Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: y05IoGIuU+uc0MroDd8PVZrxRyP64fuCW6HMReNhOBI=
Subject key identifier: BC:24:B3:EA:56:C6:10:5B:EE:79:4D:27:39:8B:C7:5B:8E:2F:92:92
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0194BBCDBC699B9810EC7C55E2AFC4B75785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0D23
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: 6oAYgluWo02bnxS3+CUg+yWM5BD/IKxDTIp1Vle/uP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bc:69:9b:98:10:ec:7c:55:e2:af:c4:b7:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=bc24b3ea56c6105bee794d27398bc75b8e2f9292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:f2:88:81:0c:c9:b9:d3:41:6d:06:f5:69:
91:48:13:63:78:46:57:cc:c1:dd:93:c8:bf:ec:fc:
83:79:70:f7:61:02:71:ae:45:fb:f6:9a:12:21:66:
e2:27:4e:0d:0e:8f:bf:6f:06:dc:f3:e5:7b:bf:fb:
bb:b3:ca:86:8b:cd:65:38:36:32:3d:e0:6c:3b:f3:
40:c3:89:eb:ec:a9:ae:a8:e8:be:19:d4:a6:2e:3f:
57:06:ee:d8:18:8d:bc:ef:f5:cd:30:62:66:f4:50:
7b:45:86:80:de:a9:97:2c:9e:e2:16:ad:4b:f6:f0:
0b:96:21:31:2f:12:07:ae:2a:e3:e3:25:32:f8:50:
54:a1:12:e7:4a:c3:ee:c2:e2:05:66:3f:ef:78:5a:
06:5e:be:dd:5f:cb:37:60:ec:f0:58:e3:43:f4:c3:
48:78:d5:78:1d:19:4d:c1:ad:60:5a:7c:f6:47:55:
9d:5c:81:f2:30:7b:8d:a1:ae:fa:55:1c:f3:41:c5:
97:ed:fa:4e:72:00:81:e2:5f:f2:a5:3f:d6:f4:49:
d0:ed:7d:2d:18:35:c7:4f:88:b0:56:9e:06:2b:62:
f4:c5:36:1f:6c:3b:82:5b:59:5b:e0:60:24:62:a3:
76:96:3d:8e:10:ef:88:24:24:2b:4b:3b:ea:10:dd:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:B3:EA:56:C6:10:5B:EE:79:4D:27:39:8B:C7:5B:8E:2F:92:92
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:0d:ab:b1:97:8a:5f:76:e5:bb:d8:16:1d:6f:f4:e4:20:
21:5e:53:55:3c:e4:13:9f:90:dc:57:71:27:d2:b4:4d:bf:3c:
32:f8:d3:b5:2e:7f:b1:af:86:6b:98:d2:d8:29:d6:bb:4f:23:
2c:e5:3b:b3:50:94:c9:8b:10:b0:16:a1:c8:19:4c:25:c5:d2:
62:9f:6a:b3:9a:e9:e8:e8:fa:23:30:15:09:c6:ba:63:28:3c:
b5:66:74:31:35:30:a2:35:c9:42:06:57:99:bd:28:a0:f7:b0:
c4:8e:53:20:a2:39:18:5e:6b:8f:ce:a7:2e:9b:4a:6c:98:c0:
3c:b9:f2:b1:64:dc:39:19:a3:da:80:3b:8d:c8:07:5b:84:94:
4d:6a:7f:76:83:da:de:86:7c:84:27:8b:28:d7:90:20:c3:35:
6a:93:81:85:fd:e2:85:ca:45:a3:53:8a:3b:7f:8b:5a:f4:71:
09:f8:fc:10:89:f1:50:61:db:0e:28:9c:e1:08:75:94:97:ba:
4c:59:f3:bc:d8:af:82:0f:6a:5d:27:d8:63:40:5f:71:8b:3b:
7f:43:d1:8f:ac:93:c9:9e:76:19:b9:46:cc:af:79:54:a3:08:
76:8e:d3:05:85:ff:79:fa:9e:4e:5d:68:88:2e:56:b1:87:df:
73:d4:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:07 2025 by rpki-client