Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: WbZF2/DK2oRp0EMLpV42g3yvKiih2b/x3xY3cyWMAM0=
Subject key identifier: 4D:A8:44:05:18:C5:6C:12:2D:FF:1A:1E:26:30:B1:98:C7:FF:B5:6A
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 0194BBCEF579D29E973FEB1C2D70C74F312D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: iQ1wZUijvp8fN5m7djGPLIZ0FLrWOimAriTAvlbZUo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:79:d2:9e:97:3f:eb:1c:2d:70:c7:4f:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=4da8440518c56c122dff1a1e2630b198c7ffb56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:74:97:fe:4a:f3:6e:ba:63:e5:7f:5b:e3:
30:7f:8a:45:d9:3f:97:75:9a:cb:6d:f6:19:f1:5d:
95:a3:27:a5:19:ad:d9:b4:fe:42:db:84:19:5c:ee:
33:2d:29:4c:6d:12:2d:15:ee:ae:9e:23:22:8b:c1:
4a:38:cb:a1:a3:cf:cd:c5:db:46:af:ea:dc:7c:b7:
ce:0b:93:d8:29:b1:e9:00:8a:e3:13:39:be:11:42:
37:ae:27:58:be:c0:05:72:96:cc:e8:d7:60:57:0b:
d1:79:22:a1:20:5e:42:c3:27:0d:8c:55:cd:13:aa:
1a:5b:ef:10:8e:f3:dd:bd:01:7a:a4:ea:d7:81:16:
75:63:f2:14:cf:4a:89:97:09:c1:d3:87:05:f6:e5:
60:bc:52:5f:30:d2:49:ce:fc:54:d1:a6:d7:8a:d7:
6c:fc:54:f4:64:c1:2d:c0:d9:d2:ed:43:43:7f:8b:
0d:6f:08:d6:5a:ad:70:05:5e:7a:1c:71:80:ad:26:
24:fe:d4:59:ce:df:24:af:28:52:e1:f9:8f:de:6b:
ca:3b:97:e9:92:20:b0:f9:f5:7c:76:39:f9:6f:52:
79:f1:0a:2a:89:14:18:94:b3:c6:68:8e:e7:40:c5:
70:60:8a:4a:a7:e8:bd:51:34:76:b8:a3:01:a5:9b:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:44:05:18:C5:6C:12:2D:FF:1A:1E:26:30:B1:98:C7:FF:B5:6A
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4c:04:ee:29:6b:c4:88:53:24:b0:1f:8b:fe:c1:eb:45:50:
3d:c8:d0:c1:3d:46:0d:f9:ce:72:a9:f3:bd:44:93:5f:25:c5:
be:6e:5e:dc:8c:68:35:9e:07:fa:8d:26:8b:d5:5c:ba:14:d0:
9e:31:f3:25:12:0f:a4:33:5a:76:34:80:70:54:96:fe:d0:7a:
03:35:88:62:23:5b:e3:f4:84:15:d6:99:0e:e1:f5:a4:08:e6:
19:c4:17:8e:b4:f5:1c:ae:78:13:fa:91:a6:26:a4:f8:bd:77:
d3:11:9f:1b:ef:47:ad:7a:12:1d:e9:54:ab:be:78:d7:6b:4c:
ca:9e:82:a3:98:1f:3c:be:cd:06:53:9b:24:1e:a2:82:fd:66:
8c:e1:1e:48:6e:75:e1:f6:be:df:2f:24:51:ee:6b:7a:14:d2:
09:cf:73:86:0f:fd:56:88:fa:93:8d:ba:01:b7:05:3a:a5:41:
46:20:1e:c1:b9:72:02:df:10:ac:d8:35:3a:e0:20:d5:b0:d3:
7e:cb:63:a1:9f:80:6c:42:96:32:ab:5a:f5:b9:86:69:40:69:
3d:f0:8b:fa:3e:7f:51:ee:75:03:7d:29:c3:c1:ca:9f:df:69:
b2:10:cf:12:79:a6:22:86:0c:b3:ac:92:36:67:c1:56:76:01:
28:31:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:26 2025 by rpki-client