Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: wNYpyHIkPLLSD91SBKLDrW+BHUzaK14A3GP5YTxgjzw=
Subject key identifier: 7A:C5:13:9A:9E:2E:E2:6F:F6:95:7F:47:13:38:1F:50:C3:A1:0C:2D
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 0194BC04E0B6760CD9BE9C9A6D4DD8983A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 071B
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: OS8Aj2wrUwIabedITr71KMMR8O9hW+GYYpdRRPT/Vf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:b6:76:0c:d9:be:9c:9a:6d:4d:d8:98:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=7ac5139a9e2ee26ff6957f4713381f50c3a10c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:b0:4e:5e:a9:e3:98:9b:ac:c4:61:43:90:
f0:77:b2:15:69:40:04:cc:49:9f:b2:70:bc:ac:19:
0f:5c:d2:6b:0e:87:74:4b:e1:a5:0e:16:55:7d:13:
05:e3:1b:d2:cf:08:70:e2:58:16:63:78:a7:17:94:
75:dd:78:cd:f6:7c:c6:9c:17:91:8c:30:af:93:d3:
54:88:31:64:1e:09:8e:13:9b:e0:ff:b1:b4:39:d9:
01:af:d8:38:16:f7:3d:33:a4:dc:43:98:fa:6e:ec:
a6:bf:83:58:9a:cd:75:76:9e:fb:b9:b2:4d:62:bd:
d4:b4:4f:7c:ac:dc:6e:44:27:1d:77:fd:2f:5e:3a:
57:ba:2f:eb:13:e6:78:c8:d1:3d:4f:5a:cb:a2:dc:
27:2f:fa:fd:ac:bf:86:4e:97:b7:3c:8d:35:ff:11:
63:2a:a8:cf:43:01:0a:d1:96:54:94:eb:dd:9f:00:
66:c9:29:3f:2e:6d:0f:73:82:39:b1:2b:76:16:e3:
de:70:ec:24:b4:1f:a0:69:dc:66:f5:b4:5e:fc:34:
b6:75:8a:aa:61:59:a7:90:3b:9b:88:35:ab:2e:5c:
6e:11:cf:09:93:2e:f7:07:44:33:4a:3f:8d:91:bc:
67:85:23:31:cc:86:e7:4b:7a:61:ce:b2:58:6c:b8:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:13:9A:9E:2E:E2:6F:F6:95:7F:47:13:38:1F:50:C3:A1:0C:2D
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:ee:5b:d1:1d:2f:2f:a6:64:8d:02:ba:29:21:2d:84:58:
7e:df:9f:5e:72:28:fc:64:2b:e7:77:4f:c2:ef:35:4c:fc:1d:
b0:41:5a:2c:e9:be:6b:2c:44:9b:49:95:43:85:91:00:35:d6:
08:50:5c:3b:5a:b4:30:5c:af:42:9c:fd:d6:4f:46:e4:b0:68:
fb:ff:65:78:55:7f:6b:8e:2f:c8:d5:76:b2:d4:07:00:60:df:
1c:b0:e2:06:3f:0c:af:14:f0:b2:8e:5c:00:94:85:d1:ab:38:
42:07:9d:39:6d:9e:e5:2a:a0:97:54:90:64:e5:96:8c:15:d4:
c6:ef:b8:6a:d1:39:8f:61:fc:41:42:81:fd:5a:fb:5d:74:30:
f7:09:71:d6:44:d7:27:94:9d:a0:e3:c2:7a:b4:10:49:7d:b4:
ce:49:15:2c:b4:2c:7b:c5:e8:17:40:6b:00:30:6d:fe:a4:c8:
4c:27:0a:86:3b:ce:0e:46:ae:7a:f5:1b:dc:2e:85:0c:47:b7:
36:9d:45:97:e7:29:ba:88:de:2c:33:bd:b8:39:23:17:1e:5c:
77:9b:2f:f6:8f:c4:da:f7:bf:30:37:52:23:cc:8b:35:d8:5d:
b8:bd:26:56:0b:e5:bb:68:07:f4:6b:d3:65:6a:ea:1a:1c:1c:
fc:5e:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:20 2025 by rpki-client