Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: mMcMXy/6+XzcaNijBy6B5eawy4SzhaVEeCOOMxCzEMQ=
Subject key identifier: 9D:46:2D:0F:56:13:77:FA:D1:31:2E:77:E0:C9:27:19:B8:AD:7B:C5
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0194BC72940855B23F8311F25E70053D9B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 3RcupFJLTHcmeaoGTgag9J74yYxMGgCmsgI1D+Rbb1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:08:55:b2:3f:83:11:f2:5e:70:05:3d:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=9d462d0f561377fad1312e77e0c92719b8ad7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:20:91:6a:fc:e9:79:69:c9:f8:4f:55:62:
e3:8b:f7:7d:b5:fe:b0:41:09:61:31:2f:2d:55:02:
41:8e:f5:08:e4:76:74:74:ee:49:db:b4:72:12:ad:
bc:67:60:16:79:02:6f:c0:a5:45:a8:e4:6b:83:a6:
98:6b:07:5d:4e:2c:7b:32:2e:c3:be:85:44:99:58:
13:1e:ed:ff:44:14:28:be:5f:77:f2:e4:09:a7:ca:
87:dc:45:b1:7b:9a:12:3b:0f:20:7f:96:7e:6e:ae:
2a:a4:d3:c0:d4:08:e5:69:9e:a8:14:0a:c0:2c:bd:
43:fc:72:77:f2:46:be:64:05:20:67:28:68:55:fa:
bd:c7:96:7c:1d:65:12:d8:43:a1:78:7d:ef:e2:40:
af:0e:a1:58:f3:d5:3a:37:be:2f:fe:24:b7:c7:b9:
ee:5c:c6:d0:7d:52:d5:d7:8c:bc:2e:d5:78:81:2e:
41:7c:00:41:95:6e:93:70:33:3a:a5:26:8f:e7:f1:
7c:33:23:e5:4e:5c:d1:a5:c0:24:34:e2:98:9b:d3:
b1:b9:0a:34:8b:a1:03:3c:c8:07:b8:1b:09:ce:87:
16:ac:2e:b0:c5:86:89:e9:43:2f:69:09:c7:30:2b:
ee:b2:f9:a0:50:b2:ea:83:59:5d:94:03:2e:5c:f3:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:2D:0F:56:13:77:FA:D1:31:2E:77:E0:C9:27:19:B8:AD:7B:C5
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:27:36:4d:d9:81:5e:ce:92:ff:ac:7c:da:4b:88:91:72:
c7:09:8c:d9:0e:ad:4e:96:ab:d5:7a:ca:30:50:a1:e7:ab:75:
3c:99:20:0a:5b:e9:d9:7e:b0:0d:9a:49:50:b0:3a:cf:44:56:
73:56:4b:95:41:10:e1:58:a8:09:d2:d8:36:76:d8:b2:6d:19:
bf:dd:f8:82:c3:e8:2a:a2:d6:9b:6f:08:71:35:50:0c:9b:ce:
b8:bd:0c:47:8b:68:af:94:96:92:be:af:97:cb:69:25:f6:34:
1c:5d:b8:a8:28:1c:2e:90:f8:bc:6f:fd:79:18:63:5e:97:36:
bd:c4:7c:a2:76:e8:23:c4:61:c7:b6:ff:ca:47:90:39:81:81:
1f:4a:31:c7:55:92:7b:70:e7:06:83:a9:77:7e:ed:d0:24:20:
02:26:79:33:43:99:f9:e7:9d:cb:35:37:45:1d:05:1b:58:13:
46:f5:98:f7:f2:95:f7:17:28:79:c4:82:25:79:0a:dd:0d:6f:
1f:75:62:ae:60:7f:1d:41:21:76:75:06:66:50:6e:d5:b0:65:
39:1e:3b:aa:74:bb:5c:29:b4:53:3f:15:28:1e:6a:cd:6f:d2:
8b:c2:e6:d8:51:ad:b3:f9:cf:61:46:65:71:37:fd:89:1b:21:
a6:cb:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client