Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
File: JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft (raw, json)
Hash identifier: g0lSz/yvDV6o3INLcjwmjFIilIHW2W8uCVj06+EB2Cc=
Subject key identifier: 73:72:A6:A4:47:D0:03:3C:37:68:A1:44:FC:A3:4F:25:74:2C:60:4C
Authority key identifier: 24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD
Certificate issuer: /CN=24cbd753717d07491a7f7cabaa113ebaa568d2dd
Certificate serial: 018EA7455E59563182C807410BCE923AB1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
Manifest number: 0904
Signing time: Thu 04 Apr 2024 04:02:04 +0000
Manifest this update: Thu 04 Apr 2024 04:02:04 +0000
Manifest next update: Fri 05 Apr 2024 04:02:04 +0000
Files and hashes: 1: JMvXU3F9B0kaf3yrqhE-uqVo0t0.crl (hash: 7YwhT89U6bFe2bcvPVqHfwBle9+31FODp9nUOoKikCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:45:5e:59:56:31:82:c8:07:41:0b:ce:92:3a:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cbd753717d07491a7f7cabaa113ebaa568d2dd
Validity
Not Before: Apr 4 04:02:04 2024 GMT
Not After : Apr 5 04:02:04 2024 GMT
Subject: CN=7372a6a447d0033c3768a144fca34f25742c604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:b6:70:c0:54:a8:29:38:b8:94:12:09:84:
a0:84:8a:ec:12:a6:e8:62:b2:cf:c0:41:99:ca:9d:
21:2c:77:f3:d5:0b:4a:e3:6c:48:08:f7:6d:2c:bd:
45:28:13:cf:27:e9:c2:ef:90:8a:0b:99:e9:4c:3b:
06:51:33:68:ab:fd:fa:82:1e:9b:a7:45:60:2f:84:
16:08:6b:58:45:a6:64:b3:42:64:c6:1b:8f:4d:dd:
c8:01:d8:33:ec:20:3e:4c:bb:53:79:2a:2a:22:ce:
74:31:19:1e:04:e3:7f:43:e9:88:b1:c4:e1:04:ce:
f2:4b:8d:cd:00:25:cb:37:b0:6d:89:9d:c1:ce:fe:
cd:c9:d0:6d:c9:47:5a:ab:2f:df:d1:30:ea:22:3a:
0e:83:2e:53:ff:f5:8e:49:69:25:3c:03:90:48:61:
d8:40:16:b3:3e:9b:9f:31:c9:ac:e3:9d:02:75:fc:
3e:94:80:fd:c8:ab:73:61:47:3b:4c:bc:69:68:2f:
80:21:cc:c9:04:fd:a8:9a:b4:f7:2d:a1:04:df:5e:
40:bb:47:ec:77:08:97:ba:cc:09:3e:35:5f:42:1c:
e5:c2:eb:6e:c6:e0:9d:61:f2:84:d7:86:69:0f:9a:
74:3c:bc:c1:e0:f1:1e:9c:ec:11:1b:69:04:3b:d6:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:A6:A4:47:D0:03:3C:37:68:A1:44:FC:A3:4F:25:74:2C:60:4C
X509v3 Authority Key Identifier:
keyid:24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:cb:76:70:d9:81:14:26:11:e2:16:0d:6d:bb:5b:62:cc:
9e:01:76:9c:b4:b7:04:fb:aa:d9:c8:d8:5f:ff:53:78:4f:79:
b1:62:1d:d8:77:b3:b9:aa:95:40:ba:16:95:c3:ac:5a:c9:7f:
2c:27:67:e3:11:3f:04:d5:e6:cd:63:f5:20:5c:02:c6:5b:fb:
02:30:c8:48:2d:45:74:c1:4e:de:c9:5a:c8:eb:d9:90:47:4c:
48:f9:bd:e5:17:16:37:71:53:ad:bb:6b:4d:6d:06:ea:9d:2e:
d8:81:f0:83:ec:90:06:1d:ce:5e:54:e8:71:06:3b:e2:7c:81:
51:ce:2d:40:06:e6:69:d2:b1:a9:6b:0e:88:78:39:e7:e0:3e:
f7:39:25:90:5f:e1:e5:32:34:51:a3:38:25:82:7a:e3:08:51:
75:03:44:55:99:c6:db:bc:c5:a1:9e:5c:ee:16:1b:5a:95:0e:
3a:e8:c2:92:96:bf:4c:a7:76:ca:a6:4e:68:fd:ce:94:0c:1e:
1a:d1:32:af:8b:cc:a5:00:63:7b:5b:48:af:69:9a:ab:b7:7a:
30:fc:40:c5:8a:3e:22:15:b7:2e:67:6d:10:f7:83:f8:3d:88:
94:cc:d8:2d:56:b3:c3:83:36:af:02:a0:62:e8:08:69:a9:94:
5b:74:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:07 2025 by rpki-client