Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: SOqq6tUS6Ac2SLgueAxK/lIAthEOs0ousP/uOqZYMs0=
Subject key identifier: 41:C2:5E:0E:58:D4:64:A5:2C:FB:7B:6A:FC:C8:09:7C:34:44:E8:6A
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 0194BCE0C99FD5C1FE1E2DDF8B0A963AA449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 0532
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: eR8qRp3j4NXz3lkrgRPm3k3Gt8ZMdfdfS1d7K2IXjJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:9f:d5:c1:fe:1e:2d:df:8b:0a:96:3a:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=41c25e0e58d464a52cfb7b6afcc8097c3444e86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:2e:47:d4:54:69:59:2f:d5:ee:5d:59:63:
39:c8:64:6f:a3:99:96:27:a7:a5:b6:f6:f4:b9:4b:
0d:02:da:35:f1:b7:bc:7f:89:90:cf:39:93:94:fc:
29:db:34:07:c0:2c:38:8f:f8:0c:38:5b:13:57:dc:
2b:14:39:a3:04:87:90:bb:40:36:15:2a:23:7f:dd:
38:e5:5b:b9:e2:9e:83:ac:0e:5a:71:21:d3:3d:6d:
aa:93:11:d6:f6:06:5e:d9:17:3f:e2:a9:3b:af:d1:
a7:da:a2:2f:83:50:eb:c3:35:87:51:5d:66:a1:31:
33:63:29:3d:e9:68:a2:12:e0:2f:95:bd:0b:a3:1d:
cb:6b:7b:b9:d2:83:14:55:45:31:4b:c9:9e:51:9b:
16:45:1e:a1:93:bf:7a:ba:59:ff:6b:c3:99:1b:59:
d7:ac:65:85:a3:db:30:89:d9:36:b9:51:26:17:a9:
5b:a7:84:2d:52:5c:8c:c1:c5:87:25:6e:b4:10:fd:
83:b2:44:10:48:b7:82:62:cc:bc:39:22:0d:c0:da:
e9:a5:77:b3:dd:cd:34:25:90:a0:bc:70:a9:60:0e:
96:e6:ad:bc:b6:d3:56:53:a2:6d:43:42:d0:84:f1:
dd:b2:37:ae:e9:eb:ae:bc:15:ca:bc:be:56:63:70:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:5E:0E:58:D4:64:A5:2C:FB:7B:6A:FC:C8:09:7C:34:44:E8:6A
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:b4:29:d1:0f:48:6d:1d:82:ce:0f:e2:a4:47:f6:4e:e3:
ed:80:2b:ae:17:99:b3:1f:70:23:4c:46:60:60:ea:31:ef:ca:
de:01:38:1b:19:cc:33:7f:e1:c9:7c:b2:00:70:72:55:80:a8:
49:0b:20:e6:e7:41:78:8d:27:78:cc:1f:6d:6a:f6:56:ed:b3:
d0:10:b8:88:65:a0:31:7e:aa:f7:1f:e0:26:22:62:ff:b6:8e:
75:05:3d:4d:53:c3:5b:be:26:8c:b7:1a:58:c5:6b:cc:dc:9c:
eb:94:9b:eb:f3:bf:c2:ba:90:e8:7a:e7:75:8a:a4:b1:9e:c5:
54:ef:5c:ed:da:16:e8:14:41:67:96:df:65:4a:e9:55:54:f4:
c7:9d:a2:77:50:29:ed:eb:41:8a:a3:fd:74:9c:75:b0:72:4b:
c6:b8:0a:86:88:0f:f0:e7:d1:0f:d0:6e:11:c8:70:e0:7f:5b:
24:00:12:7f:85:71:c6:2e:bd:13:92:31:95:5d:2b:bf:93:59:
d1:49:19:e4:ef:e1:f4:f4:17:67:62:55:85:2e:44:d5:c1:66:
38:82:15:0e:77:f4:69:95:1a:af:32:e2:eb:97:76:8f:49:5b:
be:4d:bb:c7:73:b2:6e:27:b7:65:fb:1e:c6:04:d0:a9:be:0b:
2d:4f:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client