Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File: jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier: VtjdSG1UPjSdMWUMsRmUHWhxOV6jti29Dr0oqMr8X8k=
Subject key identifier: C2:F0:88:54:1E:F5:55:84:96:FE:DC:2E:A2:FA:04:E7:51:62:BB:C0
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer: /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial: 0194BBCE2969ECDFF28BE79C6CA0F294B125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number: 0519
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: oJcWcrwwNXkkLgwlzewO77H6thOncbP2WNAZ0XOyoUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:29:69:ec:df:f2:8b:e7:9c:6c:a0:f2:94:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=c2f088541ef5558496fedc2ea2fa04e75162bbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:2e:3d:5d:55:c1:0f:7e:69:98:14:ff:72:
c9:b4:fd:ec:2d:12:35:bc:71:ca:22:12:d5:20:51:
e6:af:04:27:ed:c5:08:cc:67:0d:9e:fa:b0:87:33:
a7:46:ed:3d:9d:2b:99:31:f1:d1:ef:2d:c4:ba:fa:
eb:9c:3c:63:d0:d2:2c:dd:7c:51:3a:68:11:74:ee:
01:4b:e2:77:dd:40:89:3f:e0:bd:cd:3a:59:ea:7f:
3a:3d:52:5b:fa:32:d1:db:38:b9:de:66:93:a3:b2:
af:2a:c9:56:0d:37:cf:29:b2:8b:14:fe:d1:da:1c:
a6:84:52:17:74:eb:1e:9a:ce:6e:f2:2a:3e:63:9c:
c0:5f:94:da:a4:8b:a2:90:74:a0:3f:50:29:4e:3e:
98:72:b5:07:fd:ff:86:2b:3b:01:55:de:85:c3:cc:
24:1a:36:c0:5d:10:c2:bc:d9:69:ab:2e:b6:d6:66:
0e:4c:64:30:9c:98:bf:bc:11:41:60:d2:71:c4:df:
65:e6:ac:af:d3:7f:9c:c5:0d:41:50:6a:f9:00:3a:
75:cd:d3:f6:c6:e3:75:fb:70:e6:20:30:9b:2e:d6:
87:9f:a5:cc:31:85:05:57:70:51:54:49:7c:80:54:
94:f6:b3:12:29:21:43:5f:bf:3b:89:d0:da:66:0e:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:88:54:1E:F5:55:84:96:FE:DC:2E:A2:FA:04:E7:51:62:BB:C0
X509v3 Authority Key Identifier:
keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:d9:b6:92:50:ac:23:f5:67:ea:ac:14:f7:c2:c6:33:fd:
00:89:a7:22:47:7a:8b:d3:2a:6e:d0:68:ca:8c:a1:76:61:e0:
1c:41:24:21:8a:a2:d1:c3:6f:67:3a:02:29:5a:11:99:d6:62:
fc:e6:9d:19:67:d2:cc:d2:5f:eb:ea:3d:ee:1a:07:c9:e4:df:
58:b4:0a:dc:61:e0:f2:a3:62:f9:b4:f7:44:ee:1c:44:7e:49:
1c:40:82:6f:c8:65:21:35:4c:41:2c:9f:8f:d7:7c:5d:c6:ed:
17:77:e5:2a:00:1c:e5:90:da:f1:df:46:f9:dd:b3:51:0b:08:
c0:66:99:e0:0a:85:47:75:70:61:b0:0d:87:e5:c3:93:ca:b6:
96:73:f2:96:35:4c:b4:35:9a:d0:2b:f3:6f:0f:75:31:ba:d9:
cb:e3:92:46:b9:3c:2f:ac:1f:5c:63:9f:30:bf:1a:9f:86:d8:
dc:50:01:68:88:4d:ce:58:33:21:80:56:73:6b:22:86:12:7c:
5c:30:73:3e:90:1f:6c:94:fe:ba:5f:4d:84:68:20:e3:41:e0:
fc:e5:66:30:f9:ff:c0:33:f2:3f:37:ec:71:44:89:0e:c9:97:
8a:a5:ef:a4:d5:17:b8:c9:21:c7:3c:a2:11:5b:17:0b:d4:d2:
35:27:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:43 2025 by rpki-client