Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: Imft0FDiBLVU9kSjRRWIGYbCUY313IU6Y0iA9a+O+68=
Subject key identifier: AF:99:85:CA:21:08:55:30:A5:29:50:88:B4:29:28:1E:EA:78:12:7D
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 0194BC72A88AD6BF24BE19DB7F3F83AB2909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 0499
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: 9mFrb95Kx23kQYCNPOjOTyoE2QCkDqIJvvrJmbzgcEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:8a:d6:bf:24:be:19:db:7f:3f:83:ab:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=af9985ca21085530a5295088b429281eea78127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:ef:a9:8a:8a:e0:82:bf:a6:d6:83:13:f8:
ac:65:16:97:57:71:52:13:2b:17:a9:6f:13:20:45:
6f:1e:e4:78:d7:57:d3:91:84:f0:fb:30:b1:55:34:
34:b6:b0:1b:20:e1:65:83:6f:d1:19:ab:31:9e:5e:
e5:bc:c0:de:ff:f8:7b:0f:04:db:cf:c6:86:7f:aa:
ad:2f:d0:17:eb:6b:ce:4a:92:af:c3:76:a8:84:27:
00:21:55:75:0a:df:e8:99:85:67:b9:40:17:5e:57:
94:24:42:70:6d:7d:df:0a:1c:0e:74:aa:37:ce:2b:
99:63:3a:8d:f2:7d:23:d0:73:dd:8e:8f:b3:c6:a6:
1b:d0:4f:df:45:66:f9:7a:77:4b:0d:2f:6c:6e:d9:
c7:51:50:28:37:02:b1:fa:58:8e:3f:ec:7e:1b:b1:
b0:f6:fb:36:b6:98:cc:cc:da:54:f6:c1:c5:00:47:
2b:07:99:3e:d3:3c:22:74:9a:9d:3f:47:cc:2a:d5:
94:8a:4e:cb:56:b4:da:d7:42:de:b9:4a:bf:35:9b:
86:b2:ec:66:d8:e4:ed:a2:4a:27:99:dd:cb:b9:25:
43:6b:07:b4:ac:cc:bc:ef:44:c4:8c:97:3b:c6:27:
66:96:be:bf:46:41:5e:29:fb:d3:33:db:95:c4:22:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:85:CA:21:08:55:30:A5:29:50:88:B4:29:28:1E:EA:78:12:7D
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:f6:b1:be:b5:cb:d2:1f:7b:13:7c:0e:1b:75:99:a8:2b:
f6:90:ba:a4:00:b3:a5:97:a8:ac:95:af:bc:d3:ea:e4:e2:c1:
96:08:cf:b9:b0:a1:b6:83:2a:f3:c9:49:d2:79:06:c1:5e:b8:
c1:0b:ee:54:3b:6f:f9:28:ca:3b:c4:d3:69:4c:e1:91:25:4f:
b5:1a:c9:79:cc:0a:f8:79:4a:ac:18:4f:2c:45:7d:03:56:12:
29:89:7c:59:2b:13:84:1e:c7:c5:d1:21:91:81:7f:06:02:79:
59:4d:50:ea:3e:be:e8:3e:71:1c:44:4b:b2:39:5a:7c:99:50:
c5:ea:df:9f:5b:19:ec:ff:dd:b8:89:36:8f:63:32:cb:bf:bb:
0c:fb:3a:f1:7b:e9:db:c6:2c:e0:84:0c:9d:f9:a3:36:64:9f:
5b:f3:93:02:74:ad:42:83:09:f6:4f:63:27:ca:38:95:07:d4:
3e:de:6e:ff:74:e1:1c:a2:ae:df:47:e7:a4:26:2d:a8:91:61:
21:dc:f9:9e:f5:4e:cd:6c:06:d0:c1:8e:49:a0:85:14:8b:98:
7c:2a:3d:36:e4:d1:9e:df:84:ed:b9:70:43:61:08:76:97:3b:
5e:53:8d:99:b4:76:e6:2a:c0:7e:fe:d5:a0:a8:10:92:b0:86:
92:01:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client