Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
File: jMcNehq2zHYirM80kb5xURXYQzo.mft (raw, json)
Hash identifier: IM15JB7GAzrcbDwZHjEChvql3vk+dKv3eFoBhJTmLNI=
Subject key identifier: 0F:71:FF:5F:F1:D4:15:59:F0:7F:F7:82:AB:32:45:46:7D:8C:66:0D
Authority key identifier: 8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
Certificate issuer: /CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Certificate serial: 0194BBCE7358A4AE7571803F566A2B2A95EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: jMcNehq2zHYirM80kb5xURXYQzo.crl (hash: YxAaGnuD/dz+LPPQMwOAqLEljvYYaJ99tVdZejgQ5MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:58:a4:ae:75:71:80:3f:56:6a:2b:2a:95:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=0f71ff5ff1d41559f07ff782ab3245467d8c660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:eb:73:e5:6a:08:e0:36:c6:be:f7:88:ff:
17:cd:cf:12:6b:b4:ff:db:69:e9:3e:70:b4:32:93:
ee:d8:bb:45:4e:34:38:bc:07:cc:da:93:96:5d:fb:
70:28:bf:e1:b7:a1:0b:7a:23:d8:31:00:91:69:17:
34:a1:2f:df:41:d2:8a:f9:4e:a0:65:01:4c:ce:e8:
66:21:91:bd:85:a0:7a:96:4f:e3:b9:56:83:5b:5d:
0b:c1:15:cd:25:e5:7a:fd:6a:be:fe:0c:30:a4:00:
0f:a4:1f:c4:24:ae:bd:d3:cf:fd:65:e0:82:50:31:
67:ed:69:d2:61:bb:cf:a6:12:b3:0a:63:f4:66:7c:
4d:5d:b4:1a:7d:1f:a9:bc:21:22:2d:0c:3b:ed:95:
1f:1a:8c:49:6e:18:c1:2f:4e:e9:0a:c7:3b:96:ff:
d5:71:24:2c:62:f2:1a:7e:1b:a0:92:ee:ee:84:78:
0b:c9:28:a7:97:e8:0b:7b:59:40:21:07:dd:9b:7d:
41:82:f2:f3:3d:a0:b8:34:b4:03:7a:31:8e:24:fc:
cc:33:97:b9:7a:1c:1d:e4:39:b5:9f:44:e7:be:10:
c3:dd:68:fd:d6:c5:04:1c:74:e6:9d:c3:50:a0:53:
96:b9:1b:3b:13:55:4f:9c:28:bd:e8:6b:04:b5:9a:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:FF:5F:F1:D4:15:59:F0:7F:F7:82:AB:32:45:46:7D:8C:66:0D
X509v3 Authority Key Identifier:
keyid:8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:de:1f:35:91:b4:6e:51:3a:27:d8:1f:88:7b:19:3a:22:
a0:ab:59:7a:48:61:cb:6c:7c:7b:b1:0f:63:5d:ad:a8:fb:44:
61:01:90:95:69:9b:62:ae:b8:b7:9c:26:b0:71:dd:ee:1a:af:
f8:13:91:11:b7:46:3d:c6:dc:33:92:e6:0b:dd:55:b0:19:77:
ae:7b:9d:0b:25:a7:55:fc:f0:23:11:63:40:bd:f9:ba:3d:49:
76:fc:92:7b:cc:c5:d8:08:9e:8b:e0:22:9f:8e:42:ce:ec:d2:
63:5f:22:fc:64:0f:ff:17:07:98:dc:1f:7b:f8:fa:72:eb:ce:
12:27:cd:ff:16:29:41:df:a7:16:8b:8c:c8:f3:fc:fa:de:8d:
6c:cf:ab:1c:13:04:3a:c8:c3:b7:11:f6:ff:2d:04:3f:a9:b6:
d3:72:ae:90:a0:54:63:10:c8:d9:73:71:9b:ce:c1:2a:e5:c1:
c3:a0:0a:74:4e:89:c3:c3:1a:73:04:98:1d:45:0f:7b:e7:e7:
aa:17:8d:cc:7a:f6:83:3e:fd:fb:f5:0d:8d:46:d2:84:d9:93:
2b:67:76:06:d8:3d:8f:24:49:73:6d:ea:46:a5:fb:47:14:3f:
76:57:1b:b8:08:08:6b:d4:17:a3:3b:62:84:ba:7e:c4:8b:f8:
ae:18:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:09 2025 by rpki-client