Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: GOxB5Cax7vAhmfsmdKge1dqS0rzYpvIDBHXbVRxLYZg=
Subject key identifier: 8B:4B:64:50:6F:FB:B7:E8:98:30:86:40:E8:7D:B9:3F:7D:55:86:D2
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 0194BBCEB756F4C7E2BDF4AE3DA1F5A3BB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: 4gGeMITr3jIPjrJc65olRtJp8HoEuq9D2hMmldOifrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:56:f4:c7:e2:bd:f4:ae:3d:a1:f5:a3:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=8b4b64506ffbb7e898308640e87db93f7d5586d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:81:81:f9:36:68:b6:51:2b:e1:f0:2a:2c:
53:20:78:4d:8c:8b:b2:d4:d0:11:e0:d3:d6:e7:03:
02:23:c7:df:20:c9:65:dd:dc:82:34:76:a1:bc:76:
44:0c:13:43:77:20:fa:6e:fe:b3:b5:e6:c6:85:45:
ac:73:ea:9f:d4:b8:d9:de:47:5d:b7:3e:48:ff:08:
c4:4a:3f:6b:72:67:4a:7f:fa:18:e9:e9:75:18:24:
f3:28:4c:11:9a:d1:cb:8f:9f:49:02:ad:f2:ca:14:
c6:ae:1b:b0:f6:73:75:69:67:4d:af:12:02:5b:4a:
1f:56:6c:5e:8b:3d:97:ee:1d:4d:5c:d0:82:cf:7c:
a6:33:97:78:a3:bb:9a:99:2c:9f:b0:82:6c:11:a5:
94:48:71:af:f3:85:ad:b5:c8:c1:1f:8f:5f:80:2e:
eb:90:be:2f:a9:34:f7:70:b1:f1:14:44:51:b9:3e:
7b:70:2b:bd:76:ac:d2:d5:24:6f:99:a6:2d:84:2f:
dc:f6:c5:59:3c:1f:ab:ac:a9:88:b4:ef:7e:ab:e8:
13:90:a6:51:56:1b:81:42:27:53:c9:a2:5a:65:3e:
2e:ae:55:c4:b5:4f:d6:c6:e5:44:b3:50:dc:d8:53:
ea:9d:86:c5:39:c8:23:58:34:95:ec:da:37:84:e6:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:64:50:6F:FB:B7:E8:98:30:86:40:E8:7D:B9:3F:7D:55:86:D2
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:69:81:24:65:58:ea:24:b2:64:a9:ae:bf:c3:65:01:69:
3b:fb:83:39:d8:f9:89:5e:d6:3b:3e:08:8f:24:ac:23:9d:f2:
f0:d7:90:9c:5f:66:2c:e8:a0:7f:47:9f:36:2f:e8:72:e5:68:
9e:6b:05:53:f5:b7:cb:e5:dd:49:5f:89:5c:93:eb:66:9b:cf:
f8:00:6a:30:0d:6d:f6:9d:3e:b2:7d:cd:1a:4b:80:72:b5:7b:
07:a1:b4:b0:b4:1a:fe:7c:4b:f4:51:91:28:72:35:f1:e0:e9:
0b:c2:7d:9d:9a:9c:87:5a:d1:0d:d7:6d:cc:d8:7b:71:1a:c9:
c4:4d:bb:53:1c:35:b0:b6:82:23:5a:5d:d9:e4:1b:5d:86:9d:
20:98:eb:a6:4d:4e:69:55:7c:cf:7c:6a:a4:27:4f:ad:dd:c1:
a4:8a:32:3a:03:5d:5d:a9:f5:13:18:07:27:73:55:d9:1b:41:
39:5b:72:07:bd:77:fa:ac:a6:b2:da:28:49:31:3b:ec:21:99:
36:ba:1e:a3:6b:7b:70:60:2e:44:0c:d9:a1:e0:f3:95:f9:da:
91:6c:e0:60:cd:48:0e:b9:96:86:4b:c2:fe:fb:36:72:5d:6b:
74:96:f5:a4:2c:ec:78:6f:93:e9:89:68:7a:29:54:96:79:94:
3e:80:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client