Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: 4IXDdqyujL5VnH06eoLLxauTpIFmeG0q4RAcZAI1gTo=
Subject key identifier: 3C:5A:C8:2E:DC:30:34:92:32:D7:77:75:26:6C:17:75:D3:86:1A:38
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0194BBCE8EC5C248B4B0883076B2984679F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 0DDF
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: tL2czsxCFkns/XeS1Fo6I75M9+QJEP2HlNkYsI1c2As=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8e:c5:c2:48:b4:b0:88:30:76:b2:98:46:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=3c5ac82edc30349232d77775266c1775d3861a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:9c:77:09:79:da:5f:f5:a5:e7:43:3e:10:
c2:06:d9:20:3d:92:a7:21:9e:67:a7:ff:ec:c6:3e:
04:81:86:49:0c:b3:df:0b:26:f8:ca:5d:27:cd:51:
a3:b6:81:8e:7a:40:2b:2c:43:e6:71:b8:2e:49:ff:
24:32:22:74:2f:4c:b4:53:d4:af:e6:51:c2:78:0a:
30:89:7f:26:79:73:cc:15:ba:09:38:05:4b:53:ce:
bd:79:9e:fc:99:ff:c3:5d:d4:a7:c7:e2:cd:5d:b8:
a3:69:89:f1:28:31:34:a0:fa:dc:06:8c:b1:fa:87:
ff:43:88:17:78:94:98:ba:43:30:8c:14:39:ef:5a:
ec:ff:80:ec:99:d8:cc:32:9c:f8:e8:32:a4:d2:2f:
40:2d:f6:6f:d6:c7:0b:1e:61:dc:58:2b:21:41:fb:
f5:ab:48:98:eb:48:e1:7b:92:fb:01:08:f7:33:7c:
f8:fe:1c:36:8a:b7:2f:7f:07:d0:ad:ea:0c:08:66:
a9:34:f8:7e:e0:50:c9:d2:e7:b8:b8:87:2b:69:1c:
40:e6:10:e9:b7:89:66:7e:57:a3:5e:db:32:48:7c:
b6:d2:08:49:91:d9:d0:3b:c4:57:df:be:80:f7:dc:
e4:61:12:2e:0a:d6:69:9b:a1:ba:4f:72:ef:0c:5a:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:C8:2E:DC:30:34:92:32:D7:77:75:26:6C:17:75:D3:86:1A:38
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:d9:fd:13:c3:dd:46:96:ca:49:7c:8f:0f:27:35:73:03:
88:e6:a6:f6:24:35:82:07:6d:2b:e1:94:1d:a5:61:18:b6:98:
6d:0c:86:d1:6c:a1:c0:65:8f:96:2d:f6:6f:85:87:98:a9:5f:
13:cf:72:0f:1d:c3:ff:a7:92:50:2f:a8:de:c0:c3:c4:b4:92:
e9:46:4b:58:54:0d:98:73:7a:40:dd:89:fb:01:b2:7e:b3:4f:
5d:91:60:0a:eb:a4:85:69:4b:51:f5:98:36:f6:db:59:46:ec:
47:69:5c:c3:7f:b2:c0:10:b4:ac:e0:1a:93:33:52:c4:ca:f9:
1e:11:a2:fc:fc:a7:94:6b:98:b7:1e:18:ff:da:52:88:49:14:
da:44:8d:ac:d1:ac:ae:93:b1:b4:46:68:ac:8b:66:e4:0e:27:
07:58:62:f4:d4:58:db:90:7c:c4:38:b8:b1:c1:d9:78:db:0d:
fc:c8:6c:ab:7a:71:06:36:24:88:96:df:d2:2c:9c:36:9e:00:
d6:1e:1f:ec:00:94:f3:9c:3f:1d:62:39:51:e0:12:cd:78:d4:
72:ec:ba:e5:97:67:1f:f4:17:10:c9:8a:28:e1:2e:d5:cb:de:
b6:a6:ca:45:7a:1d:d5:27:53:fa:ae:6f:46:14:e7:82:e6:4b:
8d:24:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:46 2025 by rpki-client