Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: cG7fr2VWAWM/MqdW12pzVGbL7I8eMrzV4vfGjDfpGaY=
Subject key identifier: 52:CE:80:64:18:97:11:D7:20:8E:BD:94:72:11:4E:26:C6:D6:08:04
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 0194BBCE7B8B20AF0C5D5E067E19F7A72463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 09D2
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: evPXNB3tO/vJGniSIbVSWIkZBOqd6ELZzAnp3aBMYNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:8b:20:af:0c:5d:5e:06:7e:19:f7:a7:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=52ce8064189711d7208ebd9472114e26c6d60804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:22:d3:e9:c1:b4:65:a3:aa:ce:67:3f:9e:
d4:54:fd:dc:0a:b7:55:7c:8b:7b:61:a4:34:11:d7:
48:62:57:00:3e:4e:a2:4e:e5:79:6a:d0:77:bb:84:
a6:77:d7:70:98:3e:e9:2a:0c:b6:f8:3e:ff:ad:84:
ec:a8:ac:f9:4c:49:02:64:73:82:87:de:90:f7:1f:
ad:c1:bf:d7:f6:56:2f:f9:8d:45:33:1f:1f:fe:5f:
ac:d7:55:24:65:de:32:99:8f:80:05:55:fb:2c:e2:
57:e7:bb:1e:9e:04:bd:40:45:60:df:03:99:f0:dd:
6b:cd:55:2d:2c:e0:1d:b2:7a:0e:c3:67:6a:20:55:
5e:58:ed:18:43:0a:41:7d:a0:63:6c:fb:bc:7f:6e:
c2:dd:bf:2b:60:e9:4f:6f:6b:ac:b0:e3:63:56:dd:
73:df:83:86:e8:ec:ef:e6:72:4b:df:64:da:be:2c:
86:b9:2f:eb:4a:c3:ca:95:20:7f:82:7e:a6:cf:52:
db:87:d2:4a:52:65:18:b6:af:3f:40:50:29:77:12:
18:38:2b:2c:c2:47:c1:2a:ba:fe:8a:11:bf:92:b9:
b8:17:e0:15:3e:35:37:99:b0:85:07:3e:52:e0:30:
81:c0:a7:bd:4c:13:82:f2:a2:2c:18:7a:49:cb:b4:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:80:64:18:97:11:D7:20:8E:BD:94:72:11:4E:26:C6:D6:08:04
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:96:3f:70:76:49:7a:f4:cf:98:7b:67:b8:b3:9d:4b:f0:b2:
b2:96:b0:42:f3:65:29:a1:fe:c4:69:48:35:4b:75:db:83:f6:
86:d2:55:6e:57:ed:49:93:8f:21:ba:7b:b3:81:d7:ed:80:37:
73:4b:58:5c:3d:0e:77:1a:cb:69:7d:ef:94:10:65:84:26:b0:
6b:b3:74:f9:93:8c:b8:5d:3f:b2:fc:0c:f7:04:1d:ce:b9:99:
4b:07:79:68:24:82:cd:84:96:b5:43:2d:b5:a7:77:21:89:f0:
96:1b:c7:c8:05:2f:5b:52:fd:94:02:2d:c9:92:ef:a0:4c:79:
fd:96:eb:cb:13:b6:5b:4c:16:3c:23:cb:5c:15:71:4b:88:01:
9d:70:48:c1:ef:c6:ed:9d:a3:72:89:ae:55:14:cc:f6:b2:f2:
fb:cd:d9:76:95:55:3c:38:e6:49:42:18:95:ef:8b:73:5c:c0:
a7:8e:f3:66:57:db:c0:15:e7:b9:f6:19:22:f0:4a:32:60:e6:
bc:8b:48:d7:e5:ea:c1:a2:9b:7a:45:ab:b3:e2:28:f4:9f:ce:
be:b1:9c:7c:7f:1e:80:a5:bd:c3:48:e4:75:e1:c6:d8:ac:5e:
0b:07:16:fd:13:8f:63:60:e8:29:8a:0d:8c:c9:a8:e5:e0:5f:
7c:ed:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client