Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: ZjieW/rrC0fo0z5QJV/xPjIwfY3Mc/qux8mn44/ajvI=
Subject key identifier: E9:66:3E:C1:A9:C7:EF:6A:D1:D6:1B:14:DA:D8:67:F0:C2:89:85:C3
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 0194BD17E082FA49F06B4EE55CCDC5055679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0D5C
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: Xz8MLJm+ZxMzyOua186QJXgcFX3oAPzFtQtVqWVF1dU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e0:82:fa:49:f0:6b:4e:e5:5c:cd:c5:05:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=e9663ec1a9c7ef6ad1d61b14dad867f0c28985c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:50:f7:23:b3:e2:ca:ee:2a:d4:63:6f:17:
9b:2d:80:30:07:49:28:c7:fc:0a:74:72:c2:62:46:
57:30:6d:2e:ba:00:78:35:c1:23:42:34:69:46:92:
1b:3b:ba:eb:20:d9:09:e3:fb:97:5a:28:02:7a:b0:
77:90:8c:8a:8b:75:06:ca:03:d8:82:4c:0f:54:69:
35:62:a7:c4:2c:c9:69:9e:32:ef:06:96:65:69:d2:
2f:ce:9b:aa:b1:29:f2:68:31:82:95:bd:88:50:67:
5e:17:f9:2d:63:2c:3e:21:6c:44:96:65:be:4d:d9:
a2:7f:05:57:b2:27:06:c4:14:fd:92:c2:db:d2:fe:
4d:8b:95:0f:bd:3e:14:66:e1:58:50:1c:3e:5c:5e:
ea:68:75:1c:68:a0:d1:0a:81:7b:d4:8d:84:2a:09:
b9:3b:02:ac:d7:c4:e4:42:3a:aa:77:10:e5:ab:66:
66:87:70:5b:55:ad:7d:c0:be:68:06:ee:42:f0:22:
b8:57:bb:cf:0b:c1:7e:8f:06:ce:38:35:1d:74:89:
6a:2e:f7:84:44:16:ec:8e:5d:5b:6e:0f:31:90:8d:
04:b0:48:1d:7a:99:5d:e9:6c:c2:d3:08:d6:c8:f5:
2b:82:18:78:39:55:c3:20:f8:8f:53:c6:80:11:e3:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:3E:C1:A9:C7:EF:6A:D1:D6:1B:14:DA:D8:67:F0:C2:89:85:C3
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:b4:44:12:50:fc:9d:29:2b:eb:3f:16:d6:8b:c2:42:ed:
ad:39:fa:cc:df:7d:a0:a1:ee:a8:14:a0:f0:2a:12:b2:40:ad:
df:c6:fc:58:25:09:3b:c4:ae:96:a7:e6:40:a1:aa:28:a5:79:
a5:b8:76:f9:bb:dc:26:8e:31:a8:0e:a9:a3:3f:86:58:b6:33:
e5:6f:cb:75:34:7a:8c:68:0b:ee:a7:e3:95:79:bf:00:0f:36:
94:12:eb:f6:2d:a5:a6:a3:9a:d5:f4:2a:78:fe:63:5e:0c:90:
00:d6:f8:b0:6b:4b:74:60:d0:2b:b6:a2:9e:3f:02:99:34:08:
35:10:3e:3b:93:f6:e5:fa:f9:f3:65:3d:2b:a0:4b:30:12:98:
e4:a4:43:4c:c2:92:66:81:d9:e8:18:f5:e9:d1:76:c9:2a:aa:
ef:d9:bd:ea:50:07:2f:74:7d:a9:4a:91:23:f1:5a:4a:d9:35:
de:58:2e:99:6b:f1:4c:b7:a8:65:36:71:66:7c:c7:9a:02:96:
c9:8f:34:46:fe:1d:f1:b5:a2:39:06:19:bd:73:75:4a:d0:48:
8d:7d:88:1a:e6:a0:f1:e2:74:05:d4:45:47:8f:42:d1:06:e1:
b4:78:e8:f9:03:e2:33:e8:b9:0c:b0:d2:c9:12:4a:c6:ae:c6:
e7:1a:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:48 2025 by rpki-client