Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft
File: jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft (raw, json)
Hash identifier: yVF7e2qeIDb1zv7jpnCyw3LwCIEf7YY4OuTpegPKXjs=
Subject key identifier: D0:21:5D:BE:99:6B:C4:95:51:21:F4:9C:F8:19:28:35:4D:47:52:88
Authority key identifier: 8C:82:B0:25:39:3E:BC:F2:8B:1D:FE:72:9F:B1:94:A8:F9:D2:74:40
Certificate issuer: /CN=8c82b025393ebcf28b1dfe729fb194a8f9d27440
Certificate serial: 0193B33D7C9DCF353BFB1FB251EAE70DF56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIKwJTk-vPKLHf5yn7GUqPnSdEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft
Manifest number: 1392
Signing time: Wed 11 Dec 2024 01:02:51 +0000
Manifest this update: Wed 11 Dec 2024 01:02:51 +0000
Manifest next update: Thu 12 Dec 2024 01:02:51 +0000
Files and hashes: 1: jIKwJTk-vPKLHf5yn7GUqPnSdEA.crl (hash: GegYR35EU36ceDCoFaAnS5BQoNZY0ZbwNYadyDm27w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:3d:7c:9d:cf:35:3b:fb:1f:b2:51:ea:e7:0d:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c82b025393ebcf28b1dfe729fb194a8f9d27440
Validity
Not Before: Dec 11 01:02:51 2024 GMT
Not After : Dec 12 01:02:51 2024 GMT
Subject: CN=d0215dbe996bc4955121f49cf81928354d475288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:22:fb:33:90:6f:19:d8:ce:c4:e4:60:72:
78:03:c8:02:3a:0a:d5:f1:df:95:c5:fa:17:84:0a:
b3:fe:09:40:5a:2e:cb:05:b0:34:30:3e:6e:3c:92:
c0:82:45:57:be:6d:73:ca:7d:8d:8e:aa:9e:8c:6f:
86:96:b2:04:c3:55:61:d2:b2:ff:1b:b9:5b:b1:2e:
00:7c:18:9e:ab:a6:54:3e:7a:d8:d1:f7:85:33:18:
55:21:f2:32:11:a7:2e:1e:6f:7e:fd:27:4b:60:40:
7d:cd:b9:3a:59:18:dc:11:e3:ed:d6:b1:61:82:be:
ab:5a:f0:e7:53:31:48:04:63:5e:b9:63:dd:07:9e:
98:49:8d:55:d0:6a:d9:55:96:51:65:3b:27:1b:3b:
47:5b:53:41:44:68:8c:68:ce:1e:22:c2:60:b3:ca:
28:09:14:fd:a4:35:c6:e7:ce:91:21:49:b6:23:38:
aa:9a:d1:86:c6:26:2a:2b:bf:aa:6a:f4:7b:b2:fd:
85:54:e1:ba:47:c3:27:0c:8a:31:c4:3b:19:cb:84:
ad:38:24:0f:1e:18:62:50:8b:be:16:61:10:34:91:
ce:0c:b6:c8:27:0e:4c:c0:d6:98:78:7d:ab:7f:ad:
b5:6a:43:30:5a:56:dd:a6:7c:0c:95:09:d4:f5:7b:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:5D:BE:99:6B:C4:95:51:21:F4:9C:F8:19:28:35:4D:47:52:88
X509v3 Authority Key Identifier:
keyid:8C:82:B0:25:39:3E:BC:F2:8B:1D:FE:72:9F:B1:94:A8:F9:D2:74:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIKwJTk-vPKLHf5yn7GUqPnSdEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:77:25:08:06:74:57:ea:43:82:c9:d6:86:24:1d:98:f3:89:
b1:1c:7d:46:5a:96:92:44:4a:3b:87:94:d6:fb:1d:4c:3c:33:
aa:11:0a:50:a9:c8:75:88:9d:ec:60:9a:9e:d1:1c:ed:18:66:
68:05:cd:cb:52:d1:b5:6a:bd:76:0f:c2:41:24:6e:99:cc:65:
66:74:42:53:e9:22:64:3f:4b:ea:88:5b:12:e4:43:79:54:01:
b6:90:25:bd:ce:63:48:1a:27:59:33:66:5b:e1:0c:33:3a:f4:
5b:7a:62:d3:71:22:00:f2:19:e1:0d:ad:b7:b1:31:4b:c2:20:
40:d2:ef:79:37:23:ba:08:e6:c6:b1:18:82:e6:9c:34:f5:27:
1c:b5:f8:9a:92:48:34:55:e1:7b:e0:b4:4b:3b:6b:c3:14:09:
d7:8f:6e:5c:b2:9b:ba:b6:9d:cc:f3:5e:97:d8:69:68:cf:e6:
9d:70:88:26:4b:70:6a:d5:17:da:30:99:91:70:d9:3b:80:ac:
a6:f1:26:de:4d:ab:74:2c:9a:35:e8:4d:29:e9:4a:80:c4:78:
ff:90:37:5f:75:c4:1b:9d:22:eb:54:5b:e8:e9:2b:65:9c:9b:
aa:8c:8c:3e:4a:3f:e4:2a:f7:29:2b:2a:9d:7b:bb:0f:8c:57:
59:56:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:58 2025 by rpki-client