Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
File: j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft (raw, json)
Hash identifier: 0d/GER6F+2QHOL62Q0fpyDd+I5xEppcgxhuY+UXcA78=
Subject key identifier: B8:25:90:5D:40:CB:19:F2:60:07:D7:61:C7:21:33:18:D0:BC:10:9A
Authority key identifier: 8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
Certificate issuer: /CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Certificate serial: 0194BBCEEB26E9781C0AFBF17A6D2BEB956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl (hash: pcueQuomDVqxY07tWSNjAudRe2czfPchXevhPz3TFM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:26:e9:78:1c:0a:fb:f1:7a:6d:2b:eb:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=b825905d40cb19f26007d761c7213318d0bc109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:53:02:fc:fb:56:18:bd:6d:85:54:9b:ea:
1a:11:1d:26:0b:d2:c1:f1:48:bd:ad:49:90:20:ca:
46:7d:0d:15:bc:15:cf:7c:24:23:4b:9c:26:63:cd:
17:4b:0b:c5:61:f9:55:58:dd:66:6d:5f:2e:44:e2:
34:bb:1d:c5:b0:e4:e3:d4:a1:01:52:a0:63:44:a5:
3c:50:87:d5:6e:3f:b8:a5:4c:f0:9c:ba:fe:06:bb:
2d:e6:73:d0:90:c7:a1:d9:c7:63:ec:5a:f5:2e:c4:
66:0e:d8:fa:59:7d:e0:aa:81:99:38:b2:9b:28:19:
d7:0d:d1:5c:1d:54:74:f2:85:cd:96:17:37:fd:48:
3c:11:06:2c:aa:bb:ed:01:5d:31:63:a0:62:3d:41:
c7:7b:3d:47:5b:29:ed:d6:a0:54:80:25:8a:4c:ce:
b1:79:35:2f:ae:f9:15:a5:45:99:b0:a2:3c:67:82:
7e:59:10:d5:68:ea:ff:1b:2a:6c:0b:dc:eb:46:69:
9b:07:6c:53:56:23:bc:29:d3:c8:89:30:53:c3:16:
c3:78:09:87:98:6a:29:e1:72:73:2f:7b:98:54:21:
aa:19:ce:fd:46:9f:b6:36:3b:38:e0:cf:88:83:ac:
59:78:d3:76:5e:6d:15:54:d3:29:35:18:ff:9a:94:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:90:5D:40:CB:19:F2:60:07:D7:61:C7:21:33:18:D0:BC:10:9A
X509v3 Authority Key Identifier:
keyid:8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:68:09:99:9e:0c:db:71:87:00:0b:b0:3a:28:45:0b:9c:b7:
57:fe:50:3c:7f:e7:85:ae:03:01:84:f2:33:47:20:a4:45:23:
76:5c:b7:69:5d:b8:1b:54:2a:40:73:6d:ba:93:43:8f:4b:32:
cc:b4:10:c4:74:61:2a:54:8e:ef:f2:d8:e8:c4:f0:10:df:f7:
6c:f8:e2:22:18:f2:3e:7b:cb:45:d7:39:36:8a:6e:9c:68:66:
b0:a9:fc:64:04:dc:31:a5:eb:e4:42:e6:e3:0f:4b:ed:ae:07:
58:d9:0f:06:63:19:fe:ad:f9:47:4c:e7:46:ed:e1:82:8c:7c:
c3:42:e8:86:c0:b8:4d:b3:a4:50:fd:44:b2:9a:91:3f:ad:8b:
ff:99:f9:86:4f:0d:ea:35:94:35:a2:3b:97:3e:b6:74:d5:be:
d6:d9:58:9c:69:bf:ed:20:d1:e7:61:73:06:fd:13:f2:84:15:
7a:a0:56:a9:2a:ea:2a:a7:21:c2:2d:46:a0:55:d6:79:51:75:
4d:54:cf:85:fb:ae:e9:e0:ba:51:c1:f6:78:e6:da:47:11:ff:
bc:b4:6a:b0:cc:2c:d8:b9:75:05:4a:55:8c:59:d6:ae:f2:3a:
a1:f0:ea:42:bb:7f:9e:ef:b9:96:71:1e:b3:d0:e9:6f:8a:99:
86:b8:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:07 2025 by rpki-client