Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: KpAvGlHcBch3ZZEyAzkYkKAicliZL4o+1Jgx+F13L2k=
Subject key identifier: A2:5A:67:EB:CC:47:FD:D1:EF:4E:46:FF:BF:C3:79:B0:E0:F9:65:8F
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 0194BBCE1771E5D4EC31946A3AB2E385A212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: gpfvfeiU7xdMJTUGoZ0pzQAjsvM7TiY4lX7JgVkOZsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:17:71:e5:d4:ec:31:94:6a:3a:b2:e3:85:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=a25a67ebcc47fdd1ef4e46ffbfc379b0e0f9658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:ed:9f:77:8a:c1:4c:e3:4e:aa:ed:c2:2e:
bd:e9:34:e8:a3:1b:2f:25:b4:33:df:b4:ef:5b:2e:
cc:9a:f2:50:e9:8a:8b:b9:f9:6a:f5:fe:cb:64:93:
3f:63:30:64:08:32:68:17:09:e9:fe:10:41:be:03:
f6:43:fb:7b:5c:33:0c:4c:0b:7c:32:1c:b8:c1:25:
41:9f:01:51:b0:3a:31:cf:d8:06:e7:83:4c:e3:95:
67:9a:c3:d7:6d:a3:eb:49:22:b0:03:04:bb:91:16:
10:4a:ed:d3:b5:9d:52:54:df:5d:49:38:58:53:2d:
cf:0c:b5:c7:53:97:8c:ea:1e:5e:95:55:3b:92:79:
ec:b4:b2:12:4e:f2:b0:99:ff:05:39:2d:69:af:c9:
52:d4:6e:f2:55:c8:a0:ca:8f:fe:ae:fe:ef:33:49:
f6:c6:be:28:05:63:b2:3d:de:9a:bf:26:ae:20:e6:
c7:a2:a0:9d:77:51:20:ac:81:ed:29:34:e9:9c:9a:
56:39:ec:35:fc:53:47:55:27:c1:ac:16:31:21:5e:
e9:fc:60:0a:09:7b:ff:7f:b0:0a:66:14:2c:fe:72:
95:7b:08:ab:53:4f:6b:30:67:11:94:1c:b7:2f:9d:
5a:50:3a:a0:e2:d1:4e:16:62:e9:0a:ba:ff:b3:b9:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:67:EB:CC:47:FD:D1:EF:4E:46:FF:BF:C3:79:B0:E0:F9:65:8F
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:09:e8:2d:bd:5f:ff:b9:8c:1b:f9:23:e4:39:5e:2d:8a:
eb:a9:46:d4:5d:93:59:61:ac:11:18:23:ae:1b:41:05:e1:a3:
b3:04:fa:9a:e3:05:06:2c:91:9c:e8:c5:c9:3e:15:82:41:4e:
63:7e:98:2f:29:96:20:5d:e0:74:5c:83:c3:34:00:0b:74:9b:
64:6a:00:b5:d2:f9:f5:de:48:d8:8a:aa:5b:64:6e:30:e3:1b:
14:da:14:82:51:c5:1c:5d:33:57:9b:1e:3f:4c:7e:bc:33:55:
c6:ec:d1:df:cd:64:32:e6:de:e0:8d:f3:60:36:9c:c7:86:7b:
39:02:21:86:6b:3e:9e:e4:17:19:b9:d4:80:c3:34:3c:75:2a:
cc:04:8d:00:a0:73:a5:c9:21:3a:ef:26:5a:94:ae:81:e3:c7:
d8:a7:9e:a2:34:ea:c7:46:52:e6:6e:e6:fd:7c:e9:d2:2f:b1:
fb:de:0b:fd:96:2a:53:a8:ff:77:db:a2:c0:cc:36:28:e6:3e:
de:e1:a2:63:48:29:22:79:70:af:01:de:ab:c7:da:8f:9f:10:
bc:67:31:41:9d:a7:bb:8c:4d:ea:d5:85:b9:b6:cf:8c:02:36:
d7:33:00:3a:a5:4d:02:a2:64:3e:2e:9d:2b:89:e5:24:d9:ff:
a3:92:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:49:09 2025 by rpki-client