Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: pHtLTn/rDhHJD/qt3Tr85gH8OHM57n2pFlVYXA0Uykw=
Subject key identifier: 53:8A:5A:13:DD:F5:37:12:44:54:D6:35:D6:97:54:68:82:E1:85:6C
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 0194BC3BC4022912572990E65445BD97F81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: EHIx1oWwDYQbku9ZZUWRhbEO2MCt6IDfj4kzdJYe2uA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:02:29:12:57:29:90:e6:54:45:bd:97:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=538a5a13ddf537124454d635d697546882e1856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:de:ca:e8:f3:b7:05:ec:7a:e9:e2:88:3e:
ae:41:64:81:05:96:22:23:b8:46:fa:6e:0e:a5:63:
72:c0:2a:fb:db:9e:5b:1f:27:84:fc:5d:fd:20:0c:
a1:e8:d6:3f:75:e4:a6:33:e0:29:13:18:2d:15:29:
c7:84:b9:3b:88:1f:67:56:d9:a8:e4:cb:31:1d:b6:
f0:2e:48:af:01:bf:ad:cf:f5:f9:c7:2e:06:7c:5c:
59:db:cb:da:b1:75:f8:fa:84:72:57:88:3f:68:90:
ef:32:5e:85:33:15:5d:2e:1b:96:bc:59:ee:a0:15:
b1:50:33:4a:af:0e:13:92:2d:5c:4b:ec:6e:92:79:
1d:d2:4e:60:74:5f:88:6c:80:4a:44:04:de:d1:2e:
10:72:0c:cc:ec:07:5f:e4:54:76:ef:0d:36:0b:7d:
d1:b9:d5:e8:ed:84:eb:79:f2:7e:ba:ec:2d:bd:9c:
2e:50:73:37:1c:5e:8e:41:59:bd:89:c8:e1:e6:b0:
0d:c9:73:57:0b:dd:6f:58:36:e2:ae:26:b6:37:37:
47:35:73:76:fb:6d:3a:b4:d8:6d:ff:15:d5:de:58:
19:8f:73:26:d0:06:d8:63:64:1f:3e:29:c2:d3:cc:
39:f1:5d:3c:4f:72:18:86:a2:24:21:4b:6e:23:43:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:5A:13:DD:F5:37:12:44:54:D6:35:D6:97:54:68:82:E1:85:6C
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:81:3f:9e:95:24:92:b4:7a:6a:38:b8:b9:f4:78:fc:86:ac:
ed:0a:f3:f9:21:06:c2:e4:24:fe:7d:90:0f:09:c6:fe:8c:93:
dc:39:45:31:e4:9f:56:fc:36:0b:58:9a:eb:0d:57:0b:0a:47:
1b:32:ec:fd:db:5c:3f:a5:98:2f:e2:e6:22:25:ed:0f:d8:9a:
61:01:76:e0:de:d4:8e:7b:af:6d:a8:81:cf:fa:20:07:86:9c:
2b:23:49:db:85:f2:7f:68:0d:b3:e6:8c:3a:c3:c4:6a:b9:cf:
3e:9c:f2:06:6d:f5:8c:7b:bc:4f:69:dd:42:20:7e:13:b8:b0:
ca:3e:a8:99:d3:47:06:f0:ad:56:15:95:1c:ae:c3:9e:a7:57:
6d:fe:57:61:81:1f:60:e1:24:14:10:4a:30:8e:e3:bf:b0:cd:
c0:20:c0:c8:da:fe:18:a3:2d:7e:73:d9:88:b4:3f:dc:e7:b6:
48:33:d3:ae:61:61:b6:75:7b:ce:c3:26:b7:9f:44:40:18:9e:
01:b2:60:17:09:79:53:f4:4e:fe:97:40:ce:0a:22:6d:65:fc:
8a:af:1f:73:dd:62:dd:97:19:0b:9a:08:c3:9a:22:15:66:04:
d8:40:e8:a3:a1:27:0e:bb:ea:8c:e0:56:d8:ad:d5:da:82:f5:
46:d2:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:02 2025 by rpki-client