Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4ac9cd-a7a2-4a06-bd58-39240dcda9b3/1/JHYhWKwpy0TxuArLBP9gvzwg-W8.mft
File: JHYhWKwpy0TxuArLBP9gvzwg-W8.mft (raw, json)
Hash identifier: XJFs5SOc92NWjIAwpe8In1jsBr5VWB5lqYjJR5yyoZg=
Subject key identifier: 07:D2:32:36:45:6F:A9:89:9A:42:A2:55:BF:1F:D4:60:DF:84:FD:A3
Authority key identifier: 24:76:21:58:AC:29:CB:44:F1:B8:0A:CB:04:FF:60:BF:3C:20:F9:6F
Certificate issuer: /CN=24762158ac29cb44f1b80acb04ff60bf3c20f96f
Certificate serial: 01889E180A3352A5B40C5C8A2A654B060C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHYhWKwpy0TxuArLBP9gvzwg-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4ac9cd-a7a2-4a06-bd58-39240dcda9b3/1/JHYhWKwpy0TxuArLBP9gvzwg-W8.mft
Manifest number: 01D1
Signing time: Fri 09 Jun 2023 02:59:15 +0000
Manifest this update: Fri 09 Jun 2023 02:59:15 +0000
Manifest next update: Sat 10 Jun 2023 02:59:15 +0000
Files and hashes: 1: JHYhWKwpy0TxuArLBP9gvzwg-W8.crl (hash: UEnKg9MELWSsZdiuiwqISiT0UM2pB0o59P0d0gxAEYM=)
2: dRaGJ8lsO45DjXMBq1JI-LQyooE.roa (hash: egO6OPDB47MRMxBl7T2cTP14iD9LeNePR/ZXeDkVOcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:18:0a:33:52:a5:b4:0c:5c:8a:2a:65:4b:06:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24762158ac29cb44f1b80acb04ff60bf3c20f96f
Validity
Not Before: Jun 9 02:59:15 2023 GMT
Not After : Jun 10 02:59:15 2023 GMT
Subject: CN=07d23236456fa9899a42a255bf1fd460df84fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:28:24:5e:0e:35:02:1b:07:d2:b4:fa:a8:
31:49:0e:2f:77:08:f8:b5:f8:23:37:de:e6:ca:fe:
b5:22:18:81:97:6f:be:23:10:50:05:71:38:2e:a5:
a6:69:1e:2f:2b:d4:92:77:ba:a8:cf:5d:b3:b4:d0:
a9:b1:23:21:e7:e9:a3:07:d7:1f:a9:bf:df:b9:fb:
09:31:24:64:bf:47:95:2a:61:4c:97:28:bb:06:a2:
9c:b8:2a:31:ff:42:9f:b9:44:86:52:58:1a:5e:22:
f7:97:2c:19:51:08:8e:29:63:a9:c0:f6:d4:35:c6:
4c:1a:56:76:b9:2a:ee:5f:d5:a0:90:bb:e7:e5:7a:
58:fc:a2:10:a5:3f:ab:28:23:cf:e5:01:1f:72:d4:
31:b5:21:4a:c2:2d:48:16:23:9e:a2:aa:72:87:c0:
27:9f:0b:f0:0c:e4:49:48:b4:f8:b5:b3:3c:54:54:
5f:4f:b1:a9:3c:8f:be:79:33:3d:44:ea:a5:d3:ee:
10:7d:77:53:83:7c:31:74:9c:8b:18:2e:93:19:bb:
41:9d:87:6e:6c:e8:ad:59:e0:1a:df:43:53:6d:71:
e8:0a:d6:31:00:bb:bf:b7:28:94:b5:8e:9a:bd:4d:
0c:8e:ef:7e:e7:8a:64:b8:a6:58:cc:56:a4:bf:f6:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:32:36:45:6F:A9:89:9A:42:A2:55:BF:1F:D4:60:DF:84:FD:A3
X509v3 Authority Key Identifier:
keyid:24:76:21:58:AC:29:CB:44:F1:B8:0A:CB:04:FF:60:BF:3C:20:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHYhWKwpy0TxuArLBP9gvzwg-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4ac9cd-a7a2-4a06-bd58-39240dcda9b3/1/JHYhWKwpy0TxuArLBP9gvzwg-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4ac9cd-a7a2-4a06-bd58-39240dcda9b3/1/JHYhWKwpy0TxuArLBP9gvzwg-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d8:c1:fa:e6:22:c5:f4:9e:66:dc:1e:d0:86:d6:56:8b:2f:
ba:4c:9a:d1:2d:78:e8:85:58:32:99:56:d4:95:1a:bc:2f:51:
9e:12:ba:71:d6:c3:d7:da:08:d9:0e:fc:44:4d:82:9b:ab:02:
86:cb:1d:39:91:54:e9:9c:32:47:ac:82:f8:e3:95:16:aa:85:
a5:e0:1c:4c:31:10:cd:6e:f4:b4:5d:95:8a:b4:66:7b:dc:eb:
d2:8f:61:12:83:54:1f:fa:fa:79:2e:53:67:7c:5f:9f:0d:56:
7b:d0:ab:24:b3:38:bc:a1:8b:67:0f:d7:ad:34:85:b2:4b:1d:
1d:43:27:a4:29:2e:ad:87:31:aa:84:eb:ef:a0:a6:7a:b3:0f:
a2:62:16:b9:ae:bf:26:27:10:e5:81:01:f7:0b:3c:a4:8a:54:
68:75:a8:0f:75:cf:86:04:28:99:d7:81:73:1b:a2:6c:d3:25:
80:20:16:93:87:73:6d:a1:64:0d:86:13:ab:a7:28:47:74:4b:
9e:10:ef:7c:ed:0c:19:ac:bd:c5:da:b5:4d:1a:46:73:33:61:
2b:e5:a1:93:d6:2e:67:ab:c5:e6:ee:e1:1d:53:29:1e:14:2a:
19:b8:84:b9:4e:e5:0b:41:dd:d5:82:19:29:d4:4a:f7:b9:ee:
b3:1e:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:02 2025 by rpki-client