Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: iO31yH3Q0B7L0iE7EvmJ9qqOaUo6idDYhaEzGQOnMVc=
Subject key identifier: B1:A9:B3:DE:28:84:49:C0:24:D3:E4:50:0B:9D:22:DB:F9:9F:34:F7
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 0194BC3C167E5F5ED718ABFE25D290A5B215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 01A4
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: cV59P/IR7IWNpzhLOn03kI8ki8br7DQsfhwXe7WrTNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:7e:5f:5e:d7:18:ab:fe:25:d2:90:a5:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=b1a9b3de288449c024d3e4500b9d22dbf99f34f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:a6:49:1c:6c:7e:ac:c7:d2:91:91:5c:f7:
10:9f:40:79:f4:94:25:4f:a2:df:96:df:52:3d:47:
3a:bd:05:0d:ec:ac:67:db:ce:42:64:27:0f:45:c5:
a6:aa:a4:f0:39:9f:3c:f8:7f:df:9a:ec:48:9f:98:
16:7a:6d:ee:a5:ed:24:19:b6:c4:bd:f2:48:f8:ea:
34:fa:ec:44:87:44:34:39:b3:13:a7:22:33:b5:84:
b0:7e:da:8e:99:ac:fa:d1:2e:b3:29:e2:0e:31:36:
31:b4:69:99:e6:ab:52:ba:c0:f6:33:3e:6c:13:66:
a2:c5:7e:41:0f:de:b8:40:b3:a8:e0:04:71:b8:a3:
fb:15:3f:f1:6f:25:be:1b:bb:48:07:57:97:18:ca:
c2:83:75:0e:20:e3:3a:6e:40:77:4e:11:c5:76:fc:
62:90:24:c7:9a:8d:77:23:83:82:ff:94:fe:eb:e5:
ad:4a:97:8f:86:fc:01:da:30:bd:9d:2b:11:c4:90:
7a:46:56:05:93:1c:00:21:0e:fd:68:5e:8f:4e:39:
49:0b:fa:bd:b1:91:c3:d0:a8:5f:74:be:a7:c8:2e:
6e:8a:cf:24:3b:3c:01:d8:d4:67:36:ce:a9:00:28:
4d:b3:61:8c:d8:b5:ad:ce:57:78:9c:ce:0c:7b:41:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:B3:DE:28:84:49:C0:24:D3:E4:50:0B:9D:22:DB:F9:9F:34:F7
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:5c:47:83:36:bd:6d:c5:49:b3:62:43:d1:87:53:c9:4c:
bd:21:54:ae:02:43:99:9f:31:d0:f6:f5:a3:4a:3e:ff:62:a2:
2f:20:cf:eb:fa:96:40:f1:6f:e3:2c:51:e0:72:8e:8e:80:49:
68:01:9a:8a:75:a7:d2:ea:2c:e1:1f:94:5c:02:f8:c1:6d:d7:
0a:b5:9b:93:ff:d9:09:97:9b:7d:5e:88:3b:45:96:f6:27:cc:
46:b4:c7:17:e1:19:05:8c:54:6c:41:47:d3:c4:f6:e1:7f:4f:
d1:e1:64:f6:9e:cd:88:3a:ed:95:cd:11:c9:1c:99:9c:92:bc:
08:af:71:74:5a:97:74:8c:71:28:b7:98:56:28:b5:d0:ea:b5:
37:44:05:45:44:1f:4b:8c:61:16:02:4e:fe:1f:09:c8:26:32:
00:54:bc:6c:c2:a3:83:ed:ba:1d:28:1b:a5:0f:fb:c1:52:e5:
df:ca:91:ea:90:32:08:b2:96:0b:5b:68:3d:92:7f:02:4f:da:
92:69:44:90:92:19:dc:b7:05:d0:06:01:d9:d4:bc:fe:c0:9d:
bf:2b:b5:e0:ea:ce:63:64:41:f5:a9:28:87:03:19:eb:d8:34:
6b:37:4a:d3:ab:55:a1:1a:c5:16:ca:5a:f4:4e:84:00:7e:be:
1f:7e:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:09 2025 by rpki-client