Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/71f15a-53f6-42b1-889d-5021d351b788/1/J9gimOoXlbQq1hbMx0JLqGHwO8s.mft
File: J9gimOoXlbQq1hbMx0JLqGHwO8s.mft (raw, json)
Hash identifier: b3DJLDMaNtJUDf+KgpiI75VVLA/eH+b2gRdLM3mKv1A=
Subject key identifier: 3B:78:F9:F6:7A:9E:1A:F2:48:0A:8C:80:B0:62:45:A4:B0:42:27:6C
Authority key identifier: 27:D8:22:98:EA:17:95:B4:2A:D6:16:CC:C7:42:4B:A8:61:F0:3B:CB
Certificate issuer: /CN=27d82298ea1795b42ad616ccc7424ba861f03bcb
Certificate serial: 019408349093B33D46CDD1B4986AEB0A3439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9gimOoXlbQq1hbMx0JLqGHwO8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/71f15a-53f6-42b1-889d-5021d351b788/1/J9gimOoXlbQq1hbMx0JLqGHwO8s.mft
Manifest number: 0AC4
Signing time: Fri 27 Dec 2024 13:00:50 +0000
Manifest this update: Fri 27 Dec 2024 13:00:50 +0000
Manifest next update: Sat 28 Dec 2024 13:00:50 +0000
Files and hashes: 1: J9gimOoXlbQq1hbMx0JLqGHwO8s.crl (hash: Mp6epBPgSgXc3WwIMQAHWOseh4VF9MbyGkiYBpcjevQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:34:90:93:b3:3d:46:cd:d1:b4:98:6a:eb:0a:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d82298ea1795b42ad616ccc7424ba861f03bcb
Validity
Not Before: Dec 27 13:00:50 2024 GMT
Not After : Dec 28 13:00:50 2024 GMT
Subject: CN=3b78f9f67a9e1af2480a8c80b06245a4b042276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:6d:61:69:03:2a:f7:67:fa:29:a9:52:57:
04:8a:41:c0:0c:b9:75:17:57:11:fb:2c:52:d3:26:
91:23:51:07:2d:b9:08:f7:de:36:f5:c2:64:e8:b7:
81:3d:f8:b8:36:d0:a0:ca:98:35:5e:4d:65:90:ed:
bc:6e:2d:d8:ef:58:2f:e1:c4:9c:08:97:e9:3f:f4:
e7:fd:35:ec:be:7d:3d:c1:a0:37:c8:c2:40:a5:27:
d2:c0:69:b3:fc:e6:0e:99:ea:fc:33:1a:83:db:14:
55:b2:08:c0:d6:65:b5:2e:50:45:5d:07:ab:71:32:
00:09:83:b1:a0:c2:8f:b2:c3:66:3a:38:25:82:ee:
a5:c5:d3:49:0e:50:e3:fd:63:9e:c5:02:42:14:99:
47:78:20:ea:5f:70:1e:6f:53:a3:fb:48:7a:9a:8f:
af:8b:fc:af:c6:aa:c9:09:7c:98:e2:a3:7e:f1:9d:
7d:11:42:79:a6:7f:b6:f3:ac:df:1a:64:a5:f1:d7:
5e:bd:9b:63:9c:22:6d:e1:20:73:ef:3c:5e:cb:21:
d5:92:a5:3e:22:bb:0a:50:5a:d5:ba:4d:9a:ef:0e:
e8:41:ad:41:ee:56:37:79:07:8c:db:bb:4b:a0:17:
c1:97:18:e3:f1:f3:07:44:55:78:85:d9:0a:32:a0:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:78:F9:F6:7A:9E:1A:F2:48:0A:8C:80:B0:62:45:A4:B0:42:27:6C
X509v3 Authority Key Identifier:
keyid:27:D8:22:98:EA:17:95:B4:2A:D6:16:CC:C7:42:4B:A8:61:F0:3B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9gimOoXlbQq1hbMx0JLqGHwO8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/71f15a-53f6-42b1-889d-5021d351b788/1/J9gimOoXlbQq1hbMx0JLqGHwO8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/71f15a-53f6-42b1-889d-5021d351b788/1/J9gimOoXlbQq1hbMx0JLqGHwO8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:bb:f9:e6:c7:70:4e:5f:55:62:27:3c:a1:2e:91:9b:8c:
69:f2:82:25:2c:62:7b:fb:22:45:b6:c1:a1:f1:f6:ae:3a:41:
b9:7f:20:26:64:f2:1a:ac:fc:7f:f3:10:f8:51:6f:4e:34:96:
97:de:d9:d9:75:5b:86:05:cc:5b:52:22:cf:71:c5:17:58:9f:
df:b6:16:77:26:26:fd:a2:97:1a:7b:99:8e:32:fc:f0:00:5a:
fb:6b:8d:78:65:84:4a:3f:4e:5d:0d:24:fe:e1:dc:69:71:a6:
9f:2e:7b:b7:08:a2:8a:2e:f2:fb:45:9e:4b:c6:39:f1:ef:c6:
98:8e:ab:d2:9b:bc:85:3a:37:b5:1a:b9:d4:9b:fe:70:6e:53:
99:fa:20:be:43:02:c2:2d:21:a7:e9:5e:93:8a:b3:41:eb:28:
19:34:8f:7f:28:90:93:a3:7d:fe:c2:0e:e5:5e:d8:f0:2d:ce:
0f:58:93:9a:b7:1d:99:1c:b9:c0:ab:f1:bf:08:84:ff:00:c8:
bb:8a:c3:85:04:0b:4e:a5:db:2a:bf:aa:e3:ab:08:1a:34:05:
a2:72:c6:0b:c6:03:de:3c:6d:d4:28:1e:bf:a1:42:07:ba:2c:
73:0e:a9:bc:30:6d:11:c9:59:18:e8:66:f5:1b:1f:0e:b0:e7:
4f:14:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:15:08 2025 by rpki-client