Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: C8Nfwii1yi6QgDaz6muKZ+aJ7HOTRLdXJzCKh/Pl7gc=
Subject key identifier: 0A:6B:25:68:09:F8:42:D6:8D:D3:58:07:EF:B3:9F:77:6F:D0:AC:FD
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 0194BC3C7434CA8C588E3CECF0096FCFE266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: rJn7tD+L/UXQ7m9y3WrCm3APRbPI5Nk1AT8iy6zwMJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:74:34:ca:8c:58:8e:3c:ec:f0:09:6f:cf:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=0a6b256809f842d68dd35807efb39f776fd0acfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:ff:32:c7:d0:fe:43:b2:82:39:2b:01:22:
54:e5:4e:51:96:c1:ea:98:f1:9a:0f:2e:36:93:e0:
ad:c0:95:09:e3:78:4e:3d:97:11:b2:66:af:b9:b2:
51:39:87:d6:3d:fd:1a:65:0d:8a:32:17:ad:02:01:
df:a5:fd:74:db:e9:71:08:13:ff:33:41:c6:57:72:
e6:fc:4a:4f:b3:89:92:5b:c9:73:97:ec:e5:95:98:
65:ed:13:f7:74:ef:dd:9e:04:23:0a:dc:ab:dd:f8:
9d:6c:15:1d:b4:fe:21:ba:1c:72:83:48:08:84:c1:
fe:df:6a:57:9e:fe:da:22:eb:15:6b:7b:58:23:46:
20:93:1d:ea:70:04:4a:2c:50:d4:10:0f:20:83:06:
88:af:92:59:57:30:42:ee:8f:d5:01:d1:04:bb:4d:
fe:66:c0:5a:c6:ea:27:1b:fb:ea:0f:25:2c:92:bb:
28:12:92:04:96:7a:b7:99:82:bf:2d:73:d0:8d:63:
a9:ba:8e:2f:0a:f2:8c:ca:c0:7f:1e:d7:a5:72:e8:
45:e4:cf:fb:85:f8:0d:69:99:b1:fd:8b:87:f4:82:
f0:ae:db:4e:51:55:88:81:ee:da:47:59:b0:dd:2f:
29:e0:4c:99:79:95:a2:a4:b9:b5:46:94:1f:f6:65:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:25:68:09:F8:42:D6:8D:D3:58:07:EF:B3:9F:77:6F:D0:AC:FD
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:2e:f1:35:a2:dc:ab:5c:5e:84:f2:16:6a:8b:57:83:cf:
09:b6:e2:fe:59:7d:da:ca:a5:28:4d:33:41:27:19:90:d1:b6:
45:4d:e4:48:89:e5:55:da:ed:d4:e3:fa:b5:49:d7:74:5d:d3:
67:88:b3:c6:42:a7:ea:9e:1e:77:e6:38:94:86:52:ee:1f:94:
9b:65:e6:88:34:5b:77:41:65:5f:0a:c4:00:21:31:04:5e:b5:
a3:40:6a:68:eb:b5:13:40:87:e5:ee:f7:c2:06:d1:e6:9f:ad:
9e:cb:97:89:d5:8b:5e:c4:b9:1a:bc:5d:04:94:6c:72:22:60:
2a:b0:c8:67:43:60:16:95:fb:47:f0:69:34:ae:f3:50:39:55:
65:eb:42:6a:e1:2e:24:35:ee:4c:df:10:c2:7d:a8:18:a8:0b:
35:2b:c4:36:ce:4b:36:7c:49:01:af:ca:5d:ca:4e:ab:a6:e8:
37:8e:5d:f5:ac:c8:80:66:be:c8:aa:91:75:87:c8:34:ca:50:
a1:d3:f1:9c:f2:05:4e:41:9e:0e:32:78:7c:56:68:7b:fe:19:
87:0a:40:87:38:2f:1e:3d:f0:8f:f2:b1:3d:87:5d:b0:65:c0:
de:a3:c1:7f:52:df:e6:9e:ee:c7:b1:9a:87:55:d1:59:35:f2:
7c:3d:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:09 2025 by rpki-client