Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: Vhf8dVU1iRI50ixm7hVHUikms4E3/uDyTGzhliFa08Q=
Subject key identifier: 7B:D4:1E:47:20:0F:AC:32:13:6E:66:FD:74:98:DA:5E:10:91:F0:7C
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 0194BD17B84854CD2FEBC231D1061A22106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 0FF9
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: suvd7w0IMVAbz0gxXGRrKEraL4+dOl5ARlaSl6hCv/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:48:54:cd:2f:eb:c2:31:d1:06:1a:22:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=7bd41e47200fac32136e66fd7498da5e1091f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:d8:0f:2b:f3:c4:43:4d:b3:c5:35:36:39:
e3:38:66:07:cc:70:24:b4:c7:62:69:68:b3:34:97:
72:7f:90:06:40:4b:ee:51:7c:6a:b1:89:58:5f:c5:
19:9b:fb:0d:c4:84:47:97:c7:d4:ee:93:62:8a:0f:
ae:59:15:d5:76:bd:0a:de:56:ff:c1:a0:30:f5:67:
4a:5f:0b:34:fb:6b:ab:1e:fc:11:e5:d4:ad:05:ec:
e9:ca:ed:12:d5:48:d6:f0:5c:b3:e4:12:2a:71:7f:
d6:f0:d7:1d:3a:32:9c:68:c5:cc:92:98:8a:11:22:
f5:e9:a3:41:2d:90:a9:bb:af:7b:af:10:6a:d2:cc:
f2:6f:df:73:44:8b:fd:8c:bc:2f:34:d7:73:11:28:
f7:11:8e:08:bc:6d:55:25:d1:3d:cd:ae:be:c2:02:
ea:ff:59:8f:a1:e6:fb:e8:14:8a:2b:70:06:33:ee:
ae:ac:48:91:98:d5:67:45:30:a3:f3:40:b6:77:95:
fd:2b:7a:aa:55:46:7e:fe:eb:eb:86:51:3d:af:ed:
59:d9:ac:48:4c:8d:4a:9a:bd:d1:2b:34:8c:58:18:
34:92:a8:21:7c:c3:36:10:d5:aa:71:48:2f:7f:62:
e4:9f:3d:83:ad:45:46:bc:d2:71:ac:0f:47:13:7c:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:1E:47:20:0F:AC:32:13:6E:66:FD:74:98:DA:5E:10:91:F0:7C
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3f:ec:5a:07:d4:32:85:a5:cf:a7:d0:6d:88:55:09:11:e0:
45:05:5a:ff:aa:f1:ba:71:8f:9d:47:c6:05:e7:8b:b5:b1:b7:
62:89:56:54:c7:37:34:c2:26:91:12:c8:68:29:ff:15:a9:49:
63:93:cb:a5:50:bb:af:2a:dc:ac:5a:ad:31:10:f0:a1:30:89:
28:43:53:40:70:71:a7:18:27:1d:c3:79:73:47:6b:ec:36:6d:
43:21:33:ae:2a:a9:9f:6b:e3:d1:ab:fa:7f:91:fc:14:e1:90:
47:cc:a8:99:34:e4:ff:04:7f:40:cd:a4:83:8d:3a:cf:a8:f7:
4b:a7:ea:f3:61:e1:1a:13:7b:81:53:9e:bc:2c:58:5a:5e:28:
e3:e7:75:aa:f2:d5:d4:bc:be:6a:fd:9b:12:6a:f0:7f:8f:8c:
82:36:20:49:f8:fa:c9:97:c2:c5:08:4f:59:d2:48:88:10:7e:
12:b3:3b:5d:51:a9:e3:de:f8:9f:be:52:08:1f:0c:e5:41:0d:
29:08:91:7e:3d:4a:72:db:a4:6b:14:d2:54:aa:96:59:5f:14:
04:7b:89:cf:95:ee:98:fd:f9:75:ec:0c:0f:a2:3e:67:3b:2d:
08:d8:67:63:44:8b:7a:d6:41:b8:68:0d:04:11:a8:56:39:d6:
88:3e:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:57 2025 by rpki-client