Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: KrLzJk/UGNe2Hok+89zzMOU0hNHhBfQ0jHNQQBuKk8s=
Subject key identifier: 54:46:5F:19:AB:CA:05:6A:D8:5E:9D:D0:D7:D9:2C:45:E0:E7:A9:66
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 0194BD17C75D3994E6799BC2616E37F2EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: bfdBR2Z8uuCLwqS6UjOvGNW4A9fb3DJfcx1/9SOv7l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:5d:39:94:e6:79:9b:c2:61:6e:37:f2:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=54465f19abca056ad85e9dd0d7d92c45e0e7a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:a9:c9:ae:e3:64:65:d9:be:78:14:3c:b5:
bd:a9:e4:c8:a0:2d:bc:da:b3:74:de:2b:16:20:9f:
1c:df:17:e8:75:98:4d:1f:da:7e:1d:85:b9:35:be:
b8:9c:07:15:fa:ff:b8:a5:e9:05:d1:83:12:b9:e0:
1f:9e:05:cf:8a:ee:cd:66:d9:8f:3e:b8:be:18:f2:
61:5f:c1:da:59:f7:ac:96:02:59:ef:6a:1a:3f:27:
8a:7c:39:07:bc:48:fa:34:ac:fe:84:fc:a9:5f:a7:
bd:d2:e9:9f:c6:5b:69:19:1c:c2:bb:8e:67:27:bc:
5a:92:4d:88:c5:d9:d5:08:6a:75:dd:30:3d:48:39:
3c:e8:21:50:50:67:7f:d8:80:02:53:49:d0:a6:7e:
9a:66:74:79:6d:a0:6f:03:af:3b:8d:44:20:00:e2:
9c:11:52:d3:48:f6:89:bd:ea:5b:20:cf:8f:ea:72:
05:c1:b2:95:4d:2c:a0:37:e7:7b:65:49:2b:69:a5:
4f:cd:1a:ef:12:67:83:9e:45:f0:7b:42:04:aa:ce:
8a:71:bf:96:7c:34:a4:0e:d6:2b:8f:67:7a:6b:0e:
1d:04:23:58:d2:84:e9:5d:ff:7c:13:58:be:4a:d4:
8b:c8:70:51:3b:0d:de:78:3c:f5:c6:a8:45:11:db:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:5F:19:AB:CA:05:6A:D8:5E:9D:D0:D7:D9:2C:45:E0:E7:A9:66
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cd:cc:16:87:f0:38:a2:1c:2e:d1:86:c9:60:cf:4b:66:53:
ad:e6:be:19:9a:82:18:6b:2b:92:f2:f0:da:00:3c:cf:79:fa:
3e:09:6e:f8:0a:00:d5:3c:50:9e:45:03:e7:39:42:fd:ad:bf:
64:18:0a:80:7b:e2:ea:49:6d:93:87:e0:5c:18:02:50:21:99:
60:24:7c:e7:2b:70:55:1c:d1:53:2f:88:fe:7f:b2:89:98:e8:
d8:e5:a6:15:5c:ea:56:e8:e9:86:fc:2a:d5:3d:ae:fc:39:ec:
f0:2c:05:84:9a:84:33:6a:a5:34:1e:f0:f8:d1:5b:63:2a:61:
16:04:f5:18:02:3a:3e:b1:2d:9a:05:e0:de:23:dc:cb:c3:73:
37:72:47:f7:3e:f0:a3:d7:30:4a:57:d8:bd:30:88:e7:f2:55:
52:94:ce:89:e3:21:dc:78:e6:ff:64:28:d7:61:89:68:82:89:
86:89:16:98:cb:d0:f9:a8:e6:d4:ea:9c:c5:51:5e:93:72:fa:
09:89:7a:0e:d5:2f:67:58:a9:8c:e1:df:13:fe:99:d8:16:6e:
af:ab:67:8d:24:0f:b5:e1:b1:f5:ae:01:92:cb:c0:9a:4a:9e:
03:e4:a4:20:a9:a1:c8:21:73:6a:2f:47:f0:df:d0:5a:3d:0e:
b9:6a:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:53 2025 by rpki-client