Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
File: jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft (raw, json)
Hash identifier: 1/2axPgLjtSGmsR9tbV+A0EQwWoR2jyStEJ7zTyTaRQ=
Subject key identifier: 9D:6B:2F:3B:BC:E0:10:6E:C5:7D:7E:3D:DB:EB:8C:AA:C7:EF:36:CD
Authority key identifier: 8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
Certificate issuer: /CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Certificate serial: 0194BD17E5859214004F3AF938FD8B9BC68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
Manifest number: 0352
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl (hash: aq6+YZiOnwGXh4xjuodSGN05dPU4WMPL8WX7g2HNnko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e5:85:92:14:00:4f:3a:f9:38:fd:8b:9b:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=9d6b2f3bbce0106ec57d7e3ddbeb8caac7ef36cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:e0:a4:a3:cc:75:17:81:1a:40:e8:d2:d0:
81:75:df:fc:66:6e:b2:40:78:82:25:78:b7:8c:3e:
e5:1a:38:6b:75:79:e1:a3:06:dd:6d:73:54:e3:22:
d4:17:33:30:96:e6:57:d1:b9:fa:7f:54:2c:19:64:
f2:99:8a:f3:e2:c8:c4:9c:27:e7:1a:03:02:cc:b5:
1e:b7:66:87:8f:ea:47:6e:6a:d8:eb:4e:a2:30:d1:
e4:9b:ee:67:d4:ea:95:18:16:8f:d3:6a:b3:0a:74:
79:f8:9f:51:18:2e:dc:23:a8:65:6a:5c:0f:e3:77:
0c:ad:af:6d:da:a9:e7:7d:76:3f:f9:6b:56:fd:81:
af:0d:c7:22:c7:41:16:78:07:c9:87:7f:28:c1:4e:
d3:12:9f:72:43:be:a0:e4:09:3b:2d:ee:7e:e7:4b:
74:00:88:cb:34:b9:29:f9:1e:6c:1c:0e:c7:5e:6c:
21:45:8c:fd:1c:29:3a:48:e3:df:15:be:e7:1c:07:
08:9f:a2:0b:04:e7:26:c9:d1:b5:d8:df:b6:4b:d9:
aa:60:2d:81:44:17:79:e7:c2:70:dc:94:f9:0b:0e:
96:b6:27:61:4e:22:9e:35:1d:60:60:4c:3c:6c:32:
87:42:12:2e:20:12:9d:da:f0:a8:07:7c:07:7d:11:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:2F:3B:BC:E0:10:6E:C5:7D:7E:3D:DB:EB:8C:AA:C7:EF:36:CD
X509v3 Authority Key Identifier:
keyid:8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:fe:2c:28:78:0f:00:5e:ff:50:57:e9:41:69:42:43:e7:
d0:2d:6d:55:30:9d:76:56:ec:28:44:d9:02:85:ae:0c:25:2e:
d7:45:fc:9f:25:71:1c:95:16:10:10:c3:7b:1d:8d:ac:dc:0c:
9d:d1:ab:23:a1:18:74:6f:9b:05:31:57:3d:88:8b:8a:14:f2:
a3:0a:7a:ba:8a:56:d9:95:c9:55:cc:bf:52:83:35:72:85:34:
a7:4e:77:db:e4:cf:e7:93:bb:b5:6f:09:f1:5f:70:42:9f:c8:
e8:58:cb:1b:b1:78:ee:00:03:7a:df:cb:33:07:cd:a3:d0:4e:
46:07:c5:e7:19:c4:00:3d:20:f2:15:34:51:10:8f:53:ad:39:
3e:5f:f9:ec:2f:2a:a7:4a:90:14:0b:23:75:ca:95:84:79:9e:
7e:78:95:cd:15:bd:f7:89:db:30:b0:87:6d:33:d0:e7:e3:f5:
c1:b0:6a:8c:73:ab:0a:d9:a9:45:f3:06:33:a0:f7:22:ce:85:
02:b2:f6:af:89:a1:ac:81:c7:3d:14:3f:f4:2a:fe:74:4b:47:
74:fa:19:19:72:e2:14:c8:24:53:3d:55:a5:0b:3a:46:9b:07:
21:78:f1:df:61:ec:5e:cd:59:f3:a6:f2:6b:21:d5:54:2c:ef:
a0:80:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:59 2025 by rpki-client