Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json)
Hash identifier: 3xHiZsCksq8cmKBYGN18dCEUZ9sDAzuyAIU9lcur/a8=
Subject key identifier: 31:EB:47:4F:66:CA:C0:18:C9:DC:21:90:26:BE:64:DE:CE:F4:13:36
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 0194BC72A99729BA66AB0CA25E72EF1B33D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
Manifest number: 088A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: 7rVkx6Kh0zG4Q2W79biVStQRyviFbP3o/8EdVWFh1Nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:97:29:ba:66:ab:0c:a2:5e:72:ef:1b:33:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=31eb474f66cac018c9dc219026be64decef41336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:5a:0c:6d:9b:e8:8a:b9:af:67:5c:33:1d:
37:fe:38:ab:67:25:cd:04:0a:2d:b8:8c:45:aa:c9:
01:cc:08:8e:39:7c:ab:c7:8e:80:e5:d2:d2:bc:4a:
66:5f:d8:ce:03:cf:0a:10:9c:3b:70:c1:a7:45:c3:
b2:20:00:55:9b:1a:e5:33:06:44:62:dd:8c:ba:db:
2c:6b:bc:cc:a7:a8:cd:cf:07:15:9a:82:06:11:ae:
dd:f9:be:76:ae:55:ee:84:33:be:18:33:b8:57:d9:
05:77:8e:70:7b:c6:a3:61:24:ae:6d:35:d6:80:a0:
b0:36:6f:70:42:e2:0e:01:22:ad:16:0f:ec:4b:ca:
42:14:1f:d2:c0:a3:24:54:10:92:2f:c1:80:94:f3:
63:7b:b0:ce:90:5c:17:11:94:32:fe:e3:94:fe:94:
61:e6:90:c2:d1:ea:66:24:90:b2:be:dc:9e:fa:bb:
b8:65:6a:cb:4d:19:0a:e9:df:a3:7f:d7:07:21:9c:
4f:11:04:a8:90:88:01:f3:50:cf:f0:80:b3:a2:0a:
02:68:e1:08:83:a6:db:61:28:3d:71:d0:ad:2c:a3:
65:bd:e0:50:13:e1:8e:dc:58:41:1e:cf:1b:75:4e:
d2:c4:54:cf:7b:5e:ca:af:0e:b9:ca:46:02:b9:3c:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:47:4F:66:CA:C0:18:C9:DC:21:90:26:BE:64:DE:CE:F4:13:36
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1b:cc:5f:2d:b4:ce:8f:a2:ed:9f:89:e3:ad:68:c6:55:31:
aa:a8:73:19:16:2e:a0:8e:e5:4a:f3:47:71:c2:ef:83:2e:ed:
59:81:c7:82:02:36:60:74:70:2d:42:ba:81:a0:e7:72:f1:ef:
4c:9d:0d:db:0c:76:d5:2e:f2:d3:80:63:d5:8d:f6:a0:fa:b8:
36:2e:e7:8d:4b:5c:66:ca:a6:0c:dc:e0:70:4d:f2:3c:29:2d:
3b:2a:e6:a4:66:06:9a:01:d7:d9:77:6e:65:24:cd:e7:2c:d4:
4e:1d:32:42:8a:c1:75:fc:6c:1a:06:9d:fd:15:f9:67:c9:1d:
43:9a:5b:c4:e1:30:79:24:d3:2c:22:07:c4:43:04:3e:fb:f6:
50:bb:66:e0:7b:56:28:dc:22:ec:42:3f:ce:62:e5:ba:3f:8f:
27:2d:00:02:d4:17:ae:20:5d:96:7b:f5:32:bd:a5:5d:7d:3d:
a0:46:1a:9a:bb:91:e3:d3:ca:90:83:32:d7:a2:4e:b2:b8:28:
58:94:70:f5:4d:63:14:cf:e8:9c:d1:f3:8a:2e:f0:39:ef:42:
2e:88:97:02:7c:51:0a:66:c8:8f:9d:56:cd:4d:a2:83:9b:7e:
f7:4b:97:f7:70:cd:74:c6:7f:c7:c8:d4:f0:92:cc:7d:b5:54:
b9:93:8c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:50 2025 by rpki-client