Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: CLRUCh9nToJSsQep/io13UgZDkcs6dpH3bWkJFz4Wsw=
Subject key identifier: FB:0E:57:74:0C:74:AF:4B:3F:92:BE:2A:88:82:9F:09:B9:27:F0:45
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 0194BBCE2B88974892A81F9B695AE8E15BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 11A8
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: 0qIpxbWi8jg53WTyZoUszDw8T+W9YhJmchl7w0PpgHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:88:97:48:92:a8:1f:9b:69:5a:e8:e1:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=fb0e57740c74af4b3f92be2a88829f09b927f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:b5:17:b5:8a:48:43:fd:d0:ff:86:e9:b8:
ac:c5:fa:b7:2d:5e:e9:e4:c9:63:9a:49:6a:e3:bf:
80:74:59:ef:d3:f0:c5:86:fd:a1:2e:b1:c6:ae:c0:
a3:55:69:20:f3:b5:d4:f3:de:7d:1e:c7:63:2c:de:
e6:65:f5:86:84:52:07:9a:70:98:a2:cd:00:cd:30:
59:88:4c:f6:0f:94:e9:a5:b4:c8:39:22:9d:45:3e:
d7:52:41:e9:dc:1a:b5:71:5a:96:b7:08:bd:2f:e6:
80:5b:51:50:91:5d:28:6c:3c:f2:21:c3:97:22:7a:
c9:aa:a4:f4:8c:e7:a3:18:6c:9d:9c:b0:7f:c5:48:
d6:c0:7f:8a:31:88:e0:e7:f0:50:5e:6d:d1:e5:4f:
ca:91:c3:b2:03:80:c4:6b:cd:e5:99:c4:ff:0d:04:
4b:e1:3b:2e:a0:b5:cb:53:7b:57:b5:e9:09:a5:52:
1c:51:51:b4:ed:2a:fb:d1:8a:04:45:69:03:85:8d:
c1:0e:32:53:6d:e8:0d:b3:78:4d:38:a3:6c:a3:bd:
cb:8b:1e:e9:77:ba:54:de:78:a7:c7:1f:0f:ba:fe:
f1:5f:13:01:a7:39:62:81:e5:08:2e:cb:23:29:8e:
df:e3:40:6e:19:65:f2:95:d1:ec:9b:99:50:2c:e0:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:57:74:0C:74:AF:4B:3F:92:BE:2A:88:82:9F:09:B9:27:F0:45
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:0d:db:d6:6f:47:34:9a:1b:e6:e9:51:72:32:0f:9b:d6:
55:c5:bc:42:40:f2:35:dc:37:d0:89:23:a1:50:1d:a2:e3:e2:
22:68:1e:a5:78:c0:17:16:cf:62:06:2d:c0:7b:0a:0f:8c:03:
35:1d:80:de:d9:7a:d6:c2:c0:7c:2a:06:ea:9d:69:74:6b:19:
13:89:e5:e2:5a:73:1d:e3:59:bf:0c:08:45:96:d6:31:f1:eb:
15:0d:25:87:59:e7:b5:d1:f7:30:11:2a:ba:af:bf:65:2b:89:
4a:f8:11:16:53:8e:15:e4:64:f0:86:b1:51:00:61:84:ff:f3:
ad:83:2f:26:31:d3:de:1b:ef:f8:74:b0:9a:74:7c:c0:59:f3:
05:ba:01:af:d5:8f:02:2f:2d:36:88:40:cd:fd:84:40:77:f3:
56:05:0e:57:ff:6c:45:f6:73:9c:cd:89:9c:05:33:c9:cf:64:
9e:aa:c4:35:30:43:92:71:eb:0b:26:25:2b:56:d8:da:0a:97:
e8:f2:c4:9c:05:fd:ad:8f:0c:07:47:ee:9e:73:50:a7:8f:66:
ff:68:ca:59:e6:b7:9d:e0:91:95:30:aa:a3:5a:3c:63:5f:1d:
92:05:44:84:78:d0:d8:ba:7b:b2:a4:2f:a7:c6:e2:82:e1:63:
86:19:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:39 2025 by rpki-client