Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
File: Jxkl4prgOdQ2Gda09kQss3yelwU.mft (raw, json)
Hash identifier: hmNRlN0JesLAqumgbadGbJ2aRNxzpyd0lY+S4Qw69u0=
Subject key identifier: 37:1B:17:B2:AB:6B:AC:94:00:7B:1F:78:02:5E:F3:AC:35:48:08:5D
Authority key identifier: 27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
Certificate issuer: /CN=271925e29ae039d43619d6b4f6442cb37c9e9705
Certificate serial: 018BDA5D427F2F4072423A8EFE652C18A5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
Manifest number: 087B
Signing time: Thu 16 Nov 2023 23:00:26 +0000
Manifest this update: Thu 16 Nov 2023 23:00:26 +0000
Manifest next update: Fri 17 Nov 2023 23:00:26 +0000
Files and hashes: 1: Jxkl4prgOdQ2Gda09kQss3yelwU.crl (hash: k4xidumONDnbTLB5upDQZkC5L4CtuAoiIxR0OqXFSrw=)
2: ve3Y9byTEYL_aihpAR46DLEL-bw.roa (hash: Vr0LkEuThEm3+Pjx79+LQ3B4VJjMeOi3s+dFcEtYjaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:5d:42:7f:2f:40:72:42:3a:8e:fe:65:2c:18:a5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271925e29ae039d43619d6b4f6442cb37c9e9705
Validity
Not Before: Nov 16 23:00:26 2023 GMT
Not After : Nov 17 23:00:26 2023 GMT
Subject: CN=371b17b2ab6bac94007b1f78025ef3ac3548085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:32:be:7c:13:63:2a:1a:e9:70:f2:5b:03:
40:55:bb:4b:3d:d8:4c:ac:af:33:f7:a8:3e:28:d0:
38:34:83:6a:30:64:84:86:0f:88:97:1f:79:42:f3:
46:38:e4:35:1f:8c:fa:1d:80:2e:b9:24:3b:f3:33:
42:d6:7a:c8:dd:ad:2a:6c:fe:0f:78:bb:f8:f3:6c:
d1:03:b6:5e:28:73:a3:81:cf:e2:3f:ec:8e:f6:da:
1c:db:1b:b2:86:ca:4d:00:4d:1c:de:c8:d2:cb:bf:
4f:d9:81:d6:4d:c5:b5:f6:bb:1e:f7:8d:2b:84:aa:
54:37:86:e6:ea:ed:a4:e2:57:77:82:bf:f2:b9:df:
c5:df:79:48:1d:3e:ca:cc:71:2f:6b:01:09:3a:41:
88:40:4d:b8:8a:a7:a0:e0:6f:61:f4:4c:99:7d:b2:
40:75:11:21:5b:7d:61:07:be:63:c3:d1:95:da:2b:
05:56:6c:d9:8f:b1:cc:31:b8:a5:e3:96:d7:d9:97:
8b:d5:9d:68:97:6d:01:38:36:4e:ca:31:b0:88:54:
5c:72:80:3e:d9:b9:fa:3f:e0:26:8f:01:72:3d:b0:
f7:56:b3:3b:b0:41:c1:a3:e0:7d:d4:9a:6f:a7:48:
27:c3:89:03:27:4e:16:e5:a8:3d:e9:eb:24:e9:3f:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:17:B2:AB:6B:AC:94:00:7B:1F:78:02:5E:F3:AC:35:48:08:5D
X509v3 Authority Key Identifier:
keyid:27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:93:61:ac:aa:6c:be:da:0e:31:fe:0a:1b:fe:80:de:47:33:
ab:e8:a2:fa:b4:63:91:26:69:02:8a:e3:30:37:41:c8:91:fa:
39:db:35:01:59:6d:11:8e:f5:9f:a4:76:28:00:f0:78:cc:80:
61:48:83:7e:f1:ea:d7:d4:d2:ec:f9:9e:61:dc:e0:27:67:72:
1c:df:63:d8:a1:b2:df:80:12:b4:36:f2:41:0e:73:69:ff:71:
59:bc:52:0e:1e:6a:e7:9b:67:c1:d8:65:52:a7:e5:fe:86:95:
64:7a:41:37:9b:51:b0:27:db:d8:80:ad:76:a8:8f:fa:77:d0:
ed:31:7a:a4:7f:21:9d:55:f9:16:34:5c:ee:19:61:a0:4a:14:
48:93:6f:0d:34:7a:63:c3:a8:6e:14:b6:27:1e:c2:ad:46:62:
47:e7:67:97:70:af:9e:88:e9:ad:d6:d7:3a:18:b8:19:a9:62:
95:e8:03:07:ca:17:e4:32:be:49:91:66:2c:96:bd:84:49:d7:
ee:9b:a8:47:a1:53:26:ee:77:89:b5:8f:eb:eb:11:ff:6b:54:
3b:ff:97:58:c0:e2:a3:ce:7a:92:d0:77:69:53:fc:55:7a:41:
aa:36:52:1f:df:cf:0f:62:24:35:7c:71:78:b4:bc:fa:91:a6:
2c:da:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:34 2025 by rpki-client