Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: Zi8FuGAiM6WbNtsZISIXMFJ9Ho0E3xHRVlKpEWvRLCE=
Subject key identifier: 84:25:44:93:B7:E0:4C:4B:42:53:D2:3F:EC:A3:55:F5:3B:D2:DD:31
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 0194BCA9A7A9CF392E1FFAFC37AC17A339D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0594
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: aJbpGRtu+cGg8Wkx1kn1GtcJXUh0a7MpVSBiVWyD/5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:a9:cf:39:2e:1f:fa:fc:37:ac:17:a3:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=84254493b7e04c4b4253d23feca355f53bd2dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:9a:cc:57:bd:87:f2:a4:6a:58:5d:6d:5d:
db:73:79:16:74:ab:0e:cf:6c:47:b7:28:ba:60:97:
d7:75:f7:64:1f:88:79:ac:24:36:8f:6f:fa:73:f7:
70:85:01:09:ec:13:5c:10:9a:dc:78:c0:43:95:8e:
3b:14:c6:e1:c6:6e:d0:7e:61:09:e6:8c:0c:5a:ca:
c5:f1:8b:b4:d8:0f:75:fa:44:4e:2e:30:1a:25:d8:
8e:ef:c2:fc:92:1a:3e:10:3e:c5:a4:06:b1:56:1b:
fd:58:28:4f:eb:53:e1:d4:fc:40:69:41:ce:e2:97:
10:99:72:f3:e7:37:d9:ac:49:84:21:91:03:6f:08:
d9:ce:d9:4b:50:63:81:bf:a7:69:65:85:67:57:f5:
8c:ad:5e:bf:3c:de:e0:04:7b:0e:a4:0c:f4:d4:0c:
d5:b3:25:9c:3b:60:29:ee:87:7e:ea:ac:d1:f7:8c:
f5:ce:47:e4:91:ce:cc:60:31:82:c7:37:88:c7:a1:
e7:82:cf:4b:d3:48:08:36:ba:7d:1a:e8:cf:a7:ac:
22:66:55:c7:e2:2a:7c:aa:e5:d0:8a:83:31:1a:3f:
53:19:ed:a5:c5:a8:fe:47:7a:6a:90:a8:68:d6:c0:
7c:9c:4e:5c:02:61:27:fc:5a:f4:9d:4a:91:ea:02:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:44:93:B7:E0:4C:4B:42:53:D2:3F:EC:A3:55:F5:3B:D2:DD:31
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:1b:80:42:cf:da:2e:81:bf:fc:10:4c:37:04:12:96:65:
50:f1:46:28:06:8c:3e:76:50:ad:9b:34:7f:9a:e3:7b:5d:b7:
e2:ef:3d:4f:e5:1b:78:83:cf:0e:cb:96:88:e8:e8:2a:73:d6:
cd:3e:01:ed:be:a8:33:22:df:41:0e:d6:94:b6:e8:1e:4c:9a:
7d:dc:e0:12:6a:51:29:8c:fd:fd:16:09:58:6e:b7:65:0a:f5:
6d:9b:01:4b:84:32:91:30:ce:96:84:d4:62:b4:36:76:0f:b7:
4a:f5:ab:2a:c4:3b:dc:05:93:81:15:4c:79:4d:88:03:9d:1b:
3d:84:cb:7e:88:d1:f9:2a:23:33:49:19:5b:83:0a:3d:cd:96:
7c:c1:fe:e5:52:1a:57:30:c2:a3:01:c3:d3:74:2c:ee:70:d2:
26:45:2c:38:c7:43:44:44:2c:e9:34:0c:c7:09:c2:40:2d:bd:
6c:3c:8b:b2:8f:e2:de:50:68:5c:0f:cf:53:b5:c8:22:f1:ac:
5f:cc:7e:87:fb:1e:bb:8b:1f:66:ea:21:5d:b9:d1:e9:c8:14:
ee:40:9b:f1:94:be:20:79:30:cb:5a:f1:0c:89:ab:ae:55:86:
5f:34:19:a7:0e:00:6b:36:d3:96:4b:10:7b:00:72:7a:f1:9d:
a0:ff:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:51 2025 by rpki-client