad:78:9f:66:a7:0d:f5:4e:40:d3:30:25:1e:21:48:55:ab:b2:
52:d3:7c:3b:05:64:0d:70:06:6f:89:9d:11:c1:e2:9d:d1:d9:
27:27:6f:4c:d7:aa:11:b7:62:d0:b5:0b:9c:20:40:00:7c:db:
96:ca:b3:b1:b7:eb:d6:59:04:b3:59:da:46:78:bf:f9:7b:9d:
c3:77:22:e3:a4:fc:2a:df:e8:69:13:83:ac:26:4b:02:f6:d2:
b1:c2:ee:3a:88:b4:1f:3c:a2:72:95:fc:7e:67:14:3f:ed:c3:
32:a3:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:23 2025 by rpki-client