Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
File: jRHN6i8zL8ztMzil3x-y30Uh-OI.mft (raw, json)
Hash identifier: sk494+S4iYwnGsrB+6rH9/JrTjW6YvXvw6ixDvkIea8=
Subject key identifier: B0:42:EC:5D:17:28:99:31:F9:C4:74:16:06:2B:F5:5E:04:93:3F:15
Authority key identifier: 8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
Certificate issuer: /CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Certificate serial: 0194BBCEDE96C276A7A15600509F2F51FF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
Manifest number: 0F3E
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: jRHN6i8zL8ztMzil3x-y30Uh-OI.crl (hash: mhlE5zYYIkDkTO1igsLYur6uYJ7Fvwio8fY+XoHvMCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:96:c2:76:a7:a1:56:00:50:9f:2f:51:ff:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=b042ec5d17289931f9c47416062bf55e04933f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:b0:b8:4f:80:5c:a9:eb:08:e0:e4:9b:5b:
f1:5b:2c:1c:12:53:0d:87:62:21:17:4a:d2:a0:f5:
0c:fa:bf:48:db:94:73:6f:12:c2:b9:75:a9:99:a3:
f5:dc:c1:c3:35:eb:18:c4:e1:21:ac:a1:cb:66:f9:
bd:7e:b4:30:c5:9e:8a:a9:de:3c:31:e4:2e:df:63:
e2:fd:9d:e7:75:4b:0a:88:09:28:77:8f:f9:1d:d2:
72:b8:54:95:b6:ee:ee:3c:d8:ac:25:c7:27:a4:00:
14:4c:71:b2:92:fe:de:99:ec:42:9b:a6:db:18:3b:
0a:4c:60:83:d7:e5:69:b6:48:2e:5b:70:7a:3e:44:
29:24:b1:3d:5a:8c:a8:f2:24:7e:53:35:b1:11:4c:
66:15:4a:c4:f8:92:fc:11:7a:9b:35:59:15:78:e2:
c2:2a:b0:33:78:bc:3b:22:5b:ce:cd:a5:82:71:68:
74:75:d2:73:f3:ba:8d:e6:f1:01:21:bb:f9:96:9e:
68:80:49:16:be:dd:6f:ee:aa:15:2a:30:3e:5d:70:
64:6e:58:c2:05:8f:38:69:25:60:93:a8:d5:58:cc:
db:63:63:ff:65:d4:b5:b8:12:0f:52:5a:ba:0d:a3:
a7:4e:4a:ae:5a:38:27:b0:14:68:22:42:49:51:19:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:EC:5D:17:28:99:31:F9:C4:74:16:06:2B:F5:5E:04:93:3F:15
X509v3 Authority Key Identifier:
keyid:8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:ab:e5:e0:9b:f9:7a:cf:39:f8:b1:ff:0a:cb:78:f0:0c:
df:d8:c8:ac:71:5e:fb:8e:40:16:92:7e:9b:ca:2f:71:95:dd:
83:b7:9c:ab:e1:15:58:15:f8:13:b0:54:31:0e:e9:12:0b:7e:
ce:2d:d4:85:d2:a7:54:7d:0f:de:d0:b1:b8:3c:b4:56:39:4d:
32:95:90:93:c1:00:6a:56:df:b3:08:6f:11:98:59:c4:93:9b:
63:1b:29:fe:5d:d6:f4:ff:05:a3:df:81:b2:b5:85:8e:71:a4:
fa:ba:87:26:c0:ab:18:73:ae:2c:65:70:10:64:48:95:b4:f7:
f2:00:be:8c:ff:7c:4d:82:cf:29:96:a9:d8:98:e8:68:9d:87:
82:fc:72:b4:29:fa:e1:17:7b:f1:23:5b:f5:e1:48:fa:ac:ac:
55:3c:f9:b8:8e:0c:fc:38:5a:cb:c4:76:2c:32:36:d5:cc:90:
93:b4:1e:de:32:5b:cc:9a:70:1e:4f:b0:4d:1b:19:0a:a0:4a:
5f:ba:45:74:92:ee:58:e3:f8:8c:65:ff:9a:d0:7e:bf:ef:41:
ec:2c:af:af:27:f8:21:a4:20:01:66:eb:84:3a:ca:a2:fc:a0:
19:3c:2d:fc:a1:21:50:54:d3:60:10:d9:84:3c:58:31:dd:03:
63:70:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:19 2025 by rpki-client