Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: VM5TRY8KI2Pv7kW35gEGU0clUVPyYADbpFDzaPe2kGI=
Subject key identifier: 53:07:35:3B:F0:46:64:B3:5A:D3:21:8C:17:B9:72:C2:7A:7B:A1:46
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0194BD4E719DFF77907544AA7A2C8A1EFEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 01AF
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: MfDLCNMJRT4S/ynVABcGTpParf5SLT7E2EmXUUCK160=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:9d:ff:77:90:75:44:aa:7a:2c:8a:1e:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=5307353bf04664b35ad3218c17b972c27a7ba146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:f0:f1:b3:b6:25:86:0b:41:e9:1b:f8:7b:
c9:73:30:2f:d0:ed:4a:5a:3d:92:6b:9d:85:80:62:
6b:4e:c5:12:43:5b:40:eb:18:4c:4a:cd:23:29:ab:
85:ec:60:8d:43:ae:27:00:21:b7:5f:c6:63:d1:f3:
ed:1e:40:19:9f:06:40:3c:6b:77:8c:fa:d5:06:88:
82:d2:63:73:5b:81:34:08:d0:19:0d:eb:74:9f:c6:
95:7e:df:89:87:89:59:62:2a:a7:3a:ee:fd:ed:65:
0d:19:41:e0:56:7a:47:c3:14:a6:de:37:19:55:5e:
81:a6:e6:94:6b:79:94:ae:25:ea:ed:3c:1f:74:79:
44:cb:73:26:7f:d0:13:01:a0:97:d7:68:e1:8f:28:
46:21:d0:aa:88:c3:0b:8b:2e:81:fa:c3:57:9a:ad:
8a:9e:d1:94:80:d0:00:0e:19:e9:88:9c:01:0c:80:
b0:2b:9d:95:a1:2f:1b:62:e5:a1:27:5c:df:36:28:
4b:84:2f:49:a5:73:d1:1e:e7:74:d8:4d:73:37:54:
70:70:97:28:8e:a1:de:ad:d5:34:25:b5:bb:d4:bf:
66:bf:48:8a:5f:a8:1e:77:d1:fb:0b:e0:76:72:ab:
a2:dd:fa:f7:91:93:32:2c:a1:70:8b:e2:b7:b1:a5:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:35:3B:F0:46:64:B3:5A:D3:21:8C:17:B9:72:C2:7A:7B:A1:46
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:b3:55:75:45:af:10:d2:dd:5c:40:34:51:d8:06:3e:37:
05:a6:1a:6e:d7:f3:f0:c6:0a:a1:ec:4f:97:6f:47:d5:5c:cd:
0a:15:bc:33:8a:df:98:16:98:90:9a:53:5f:9e:14:cc:76:fc:
85:6e:2a:c3:6c:c0:f8:54:9e:c5:c8:ff:f2:45:70:0e:ef:db:
74:17:a5:f7:0d:2a:9a:b8:e1:35:31:42:52:74:52:89:36:4a:
fb:66:46:0f:8d:8d:f7:b5:5d:11:cc:28:72:dc:92:aa:24:5e:
be:e8:34:39:ab:3f:b3:3a:6c:7a:64:58:c3:0a:9e:2f:92:db:
aa:8e:fd:46:93:17:20:49:f1:e9:ea:48:99:19:98:ae:c3:f5:
45:36:7e:e2:df:0c:8a:83:7f:0f:79:39:47:f6:36:94:c3:69:
83:e4:81:bc:f4:e3:a0:49:4d:b4:b2:e0:bb:94:36:c4:d3:91:
17:ae:50:84:5d:e7:e2:87:fd:02:93:0a:a6:fd:a1:bb:84:64:
7b:7a:c5:0a:aa:b0:c7:c7:ea:6d:41:c0:f2:b1:ed:2a:17:f9:
a8:3a:3e:d3:e0:15:0c:34:4b:70:fe:a1:d9:7e:3f:21:46:7b:
0e:21:72:50:ba:ef:38:7c:00:ba:c1:c6:87:45:ef:76:e6:5d:
f9:c8:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:42 2025 by rpki-client