Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier: zLpyFJ5OdgHY8G7OP56P8G/viPGV+67FWHbZrwQRXos=
Subject key identifier: 46:BA:69:D2:10:40:C6:0B:4B:3E:22:A3:4D:42:A7:2C:D9:4C:AA:16
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial: 0194BCE08375C1A13B8B0D7763ABDCE31EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number: 052D
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: v5MWPAfuGZ+uurO/9Pc/v6DnIopzopxY0B/FdD1+ZoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:75:c1:a1:3b:8b:0d:77:63:ab:dc:e3:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=46ba69d21040c60b4b3e22a34d42a72cd94caa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:8b:06:82:c2:d3:7c:16:67:db:e6:af:4b:
01:0a:af:d2:77:70:33:59:5b:f3:f2:77:96:4d:27:
54:1e:f2:f8:50:94:e8:92:0e:64:87:89:ae:eb:89:
9f:30:99:9c:c4:85:74:f6:37:b7:e7:7e:27:22:76:
03:09:61:d9:9d:2b:da:ea:f7:cf:4c:2d:0a:bd:20:
f0:d1:ac:50:d1:0f:47:7c:a4:8b:0a:6b:be:c8:be:
64:2b:28:e3:f9:d2:01:a7:b6:2c:56:24:10:9f:d8:
d9:11:4e:1e:e1:4c:0c:c9:d7:6f:15:9a:79:0b:6d:
5e:b7:a5:58:ff:61:1a:ac:6b:51:9b:8f:62:c3:c3:
3e:98:e6:24:37:c3:11:07:9c:4e:1f:f4:64:8b:dc:
f1:80:14:72:3c:3d:c4:bb:09:2a:a7:ad:94:22:f0:
64:1a:f5:e1:cb:02:6e:6f:45:75:4d:24:15:f5:78:
82:37:11:97:68:15:b6:9a:52:cb:6a:38:5a:c4:cd:
d6:fe:a6:89:41:1e:fe:e1:ce:35:5a:66:bc:97:d7:
48:c6:92:03:3c:2a:5c:12:55:92:fd:87:52:9d:b8:
eb:b3:c9:97:ff:ca:85:62:41:7f:c8:e3:af:59:a9:
cc:f2:75:42:72:44:a5:f4:68:16:d7:08:d0:dd:d3:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:69:D2:10:40:C6:0B:4B:3E:22:A3:4D:42:A7:2C:D9:4C:AA:16
X509v3 Authority Key Identifier:
keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:7f:d8:29:a0:47:ec:b1:c9:6b:b7:71:7a:1e:66:79:e8:
77:5e:b0:28:e4:2b:93:47:18:67:8f:43:e3:e8:05:03:19:67:
31:44:a0:6c:cd:c9:96:9d:43:48:13:d6:a7:e0:62:fb:b0:6f:
d1:6e:ed:3b:0f:e3:50:e5:c9:5b:b4:38:06:e4:4e:99:95:87:
a6:e1:1f:fa:af:c7:55:3b:02:87:8b:c1:e4:13:dd:39:fc:c9:
32:59:ba:63:db:39:1a:2f:77:0f:a5:fa:92:fa:9e:2e:a1:a6:
2e:3b:23:25:73:05:df:f9:4b:d0:fc:bd:1e:0c:01:31:25:49:
02:0b:ed:65:db:4c:6d:36:20:1e:bf:a3:22:5a:62:c8:f5:bc:
d1:e9:08:7b:b8:69:9c:6b:62:42:1d:bb:a4:e9:08:58:a9:be:
54:a6:31:90:74:ca:26:fa:e3:44:6b:81:c7:16:df:1f:46:0f:
f1:9a:9f:9e:6b:b9:8f:19:1c:21:ea:6e:9d:5e:bf:66:c3:ac:
db:c4:12:c5:9d:d8:27:eb:50:46:36:d8:2f:3d:bb:19:e4:ba:
77:8f:de:d2:be:a3:88:b0:49:f8:5d:50:36:ce:96:89:fd:c6:
5a:24:2f:08:bc:d0:f0:cc:a3:e1:32:b7:70:f7:12:a6:88:ef:
84:b5:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client