Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: xrskQabkbHZ2xnsxu9/BSx4RNHMrgFfDa1UceOmJwNc=
Subject key identifier: 09:10:91:DA:2F:AF:40:8F:88:DF:8A:7A:44:3B:57:C7:BA:25:78:7C
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 0194BBCDE93A1E5B8A5EAF9F0AD7FC6FACE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0549
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: 9VDmKC8O7wvxYslGo5tuAv0L/83LJTJY3xVbnvxXx0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:3a:1e:5b:8a:5e:af:9f:0a:d7:fc:6f:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=091091da2faf408f88df8a7a443b57c7ba25787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:98:b8:cb:d4:02:79:b4:a1:c9:a1:27:60:
50:69:7e:5e:4e:39:54:fc:85:88:72:40:5a:f4:5b:
f6:99:15:f2:43:7c:16:ad:b2:14:00:e4:3c:53:c9:
e2:46:e2:94:9e:f3:9e:c3:99:31:98:b2:6a:64:f6:
29:2a:89:86:ce:16:ce:b2:a8:f8:25:f8:c8:2c:6e:
89:03:89:ba:13:f7:48:23:9e:d6:ab:8c:39:9a:ee:
08:51:f7:5c:f8:bc:f0:08:0e:89:e1:a1:1f:32:fb:
c1:f1:b6:d2:8d:47:95:12:7b:be:95:46:e5:35:6e:
69:8f:30:f1:28:20:14:18:54:dc:c8:5e:9e:07:d6:
f5:d3:f5:1f:95:dc:bf:cb:84:3d:99:41:b0:63:73:
f8:14:9a:c1:39:97:86:a7:0b:01:20:f2:5b:b2:c0:
02:48:07:4b:3c:86:d7:af:bd:55:0d:75:64:b6:e5:
69:de:d7:10:63:30:6b:7f:ce:c7:da:6e:9f:13:f2:
53:3b:b1:6b:3a:a9:f2:68:2f:2c:d8:8f:50:35:7d:
80:cc:8c:b7:f3:ba:2a:85:ac:da:10:e6:85:ee:fc:
06:80:fe:f6:d2:79:89:03:05:65:a1:8f:4f:f0:53:
07:84:0c:74:37:08:3f:f4:6e:9c:14:cb:34:21:15:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:91:DA:2F:AF:40:8F:88:DF:8A:7A:44:3B:57:C7:BA:25:78:7C
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:73:ec:e5:f2:a9:3a:d7:aa:8f:57:6e:1d:31:e8:8b:f3:b9:
87:fb:f3:5c:a0:b0:05:25:b3:39:92:c6:c2:7d:58:6d:e6:d0:
62:1d:67:b5:9b:d8:8c:a6:a1:4a:b0:38:7f:90:08:47:ed:08:
cf:72:9f:df:55:14:46:d7:af:49:46:5a:67:99:01:2b:6b:91:
dd:3b:8f:fb:4c:ef:e0:12:3b:c7:eb:8f:ef:bd:8d:6f:b0:b7:
5b:06:78:bd:a1:6b:c2:18:6e:45:af:a3:98:51:e5:53:e1:93:
83:9e:82:48:9a:22:6a:87:1d:dd:ad:32:fa:2b:0c:a8:e9:9d:
a7:45:f2:d4:d1:23:9c:bb:34:9e:35:d1:59:5a:5d:22:cf:e8:
85:26:80:35:7d:44:fa:48:de:d7:34:9d:1c:d3:c6:79:de:3b:
df:11:37:10:36:52:ec:d8:51:20:8a:bc:a3:b8:d2:77:17:b1:
63:a7:b9:dc:ce:2d:50:e5:b5:a4:5e:d4:d0:bb:46:76:eb:ac:
a6:7e:07:42:74:fd:8e:7f:80:3b:48:46:36:35:cb:14:77:34:
94:87:10:2b:5d:c6:57:2a:b0:b3:f8:bd:12:66:8c:a3:f1:75:
c3:2d:f8:13:fe:d1:1f:87:a1:fd:63:f7:52:d6:21:51:84:7a:
04:ff:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client