Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
File: JIuM0rt0TFcgVwRl3le0yjWjcvA.mft (raw, json)
Hash identifier: i0WbRWaXzjdRMpFAYktjSJ10TAappQitg/LC7+h6+pg=
Subject key identifier: F9:4A:66:4A:2F:DF:2C:5B:5F:62:5B:68:E7:A7:FE:8D:78:74:C5:8B
Authority key identifier: 24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
Certificate issuer: /CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Certificate serial: 0194BCE07EB560C1B747F56DF0D74E812199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: JIuM0rt0TFcgVwRl3le0yjWjcvA.crl (hash: nz8WP/yLn+xmIqJClAJzFgNVQ9Lo4IP9MbluMcDVazM=)
2: yQqcMeWPVR3gPJhw22lJYkcoC6w.roa (hash: gPSCyPa7byqT2dADD2nEHydwwchUGHgO0WIjWbFS9eE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:b5:60:c1:b7:47:f5:6d:f0:d7:4e:81:21:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=f94a664a2fdf2c5b5f625b68e7a7fe8d7874c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e5:c8:8b:8d:ef:0f:02:f2:b8:85:4c:62:4b:
e7:50:7d:e2:76:e8:10:50:44:34:bf:10:a9:89:9f:
4f:bf:a1:56:24:5c:8b:0b:8d:7b:b0:f9:c7:71:e1:
4f:1b:bd:4c:a4:d0:f4:06:dc:23:33:ab:9c:90:03:
08:a6:43:4c:7d:03:8e:f0:0d:6d:cb:ea:29:fc:61:
81:01:3d:db:de:37:6e:b0:dd:f0:4d:d0:33:e0:0e:
e0:a0:f2:d6:9e:d6:23:7f:76:3b:bd:5e:63:83:df:
32:17:31:53:f9:b8:7d:1a:d3:6e:dc:e1:be:e4:a9:
a5:e7:88:e8:d3:86:91:e5:fa:52:7c:16:97:06:bb:
3a:bb:76:c2:66:cb:30:82:07:26:b5:11:2c:95:de:
e4:f4:65:8c:bd:29:80:45:1f:94:a0:29:b9:1c:79:
d1:5e:cd:7a:eb:65:dd:ed:6a:4b:96:84:9a:01:5d:
da:46:e6:b4:48:6c:c8:8c:32:38:24:c7:1a:48:6f:
07:87:9d:d9:ce:0f:a0:91:c7:7e:a6:be:e9:1f:46:
77:c5:a5:a2:43:48:8a:53:6d:82:e4:61:af:af:df:
39:b1:e0:fe:96:47:e3:3e:fc:66:89:79:3d:1e:96:
80:0e:76:c6:bd:a5:75:13:09:f7:58:95:a3:64:5c:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:66:4A:2F:DF:2C:5B:5F:62:5B:68:E7:A7:FE:8D:78:74:C5:8B
X509v3 Authority Key Identifier:
keyid:24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:72:fd:ae:f0:22:4b:47:5b:b3:9c:c9:5d:0a:23:63:0a:
80:1c:89:e8:f6:87:9b:f9:1f:9c:86:2b:2b:f6:86:ad:a6:a3:
8f:5d:44:07:aa:8d:bb:c6:31:bb:8a:44:42:e8:6d:4d:96:08:
e0:10:b3:f2:12:09:13:ad:2b:7f:5e:55:a2:f6:01:1c:14:8e:
bb:0a:d0:fa:73:75:e4:5b:0a:c8:b9:0e:05:b9:ca:e2:31:66:
b8:46:f9:30:c3:4f:a7:28:26:62:3b:48:ef:6c:ed:2d:de:ca:
1b:f5:d1:b6:bc:0f:b1:82:cd:a8:27:33:16:91:f0:6e:d7:79:
61:17:f0:54:18:80:12:1b:c7:b7:ff:3e:30:2e:2b:8b:d0:c0:
fb:29:52:56:38:54:2e:29:8d:fb:3a:93:ed:58:73:4b:64:76:
65:6f:62:65:fe:3b:fd:79:4d:22:36:ae:0a:40:57:50:20:e7:
13:2e:7f:2b:c4:ea:06:1b:df:75:cb:88:41:58:0e:38:bb:a5:
84:4a:7c:83:b3:2e:d2:70:1c:6b:29:42:c6:ec:47:fe:2e:58:
92:85:2c:c5:06:f8:8a:f1:9c:6d:89:1f:04:a9:9e:fb:49:b5:
fd:8f:33:e4:eb:b7:ec:48:21:0a:39:9a:b5:e8:97:d2:7d:65:
dc:69:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:57 2025 by rpki-client