Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: Y11jv200iLUKC047PbdWpKRvvWd0AgMU2dvaEzkGIpE=
Subject key identifier: 3F:D3:FC:76:7D:A8:B6:57:50:8B:8C:9D:0A:48:23:B5:59:7C:42:99
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0194BC3C2064CC5080BCD186DFAC994C6544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0CCB
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: xuCrQyBHfUnNKBfI8rXYjj+5b+ffSV+ZyFRbGgQsF60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:20:64:cc:50:80:bc:d1:86:df:ac:99:4c:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=3fd3fc767da8b657508b8c9d0a4823b5597c4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:17:8e:4d:78:28:4c:4c:2d:49:a1:2d:0a:
cb:15:55:77:d9:b0:94:c5:b7:cd:f6:0f:30:c3:53:
e7:fe:fc:61:cb:b4:33:ee:7b:7e:60:ce:c8:0f:73:
d5:1d:0d:3a:12:8d:f0:36:12:cc:3e:5b:ce:03:4d:
51:67:e0:1c:1d:c0:eb:b1:2b:7c:45:d9:71:99:13:
f2:bd:9b:f2:bd:ce:e9:e0:5b:9c:85:37:f3:21:2f:
45:e0:a8:ca:3b:ca:07:63:56:6c:7a:d1:a7:4a:4e:
0e:fe:f7:29:0b:7f:ec:d1:cc:9d:0a:e3:14:6f:c4:
ab:c7:9d:33:92:72:17:03:a2:ff:47:a9:24:f4:22:
83:8a:54:5f:f8:bd:77:8f:75:70:f7:ae:8e:34:82:
ee:f1:c1:bc:45:a9:67:29:cd:e4:db:d1:55:00:8d:
76:3a:eb:cd:fe:6d:5a:8a:4b:0c:b5:a8:de:ca:e6:
c8:8e:7f:86:8c:75:78:43:d5:30:30:b7:be:fb:ab:
43:34:19:82:58:3d:3a:d1:04:45:af:ac:e8:9c:d8:
d9:e2:12:21:f4:bd:02:b1:0f:a6:ab:46:bd:32:48:
27:af:1c:fd:38:c7:5c:98:72:b7:e5:76:29:6c:91:
a9:fd:1f:f1:61:ad:64:19:2a:6a:c0:14:cf:51:01:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:FC:76:7D:A8:B6:57:50:8B:8C:9D:0A:48:23:B5:59:7C:42:99
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0e:dc:28:f4:53:e4:00:f2:39:30:ad:42:95:cf:f3:b3:c3:
2d:f5:af:9f:ab:a6:d1:54:19:06:ab:86:f3:e5:d5:c7:ad:7e:
34:32:4a:0e:f9:51:3f:44:5b:61:23:4f:7c:cc:bd:19:0f:6b:
22:5c:f4:4a:90:af:c4:5d:c8:08:c9:55:68:7c:f6:c9:22:6e:
89:54:00:5c:1d:1a:92:f5:97:40:a8:95:83:4f:a0:f7:f5:b2:
69:0d:04:ae:35:39:95:e8:d1:be:6d:ae:fb:40:d1:c6:17:3d:
1b:42:00:a1:87:2c:33:7f:96:f8:36:45:9d:4d:6e:f4:17:03:
99:e1:21:3a:fe:2d:f3:25:94:6b:99:0a:40:2b:60:ae:d3:96:
25:0f:e6:12:84:64:d5:17:85:a2:29:5b:8f:d5:3b:be:18:12:
5a:cc:43:ab:66:76:b7:8c:19:fe:91:74:a7:3b:4b:fb:b2:c5:
bb:cd:f9:47:98:ac:43:2f:9c:9c:d3:7c:2b:96:75:ce:b2:56:
c5:9e:08:9c:02:72:96:56:81:f5:0c:21:1d:a5:63:49:08:36:
ec:0a:da:f8:e6:f9:cc:58:59:a9:8e:44:3d:4d:82:2f:6b:f8:
d9:f3:25:77:15:19:5d:0a:9b:f9:c0:95:d3:8e:8c:cc:a2:c5:
3a:67:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:02 2025 by rpki-client