Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: tqUd9a2v+ymixGdlUIO+AUaJ+GH1FBSWqvRp1SYZMgg=
Subject key identifier: 21:83:CB:82:96:D9:56:A0:F8:E5:C6:52:93:55:AD:6C:31:F0:20:B6
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0194BBCDBF28591C5ECE3C0EF0F4BDE98525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0644
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: GKoqJDsTVCPVsYiI4kIhiS3a5jGaesLmTea9gTYzxvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:28:59:1c:5e:ce:3c:0e:f0:f4:bd:e9:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=2183cb8296d956a0f8e5c6529355ad6c31f020b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:ce:4b:c4:2e:2b:79:65:65:dd:ae:66:3c:
99:f4:70:3b:50:a2:e1:78:79:91:8c:2e:c8:85:12:
8c:33:ac:84:7a:92:65:90:bd:b1:e6:68:a1:cb:5c:
96:e2:f6:e0:b5:09:0e:51:2b:7a:7a:73:5d:24:99:
c2:2a:45:94:45:a9:50:50:e8:16:01:67:72:25:41:
7e:11:a6:8b:09:26:95:bb:7b:63:28:81:74:9b:57:
3a:a0:6f:f3:fc:91:20:ee:58:af:f1:a9:6e:46:84:
93:65:77:7d:ea:24:fe:c9:45:ec:01:18:45:9c:97:
40:e9:a5:46:1a:52:0f:e4:c5:4d:b9:4e:05:f8:0a:
bb:5c:12:4f:72:a8:94:8b:af:af:2a:60:9b:f2:ca:
9e:93:8a:00:05:62:4b:c6:82:c9:c7:78:3c:d2:ea:
93:a1:1c:08:a1:40:b3:a3:56:72:e1:c9:0b:85:42:
ee:d0:3a:3a:1e:75:2c:7a:84:89:c6:ae:e3:84:68:
d4:c8:9d:9c:8f:3c:f1:71:c2:a9:b3:d3:4a:e2:1d:
df:e0:b3:06:56:71:da:cb:21:15:46:88:7b:32:e0:
b7:3d:e1:5e:f0:60:52:30:18:d1:6a:96:bd:7c:f5:
c5:93:85:f5:09:77:d2:5e:d1:d3:22:bd:8a:ad:82:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:CB:82:96:D9:56:A0:F8:E5:C6:52:93:55:AD:6C:31:F0:20:B6
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ce:77:b2:66:cb:41:60:0a:5f:fc:9d:72:6d:6b:a9:5a:8c:
3f:c6:7b:ba:d9:cb:b0:8e:ce:ac:40:2a:c2:e0:4f:7f:91:2e:
2f:3e:92:35:2a:ee:70:47:3d:34:b6:bd:c0:86:36:21:27:ee:
02:2e:86:41:51:d0:f8:54:27:56:55:94:40:15:a7:e5:bf:80:
5f:9c:77:e4:a1:6a:fc:cc:b4:9a:94:8f:e9:41:9f:0d:f1:16:
28:5a:57:62:36:b6:0f:a7:1a:68:64:53:02:8f:fb:39:83:3a:
52:76:df:12:af:75:55:f5:e2:fa:f3:59:0a:74:6b:0e:5d:4f:
a1:19:c1:35:72:42:d5:72:f3:c0:28:17:a0:3c:f4:58:39:08:
53:18:64:4b:90:5c:84:44:6d:59:ff:52:88:f5:a0:8c:7b:22:
b0:99:fd:90:67:2e:d1:04:4d:9a:50:b3:c1:0b:3f:27:79:f2:
f5:98:a2:c9:b5:86:bc:ce:77:53:04:eb:73:b7:82:48:2b:fe:
12:9a:78:dd:e3:2c:f1:97:b2:f7:ac:18:cd:87:92:66:38:bf:
74:51:2d:9f:d8:01:56:cc:0d:c2:03:85:dd:70:db:a4:60:83:
57:bd:75:af:6b:24:b8:ee:4c:46:86:cc:a5:d8:d0:ba:e1:9a:
3c:f1:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:05 2025 by rpki-client