Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.mft
File: J1jKBNQK6JpPgspgLK8-93edhf0.mft (raw, json)
Hash identifier: S73pppRJPhhPLl837D2Hfl1ctxSyLQoDWLz+qLl5qsI=
Subject key identifier: 87:D7:6A:26:63:84:35:A3:04:65:51:27:E4:D4:7F:04:A8:C2:0D:3A
Authority key identifier: 27:58:CA:04:D4:0A:E8:9A:4F:82:CA:60:2C:AF:3E:F7:77:9D:85:FD
Certificate issuer: /CN=2758ca04d40ae89a4f82ca602caf3ef7779d85fd
Certificate serial: 018BF4F8B9A4C141715172D4147807B6E5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1jKBNQK6JpPgspgLK8-93edhf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.mft
Manifest number: A3
Signing time: Wed 22 Nov 2023 03:00:22 +0000
Manifest this update: Wed 22 Nov 2023 03:00:22 +0000
Manifest next update: Thu 23 Nov 2023 03:00:22 +0000
Files and hashes: 1: J1jKBNQK6JpPgspgLK8-93edhf0.crl (hash: 7VUNN2y30zK4xnqJl0hfAzSMnmottyR0tvFOISIT7eU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:f8:b9:a4:c1:41:71:51:72:d4:14:78:07:b6:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2758ca04d40ae89a4f82ca602caf3ef7779d85fd
Validity
Not Before: Nov 22 03:00:22 2023 GMT
Not After : Nov 23 03:00:22 2023 GMT
Subject: CN=87d76a26638435a304655127e4d47f04a8c20d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:33:77:6c:27:e5:b3:bc:ae:01:3f:aa:a4:
ce:28:ff:9a:15:ac:4c:c1:d1:9e:fb:e1:c5:d7:f6:
bc:8d:16:e5:73:39:f6:0e:e6:35:b3:47:0b:68:92:
90:63:2e:ad:ed:78:89:c2:5f:e4:be:1e:8d:33:47:
b0:06:a8:b6:2f:66:71:e2:1d:9c:d1:d5:ba:6c:c9:
7f:f8:6f:06:9d:1e:40:a1:8b:4d:4c:0a:f4:73:95:
28:49:95:41:19:9d:3b:b2:cf:b5:db:06:95:86:64:
66:02:aa:bd:42:44:7a:c1:74:0a:43:32:78:20:d2:
c9:4f:48:9d:f0:ed:5f:17:7d:a9:6a:62:0a:5f:4d:
95:15:0b:9c:23:cf:f8:f4:3a:b0:70:00:1f:2c:b2:
c9:ec:5f:28:9e:31:7e:8c:ff:37:58:d4:a2:5b:bb:
65:40:f0:f3:cb:a9:5c:de:49:0e:09:a5:1b:b3:f6:
c9:0f:a5:51:78:ed:c1:4c:be:15:ef:37:fe:2f:db:
1a:00:32:26:42:26:5c:8c:b5:2b:f3:e2:db:cc:5d:
89:3a:95:b1:9a:e3:ca:02:89:76:d7:14:58:3f:a5:
9d:f1:23:bd:6b:69:3f:52:cc:a0:5f:a4:80:fd:1d:
b5:eb:80:d2:d0:86:2f:c4:a4:43:79:97:70:a4:3b:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:6A:26:63:84:35:A3:04:65:51:27:E4:D4:7F:04:A8:C2:0D:3A
X509v3 Authority Key Identifier:
keyid:27:58:CA:04:D4:0A:E8:9A:4F:82:CA:60:2C:AF:3E:F7:77:9D:85:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1jKBNQK6JpPgspgLK8-93edhf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:95:fb:33:30:29:ea:b1:bb:ba:60:cd:74:a4:5b:a3:7d:
5f:45:64:d7:b2:ed:8c:c3:ca:a9:f8:2f:50:df:79:91:72:2a:
7d:25:5d:26:d4:fb:99:2a:54:75:4a:0c:c9:15:5f:d6:0a:f6:
9a:d3:e1:24:23:ae:df:b6:ef:58:03:ce:f5:f9:7e:2b:12:d1:
cc:1a:d5:5a:13:22:ab:44:b7:26:b0:cd:29:21:7f:3b:55:ad:
21:f9:74:21:41:74:4e:5c:ba:b7:b3:55:d7:b3:26:b6:8b:5e:
40:fe:47:ab:27:20:12:c1:6a:88:0e:14:d3:76:65:80:b9:fa:
2b:30:bc:1b:9d:19:61:55:08:23:c1:3e:ea:82:30:cb:40:0f:
64:93:b0:2a:cc:07:72:eb:0e:3b:81:12:92:77:74:2f:c6:ed:
f8:2a:92:f6:4b:1b:27:05:e1:4f:ba:f6:58:05:5e:22:33:01:
1e:77:c7:5a:bd:fd:f3:02:03:96:ca:97:63:e2:7b:26:ca:1b:
27:8e:e1:db:52:69:ea:7a:07:94:fc:d5:8b:33:df:0c:80:9a:
77:59:a3:87:ba:b8:b3:b4:19:e1:f7:48:42:d9:59:5f:63:b8:
0b:21:e0:f6:82:92:f5:39:b2:06:1e:29:b2:61:05:ab:f9:43:
52:ca:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:04 2025 by rpki-client