Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: oRkre3xwy2jh0UuTlKNAeEs8IvgoDWw1c7blG8J0UkY=
Subject key identifier: E3:91:46:25:6D:F6:77:89:47:B2:6B:45:33:9F:8F:07:4D:9B:9B:C6
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 0194BBCEFE9EB6AE4C72950968E705CA5FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: WY9Y2MGAzifF87+wBCcYNVwlzKpLa/8lgMcCXGQz8C4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:9e:b6:ae:4c:72:95:09:68:e7:05:ca:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=e39146256df6778947b26b45339f8f074d9b9bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:b4:62:d1:c3:a7:af:d2:54:b4:e0:f6:06:
6f:9c:9b:f9:60:fc:db:53:2d:97:1a:0c:d0:03:b7:
54:8b:12:4a:32:29:9b:c0:70:4a:5b:b7:80:ea:a2:
ac:bf:c7:92:e3:c2:2a:e8:a4:49:21:c7:8b:a6:7c:
4a:6f:45:4d:d3:40:b4:14:ea:2d:4b:14:3d:e7:b8:
a1:82:2a:0b:a0:e3:c3:d6:55:cb:16:df:d4:80:6f:
9d:39:42:d2:74:b2:9b:e7:7c:86:f5:4b:cb:39:a7:
bf:94:d8:25:b3:c5:12:b1:ef:62:0f:f4:36:aa:0d:
ab:cd:f1:99:61:8a:46:44:5a:b4:5d:a6:d5:cf:5a:
33:f2:39:72:b5:02:10:ca:dd:dd:dd:dd:bf:39:94:
d9:c7:1c:2e:fe:cc:5b:b2:1e:c5:a4:fb:cc:0d:da:
31:8e:5d:54:c9:dd:db:64:9e:d7:ce:f6:6c:40:5d:
53:40:34:95:7f:78:db:fc:ab:66:21:a7:b6:10:c9:
ae:67:be:9c:36:03:a4:c4:1a:6b:27:25:bc:96:4a:
c4:74:01:0f:19:11:fa:8b:97:58:6c:00:fd:dc:8d:
35:5e:4e:8e:06:a6:b4:3a:39:db:91:bb:2d:cb:bb:
07:9a:0c:ba:cd:1d:7b:83:da:d6:c4:36:d1:e3:ec:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:46:25:6D:F6:77:89:47:B2:6B:45:33:9F:8F:07:4D:9B:9B:C6
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f4:02:3a:95:34:81:8c:f4:da:5b:77:9a:ab:ca:db:0e:e4:
5b:a6:81:f6:43:ac:65:34:0f:95:84:ac:18:28:cd:0d:59:31:
12:a6:f1:1e:22:cc:18:da:c9:a1:2c:54:93:03:62:2b:ac:a9:
5c:56:0c:b1:fa:55:0d:96:53:2c:4d:ae:66:89:57:ce:8b:03:
f6:11:44:72:e6:d5:c7:4d:f8:13:d7:00:11:42:7d:44:62:1d:
ff:6b:34:da:97:40:9f:6e:b2:25:3e:cc:65:67:8e:67:22:0a:
01:31:e0:c3:bf:07:a3:cb:da:3e:86:ec:4f:81:be:b6:e6:49:
9e:37:99:7f:4a:4a:6d:9c:93:1d:01:97:6e:a5:e7:1a:bf:d0:
36:27:68:37:02:05:ce:95:2d:9d:d0:7d:08:95:13:d9:1d:86:
f2:5b:fd:f5:71:f8:c4:28:b4:4e:01:1a:5b:c1:a2:f6:44:b8:
8a:b4:d2:19:c9:cf:0f:78:9b:1b:e4:41:5e:bc:18:4a:24:64:
46:a0:c1:7d:84:d2:8f:22:53:45:90:1d:f2:f8:e5:76:81:28:
23:0e:5c:45:19:10:9b:aa:81:2a:13:8e:a9:db:f7:f7:52:95:
a6:cc:d7:13:d3:05:15:6d:e1:fc:b5:ab:42:17:07:51:e5:98:
99:ae:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:42 2025 by rpki-client