Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft
File: j2qg5XA92heJIhwqO68fnammwHw.mft (raw, json)
Hash identifier: f+CFtUCc6T/XyE0dju4xcbS2GwgYQvHdx5fdW9l7OpQ=
Subject key identifier: F7:D2:2A:E1:B2:47:BB:B6:BD:32:87:F9:E7:4A:09:3D:09:D1:56:9F
Authority key identifier: 8F:6A:A0:E5:70:3D:DA:17:89:22:1C:2A:3B:AF:1F:9D:A9:A6:C0:7C
Certificate issuer: /CN=8f6aa0e5703dda1789221c2a3baf1f9da9a6c07c
Certificate serial: 01853776A0014EE2AA966C179B335B2BC9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2qg5XA92heJIhwqO68fnammwHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft
Manifest number: 0BD7
Signing time: Thu 22 Dec 2022 01:33:19 +0000
Manifest this update: Thu 22 Dec 2022 01:33:19 +0000
Manifest next update: Fri 23 Dec 2022 01:33:19 +0000
Files and hashes: 1: j2qg5XA92heJIhwqO68fnammwHw.crl (hash: PMG9LQaBo4UyPDkea4+rzEvkygJHon3kGLuivlFydb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:76:a0:01:4e:e2:aa:96:6c:17:9b:33:5b:2b:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6aa0e5703dda1789221c2a3baf1f9da9a6c07c
Validity
Not Before: Dec 22 01:33:19 2022 GMT
Not After : Dec 23 01:33:19 2022 GMT
Subject: CN=f7d22ae1b247bbb6bd3287f9e74a093d09d1569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:1e:c2:aa:68:5a:09:99:7d:9e:91:77:f2:
d7:54:67:f4:1c:57:50:4b:63:fd:bf:97:1f:29:20:
c4:7c:b2:34:47:5e:de:7a:5a:17:e8:cb:71:8b:16:
ab:2b:c7:85:3a:47:b1:9a:ca:52:7e:2e:95:b1:8a:
ad:ad:e6:4f:a2:93:d0:af:e6:e8:a4:8f:6c:f3:78:
46:bb:f3:17:04:e3:d3:2f:b0:2e:6d:d5:82:51:25:
0b:88:1d:14:1f:e9:f5:92:60:67:30:55:82:37:21:
8d:58:63:37:12:bd:5b:86:6c:c2:7d:8a:b7:b4:71:
ab:33:cd:c3:f5:ce:aa:0a:c6:86:3e:d7:0d:c9:34:
71:b9:10:ca:01:00:ab:65:a2:d6:5d:ca:e7:9b:43:
b1:3d:64:c6:44:63:69:4f:f7:99:cf:b0:e7:05:16:
d7:00:64:67:1c:54:52:f8:f7:8f:7f:47:37:98:b5:
09:9d:28:66:11:0b:c2:a7:0f:b1:99:1c:e6:a7:72:
bd:a8:5d:f9:4d:ff:d7:ac:fc:72:de:c4:16:dc:58:
94:dc:e3:ff:ee:e6:16:97:5f:d4:67:6e:df:bc:15:
27:1a:5b:e7:31:d2:ef:a6:f7:e0:1f:7e:91:a8:eb:
23:aa:da:6d:19:02:55:b1:fc:67:92:47:8c:ef:95:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:2A:E1:B2:47:BB:B6:BD:32:87:F9:E7:4A:09:3D:09:D1:56:9F
X509v3 Authority Key Identifier:
keyid:8F:6A:A0:E5:70:3D:DA:17:89:22:1C:2A:3B:AF:1F:9D:A9:A6:C0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2qg5XA92heJIhwqO68fnammwHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:a0:ef:9d:9c:8e:84:fb:a9:ea:46:9d:f6:aa:22:36:72:
0e:7b:99:ca:85:43:e0:fd:49:f6:3b:5e:32:52:c0:9d:ba:6a:
08:13:8f:26:4d:0a:6e:a5:70:17:0a:db:d7:02:88:67:e3:2a:
43:7d:a3:e7:07:8c:8f:14:58:b8:4b:e3:fd:68:6d:c4:2b:00:
1b:4c:a5:1d:79:d4:59:d6:84:29:80:5c:c2:fd:34:f7:be:04:
09:c5:fa:95:4c:31:2a:43:16:65:5b:3e:b1:55:77:92:9b:3b:
2d:c5:1d:29:18:79:13:c3:96:bb:62:24:02:50:f2:e8:2f:be:
4c:45:b7:7a:29:05:5b:3b:9e:11:ab:07:6c:82:7e:60:02:d8:
3a:fa:94:51:e2:47:62:1e:62:a1:71:72:33:e4:96:a3:ec:fd:
5d:39:3c:e6:bd:34:6a:6a:83:55:7e:d8:7f:19:33:60:15:eb:
07:0a:84:e6:e4:18:e4:95:ad:13:41:32:7f:32:7f:19:dc:a1:
14:51:c8:14:21:bd:8b:64:5a:85:3f:19:c3:14:c7:a1:d7:be:
6d:3a:3a:55:ec:76:9f:c6:35:49:1e:79:8b:ac:8b:ea:84:e9:
d1:de:34:25:46:bd:02:69:79:bc:7d:03:88:66:dc:0c:8d:0a:
dc:0b:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:40 2025 by rpki-client