Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: khlTwnChywrp0C3DPA9CYuhIbnL/v0ClzCnU75xsR+4=
Subject key identifier: D1:F9:33:D4:E3:7C:BF:9F:51:D6:D3:31:9A:72:7A:9D:7B:5E:46:D0
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 0194BBCEE6AF863E6A636195C011AADE777D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 129C
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: xJJCWlGBnDD8UmtZp7NnZr3k5F5q251DxJUE7tpMNb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:af:86:3e:6a:63:61:95:c0:11:aa:de:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=d1f933d4e37cbf9f51d6d3319a727a9d7b5e46d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:20:ea:62:44:af:7a:7d:33:32:5d:84:98:
6f:24:ff:94:c0:57:42:68:90:97:50:95:d6:61:22:
b2:90:02:e4:46:02:ec:d4:6f:dc:67:16:82:6d:56:
f1:e8:ea:98:1b:2f:08:b2:11:8d:4e:ab:f9:ac:fc:
af:ef:7d:4d:5f:b7:32:de:e5:b6:c6:09:46:0e:4b:
c1:d7:a1:ad:af:87:1f:cd:bc:d2:c8:a2:d2:fd:6e:
0c:a5:30:92:47:9c:5b:07:d2:80:a6:e9:9b:31:b9:
9b:d3:c1:a7:0e:23:50:f2:40:28:ab:93:dc:20:80:
43:35:a0:70:ce:e0:a3:4e:f7:ca:d3:3e:fb:64:14:
c9:c7:c1:d5:ed:1c:3f:34:c0:bf:48:d6:84:2d:a7:
c7:1b:0f:e6:f7:fb:57:b1:52:52:8c:f9:63:b8:50:
ae:f9:bf:d6:6d:25:45:cb:21:0b:d0:49:0e:2a:f2:
47:cf:7d:5f:e0:af:1c:80:fe:19:62:30:f3:49:8a:
b2:c1:6f:67:60:05:53:17:cf:dd:67:5c:61:96:26:
2f:ef:96:35:dc:72:59:21:38:6d:fc:a7:fc:d1:18:
62:83:82:6e:38:9b:37:ae:a7:dc:72:62:16:88:68:
94:da:31:27:80:fd:1a:c0:c3:aa:70:3a:6c:bd:8f:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:33:D4:E3:7C:BF:9F:51:D6:D3:31:9A:72:7A:9D:7B:5E:46:D0
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7c:1c:c3:07:cb:42:47:4d:bf:d6:21:14:35:91:6c:fa:d8:
3d:58:81:c8:d1:b2:d1:60:33:bd:68:d0:3a:aa:dd:5a:ee:29:
75:08:b7:1a:9e:2d:8a:46:ac:31:05:ef:ed:15:d6:bd:e5:71:
11:4d:25:ff:e1:05:40:c6:3b:55:b8:33:f0:63:dd:b2:89:91:
aa:ca:c5:fb:3f:fb:9a:6b:b4:ff:2a:6d:87:24:45:ed:37:00:
fd:51:07:95:3b:93:f4:25:99:bd:b7:5b:fa:60:64:55:b3:87:
78:ad:21:d8:23:1f:5e:d1:d8:d0:51:3f:e1:b4:ae:6e:8d:94:
ad:69:3b:ea:f7:d2:6a:f4:90:93:56:98:2c:34:72:f5:1d:b7:
9f:ab:aa:3e:29:65:9e:ff:95:93:d0:01:d7:d7:ca:10:e8:4f:
e2:a0:b5:e1:54:39:4f:36:26:69:51:e3:87:52:50:1f:41:8b:
85:2f:ed:be:0e:c1:9e:b7:c6:1b:18:cc:c5:bf:d2:2f:98:05:
52:c3:bc:e6:09:d0:1f:9c:7b:c0:e2:c4:89:33:80:5e:b9:d2:
1f:05:1d:9c:7a:e5:ed:6b:78:68:04:7f:e2:1b:7a:bc:60:28:
f4:1b:dc:31:7e:ab:15:e1:6b:12:b2:8d:99:d5:0f:71:9c:70:
19:ed:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:03 2025 by rpki-client