Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: 2e13hbQSkzdLTemPUyDXOqYArFHr7jrbQ6M161xMRC4=
Subject key identifier: 61:0E:FC:E0:27:3C:B6:F5:5A:D4:AA:97:34:97:43:9F:20:05:BD:97
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 0194BCA9F5D60A1A5112A4BBEF7149D0EF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: GSR2S9KiRhTqUNAkELoNn+TjiYnE9UcCcStG/ri/vhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:d6:0a:1a:51:12:a4:bb:ef:71:49:d0:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=610efce0273cb6f55ad4aa973497439f2005bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:8f:21:e5:67:ea:4d:6d:63:b2:24:55:95:
b7:d6:bf:c0:fa:91:d6:d1:54:d3:8c:49:40:b7:96:
ef:c1:eb:04:25:4b:6c:44:31:34:5a:85:d0:bd:ac:
3e:84:21:6a:5d:00:cc:49:1d:c4:b1:8c:fe:5c:28:
55:bf:c2:e3:e6:be:4d:d3:5d:32:a4:81:85:62:a3:
05:c9:16:5a:16:14:07:84:1f:b5:1c:7c:99:8b:96:
ef:2e:4a:2b:54:63:9e:d2:c8:e8:59:e9:14:c0:fe:
84:1b:f4:1e:6c:b9:c1:7b:43:40:ea:80:32:03:9a:
1f:2e:60:2b:27:78:7e:c4:20:78:b5:51:b9:f3:50:
f7:14:c5:8e:09:15:13:e9:65:e0:d0:e4:08:07:4e:
08:0a:d5:33:a8:00:f8:7d:a9:2b:43:e7:53:76:f6:
a9:22:ef:56:57:4f:d5:c3:0b:f7:f3:9c:fd:b4:14:
d7:8d:19:cd:5b:c4:e6:f9:94:14:da:6d:2f:b3:93:
15:37:4e:33:77:70:f3:7e:b7:21:94:ff:79:19:13:
9b:ae:48:c0:78:cb:a1:8d:58:3b:c1:29:31:ab:2e:
6d:bc:95:1d:d7:f1:8c:6d:21:c2:53:6b:ab:50:f1:
1a:fd:64:a1:1b:40:18:8b:ca:a0:95:e2:3d:22:71:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:FC:E0:27:3C:B6:F5:5A:D4:AA:97:34:97:43:9F:20:05:BD:97
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:88:f3:28:97:b1:79:e1:55:5c:04:9b:73:bc:53:27:91:
46:73:61:03:c3:93:ec:da:f4:0f:d5:a4:fd:4d:fe:4f:e6:fd:
47:d7:47:a1:39:99:f6:31:c3:7a:b6:ef:7c:e0:29:75:7c:80:
8b:35:30:71:d1:b1:fa:d6:08:00:6e:ed:9f:bb:9e:cf:5f:57:
5b:00:9f:e0:71:33:5c:2f:36:2e:3c:64:5e:61:52:27:31:81:
ff:fe:5d:7a:58:5a:81:35:44:e0:43:00:7c:a7:7d:f0:d5:0a:
4f:31:0f:46:0d:de:89:b3:b3:ba:98:ad:b5:a4:87:84:47:0a:
fd:38:7f:5c:9a:df:e8:7f:c0:85:f6:11:ee:09:5a:f4:76:5d:
fa:4a:c3:1f:e5:df:04:ed:00:d4:90:ca:59:22:11:97:61:1a:
5e:1d:80:7f:65:8a:11:7a:0e:59:76:13:d0:2d:2a:42:78:a4:
9e:c5:2a:ee:aa:8a:de:7a:f2:b1:2e:2d:04:e2:6c:46:91:e9:
52:10:e8:d7:b3:01:94:e6:78:d5:91:5a:18:d5:84:84:08:a8:
69:3e:d2:a6:4d:0b:4f:03:fe:f5:8e:b6:64:d4:7e:02:8c:68:
ff:2f:2b:eb:dd:d9:77:9d:19:92:bc:8d:17:3e:ad:5b:2b:80:
5c:e8:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:36 2025 by rpki-client