Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: anqZLmtizOI8cxcEA6SlK00l/7G/lmEvrPI8dNvJAO0=
Subject key identifier: 3B:05:9F:1F:07:DB:5C:25:BE:45:76:35:59:1C:73:52:82:19:92:82
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 0194BBCE60270394D4D042A990B4F30FE373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0C07
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: WHPSLSTtuPOHENjexhzAcSNVvSahDzkbU1oHVBaCW0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:27:03:94:d4:d0:42:a9:90:b4:f3:0f:e3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=3b059f1f07db5c25be457635591c735282199282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:1c:4d:5e:92:c3:e1:d8:dc:ae:c8:bd:74:
a9:b3:52:c8:1f:36:8b:cb:f8:db:cb:b2:62:52:1b:
5c:bb:87:47:01:35:14:49:c3:e1:73:fc:30:e8:1a:
ef:3b:8d:23:90:3f:f3:a9:c1:23:8f:b8:7a:11:9d:
f7:2a:cc:bb:c4:11:86:79:66:4d:23:22:19:70:80:
9f:ff:2e:80:23:28:24:68:03:41:0b:15:6c:b0:95:
58:4a:48:56:3e:ef:ab:2c:d6:d4:0c:46:ea:45:72:
c8:b0:96:69:5f:6a:19:23:0e:59:5e:7c:6c:ba:d3:
86:9f:8a:b5:40:92:7d:80:c3:b6:52:99:02:1f:81:
84:d8:13:7a:b8:50:2e:38:f9:ac:79:aa:89:77:b3:
89:42:42:55:9e:c3:5a:83:f7:51:15:db:dd:c6:3e:
92:1a:87:39:89:05:a8:60:b0:23:7d:c3:89:d0:88:
36:54:c0:5c:34:43:79:d3:5e:db:6f:ad:fc:6c:de:
e6:7f:a9:f4:bb:81:2b:20:74:eb:b0:83:60:13:18:
28:b4:60:7f:1d:ee:7b:b7:9f:ca:98:cb:11:ab:76:
e3:45:c6:89:5a:34:89:1a:a4:64:1a:24:17:87:1c:
d1:32:41:e2:03:65:6e:01:84:d1:75:86:e2:31:cb:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:9F:1F:07:DB:5C:25:BE:45:76:35:59:1C:73:52:82:19:92:82
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f7:bd:ae:5c:ef:65:d1:7a:b7:d6:1f:84:89:46:12:1f:e7:
30:b4:6c:63:a1:3b:0a:8d:1b:65:86:ae:e7:b9:9e:49:b0:9f:
e2:f7:83:1a:f3:92:c1:ee:89:0c:41:aa:96:09:24:d2:e5:3f:
d5:38:ae:7b:92:6a:d6:b5:2a:c7:3c:a7:b7:62:22:b8:fa:8d:
6b:c5:ce:f8:ca:bd:e7:80:a1:f9:14:c4:36:00:99:b9:26:99:
be:bf:de:e2:a7:16:b9:12:b5:71:0b:ed:51:26:fb:01:ae:f8:
ad:cc:b1:28:22:76:ee:98:e2:b3:16:c7:fb:3c:8f:06:49:35:
fd:55:e5:82:92:ab:e5:d8:e3:43:25:cb:1f:39:d5:9d:78:50:
09:7a:ae:77:d6:35:1c:0e:d7:cf:d5:44:7c:16:84:8d:cb:96:
fb:47:de:12:5a:80:0d:20:2f:54:bb:57:77:47:63:75:ce:d0:
17:a4:c7:b5:7f:ae:21:bf:d9:f1:e9:ba:c1:73:55:2e:61:17:
4a:f3:95:e2:b5:be:66:0e:e5:ab:42:7b:d9:35:cd:68:b1:97:
29:f4:94:ac:44:c5:74:bf:4c:0a:f5:5c:29:f9:a1:f8:e0:d4:
97:f8:2b:ba:c4:5f:d9:3e:12:52:99:59:4b:e2:2c:67:ce:2a:
45:84:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:14 2025 by rpki-client