Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: eZu8uYC179j+AG5Y8xssuKuVd4f7qqUU2KbNmJPhr3c=
Subject key identifier: 93:50:13:C1:19:F3:20:8B:6F:97:46:F9:74:F5:B9:13:17:01:05:D5
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 0194BBCE3B0E0A456E414AE2A52FCA150D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: gpzjApn/DksOJ3PiJ7UVP6npg8w6U0yrx73alVfuXS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:0e:0a:45:6e:41:4a:e2:a5:2f:ca:15:0d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=935013c119f3208b6f9746f974f5b913170105d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:0f:3f:39:e1:bd:a5:c8:a4:75:1e:15:f3:
cb:5a:da:6a:c2:10:f2:6e:1f:62:3b:6e:47:06:bd:
a8:b8:02:36:a0:e4:3a:e6:22:3c:26:91:41:9a:30:
28:e7:a0:35:7c:a7:cb:48:d7:3c:d9:94:8d:bf:ac:
3a:57:8a:15:60:e0:71:1b:fa:7a:1c:17:af:aa:49:
82:7f:cd:d5:df:6f:cb:ab:e9:de:6a:dd:43:1b:98:
87:45:4e:ba:8c:f4:d9:69:f9:d9:44:f3:51:d0:41:
44:56:89:93:df:ff:ae:13:c2:88:74:ec:6f:e8:23:
05:bb:2f:a9:7e:6b:5a:09:52:fb:15:c4:4a:a7:97:
ba:13:8f:0b:98:10:04:6f:3d:43:0a:1e:ed:4c:05:
ff:22:95:4f:26:9c:1c:7d:9b:bc:c3:dd:27:df:1e:
44:69:4f:a9:e1:3c:3d:76:9b:5a:20:b7:fb:e2:d6:
3d:da:45:3d:d0:2f:d3:b4:f4:c9:5b:37:73:d7:fa:
41:0d:2b:d7:49:cf:40:59:c3:2f:45:a1:78:2d:f9:
ee:b9:12:b7:9e:50:0b:e3:bf:ff:75:45:f0:db:5d:
53:59:45:60:a6:e0:b9:46:d9:45:10:d1:c8:6c:28:
74:e6:28:85:b0:aa:7e:53:42:47:99:5b:8d:de:c7:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:13:C1:19:F3:20:8B:6F:97:46:F9:74:F5:B9:13:17:01:05:D5
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0e:fe:41:75:ee:30:3b:65:c2:01:ca:79:81:b9:71:f5:09:
34:89:22:7f:d6:c1:fc:40:62:00:78:fa:a0:84:7c:a9:88:31:
36:68:12:28:52:72:94:0b:df:26:7a:c6:f2:4e:d4:55:5e:6c:
4a:87:fb:11:d2:69:34:2c:ad:98:e4:7e:c9:5d:0d:3e:f7:38:
f0:29:cd:86:9d:86:fb:51:ca:ab:e7:54:73:35:74:42:10:80:
62:27:d8:7d:19:9c:63:59:e4:23:ec:ac:0f:a6:ed:00:f9:29:
ae:d7:0c:f1:07:11:d5:28:ad:90:f4:e7:15:17:e9:45:22:44:
39:6d:9e:37:70:ec:2d:49:18:e3:cd:5f:e8:0c:ab:72:aa:6d:
08:77:bf:8e:b5:43:f5:0f:f0:74:b0:4e:4b:c2:08:e2:04:df:
07:7a:42:c1:f0:c6:e3:d8:5a:d6:c5:6b:38:69:3d:1c:e9:27:
2f:4c:f0:bb:0d:e6:3b:5f:54:78:d7:ac:a7:38:b9:3d:20:05:
93:b9:3f:aa:cf:5f:7d:9f:75:7e:65:2a:b1:69:8b:0f:4f:6b:
84:4c:a6:fa:a3:d5:2e:60:be:87:22:a7:2c:0e:6a:cc:ee:a2:
ec:c7:74:c3:f9:98:0c:7e:59:02:55:0f:93:1f:ff:10:b9:64:
71:4b:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client