Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: 4cTKCixkomSqFNJIUbN4DlqzpD/JjugP+1ZrhfBpsOU=
Subject key identifier: D7:D9:6B:D4:C5:D0:28:58:5B:34:C7:D8:48:BF:6A:66:46:47:2D:67
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 0194BCAA1419764346C4EAD9929004814C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: fGM+RzdEIvgVUoQFrhRlX9BjTf7LbMyvEFMH5B7anu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:19:76:43:46:c4:ea:d9:92:90:04:81:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=d7d96bd4c5d028585b34c7d848bf6a6646472d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:b3:89:1e:d5:69:6e:ab:ec:65:e8:35:e8:
28:04:57:9e:d7:c1:5b:7b:c1:66:88:4e:26:66:6e:
be:1f:21:7f:24:68:4c:28:a3:f4:ec:fd:72:48:76:
5a:ea:96:e8:bb:62:20:87:8f:c8:22:3b:f8:79:e6:
e8:7e:7a:cf:1a:5d:65:f0:b2:17:eb:fd:20:84:6b:
27:b6:e9:1a:7a:bb:9c:60:36:eb:43:a2:9a:cf:47:
66:3e:5a:af:28:e9:2f:6c:67:c6:f3:ee:48:b8:64:
ee:f2:0b:c9:32:5c:c3:1f:bc:bc:0d:b3:01:bf:89:
db:ee:01:68:70:62:63:f1:39:5d:b8:d5:0f:75:1a:
fe:3a:49:f5:b8:5b:48:73:f1:48:e9:06:f8:be:a8:
3a:2b:99:91:a7:57:0f:e5:36:5e:02:23:66:e9:54:
33:7f:bb:46:ea:7f:62:5a:ae:ba:b1:53:17:85:b8:
c6:bf:34:2e:4f:c5:1b:b2:9a:a0:f0:90:e3:10:fe:
9f:5e:a2:da:fd:fb:93:1f:75:b1:22:df:d0:0e:28:
4b:b5:b1:08:cc:8b:48:0b:1e:d9:8e:d0:3f:cc:87:
f7:b4:59:18:21:3c:73:b7:c3:8c:8e:50:ae:89:64:
d4:c0:92:d1:0b:00:09:86:75:79:81:83:32:b6:7d:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D9:6B:D4:C5:D0:28:58:5B:34:C7:D8:48:BF:6A:66:46:47:2D:67
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:e6:cf:85:17:0e:2b:47:b6:89:b2:9c:c6:c0:a5:9a:39:
50:f9:81:c3:34:6d:84:cb:81:f9:09:46:38:da:a1:85:c4:61:
f4:01:fe:be:df:fb:fa:05:0a:ed:dd:9c:42:8a:e8:da:42:9c:
b3:ed:69:f5:9d:52:ff:75:0b:e9:7c:38:b6:aa:be:d0:06:90:
3b:9f:cc:b5:9a:e6:68:eb:59:5f:20:1e:e3:96:e3:0b:08:19:
20:3a:cb:0b:0a:88:ee:dc:86:28:a3:98:e6:31:c4:50:e6:82:
2d:f5:e9:54:35:46:6d:f4:02:35:f0:ad:97:e4:76:d1:a0:c4:
4a:ff:4a:83:5f:00:97:a2:30:be:a1:4d:0b:f9:bb:13:6a:6a:
7b:6f:e2:16:56:f8:7c:55:16:b6:45:b5:cd:9c:dc:dd:e5:6a:
6e:4e:aa:49:d1:9b:a9:79:7a:ca:ba:34:87:05:9a:ec:d1:10:
7e:fe:9b:d4:42:a1:54:62:3a:78:8a:50:97:0c:81:a6:a3:ac:
c8:fc:30:d6:16:f0:a9:64:40:1a:30:f3:e3:82:a6:a3:d4:02:
4e:10:f7:e3:8b:75:27:47:6a:0f:78:b2:00:8c:b1:81:ff:d1:
c2:d2:6a:f3:6e:4e:99:a7:f9:09:2f:5d:09:8f:72:02:43:85:
b0:fb:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:55 2025 by rpki-client