Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: g0yPh+x0TWQGto63oSDodUwTv2y8gIdjN0xixXbbtLE=
Subject key identifier: 5E:6C:5A:45:61:77:BC:A8:70:58:C0:1F:39:CB:66:DE:7D:46:EE:82
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0194BC3CA938341FBF880B2D7A5FA4159E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: 4m6FpvEgzSW/0KXCcQ2omffFqg6MBSsH/mU3cAJTL3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:38:34:1f:bf:88:0b:2d:7a:5f:a4:15:9e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=5e6c5a456177bca87058c01f39cb66de7d46ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:ac:be:a1:99:4d:a2:4a:3c:36:c3:ab:05:
c5:cc:5b:ba:e3:2e:ee:a9:d5:b0:85:14:b0:be:5b:
82:5c:5d:23:74:ba:35:42:18:d9:42:1b:e0:78:cd:
52:85:cd:73:0b:95:d2:19:48:5f:7f:6e:25:3e:b4:
f0:e2:29:6d:14:1b:d6:c2:0a:ab:d7:dd:e4:dc:9d:
aa:de:5b:16:39:be:5c:9d:af:c1:e7:f0:39:cb:ce:
d3:03:ed:b8:7a:b4:07:4f:76:b5:d9:f2:45:9c:f0:
e8:47:f4:05:16:ba:e5:ae:61:d6:f1:8c:0e:cf:a4:
9f:37:98:53:56:90:74:c4:86:2a:3c:ee:b0:fe:d6:
c8:82:79:2b:e5:44:08:37:c7:6e:e8:1e:30:c6:75:
7c:4e:f8:28:26:c2:f5:b3:16:fc:c3:0b:1a:6b:19:
ab:a3:bf:e5:52:78:2b:2f:e7:67:ff:e9:51:fd:ab:
b2:53:b1:ba:3d:4f:f4:c4:a2:a8:56:f4:ca:45:b9:
ff:24:bd:c1:4e:db:83:79:22:58:c3:97:10:5e:13:
e5:a6:77:f7:ae:57:a7:de:b2:b1:31:53:d8:e2:38:
ba:2c:ba:25:d9:39:c8:d9:d2:68:46:b6:57:65:32:
4f:67:80:a8:77:5c:b4:df:3e:d1:c5:c6:ae:ad:e7:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:5A:45:61:77:BC:A8:70:58:C0:1F:39:CB:66:DE:7D:46:EE:82
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:f6:ef:14:19:ec:de:c4:13:ec:19:c1:18:38:29:05:17:
aa:d9:01:f3:3a:84:c0:4c:91:36:93:f1:43:15:63:90:94:8b:
d4:1c:5a:dd:6f:a2:87:64:42:df:ea:27:f0:a5:39:ff:1c:fb:
5a:d4:2a:4e:e5:c8:73:1c:93:63:04:77:e5:64:77:7e:ef:d0:
a4:ee:ff:01:2a:35:19:d6:21:b2:38:79:58:71:bc:d9:a9:84:
34:c7:97:0f:c4:ce:ff:1c:d7:65:df:4b:95:ff:72:e8:43:af:
10:71:82:8d:35:ba:a2:65:e6:13:85:c1:4d:db:18:28:93:13:
be:3b:b1:91:b0:2e:c2:d5:32:24:bc:1c:a5:67:bf:5a:e2:95:
80:83:00:a4:38:d9:e5:1e:6c:27:dc:0e:ad:74:06:49:17:ca:
4f:c6:c3:69:96:ac:0f:b4:e4:62:59:de:9a:45:81:10:84:26:
e3:8a:63:bc:ed:49:f2:4f:49:fc:b0:f6:f9:7f:49:30:82:d1:
0c:d8:a1:dd:ab:6d:5b:44:44:3b:84:32:1f:21:36:a3:bf:6e:
69:e0:fe:3e:d3:ff:0f:0c:16:a6:3f:11:93:6a:83:13:1c:62:
8d:19:50:ab:16:ce:db:ad:d8:a5:73:ee:a8:54:a2:ab:6e:e9:
0e:c7:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:19 2025 by rpki-client