Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: M9KE/MxHvueeFI6ioc2NqJPbSOnXRC0m6rjPbRV12TY=
Subject key identifier: 6F:C5:6D:90:B6:BE:3C:B9:9F:E9:A8:01:73:CC:E0:89:56:26:DE:D5
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0194BC0503D53021734A88BD3A424F2D3682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 0E8F
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: P1QWm/PBy+3M6RZApYn3W2jHN9wUE9dSARgAJvgM8yM=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:d5:30:21:73:4a:88:bd:3a:42:4f:2d:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=6fc56d90b6be3cb99fe9a80173cce0895626ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:b8:95:90:62:c0:d6:12:1c:d1:1a:92:1d:
2f:3b:d9:9d:e1:0b:cd:6b:60:1d:ea:4e:f1:54:49:
b6:e4:89:61:68:b3:ea:63:68:48:f3:29:8d:2e:d5:
92:aa:3a:19:15:0f:f4:bc:c1:e3:d5:a7:69:f3:65:
67:03:cc:ed:84:ef:58:3f:a4:f4:e8:33:42:2a:10:
4f:e7:0c:65:29:4e:f5:d6:1b:dd:72:91:59:a8:26:
c6:f3:d1:25:61:f1:56:d1:c8:8e:84:77:57:64:fd:
fa:4c:fd:c7:07:c8:8a:e6:98:14:31:d0:af:e9:42:
7d:c4:fa:d3:c8:cb:05:84:b6:e9:e7:1b:c6:c0:84:
98:1b:a9:02:4e:fb:50:8b:5f:7b:b3:89:ff:4b:fb:
4f:e6:ba:f5:79:0e:0f:ab:61:35:0d:bc:3a:5f:55:
79:c1:07:a4:3d:6c:6d:49:47:9a:a5:25:a4:62:20:
67:f6:a6:f3:9f:21:cf:c6:59:1d:9c:71:ad:08:98:
54:33:de:be:2c:cd:95:c7:b1:e8:a3:2c:19:a0:31:
e4:8c:e6:b1:85:9e:cc:7b:90:b2:c2:ad:e7:e7:8a:
49:5b:22:f6:86:8d:6f:33:df:83:7b:cd:1a:ff:3e:
0d:e5:0c:4e:9a:1b:1f:be:63:b5:71:ab:c0:78:0a:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:6D:90:B6:BE:3C:B9:9F:E9:A8:01:73:CC:E0:89:56:26:DE:D5
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f2:2c:86:d6:36:0a:d7:02:4e:8f:42:40:00:ef:07:4f:ad:
e6:44:12:57:78:f6:a7:4c:d2:3a:02:16:c6:9d:c7:74:f5:3d:
42:d9:83:af:0f:ba:44:53:6e:6a:73:d0:3c:e9:e2:cc:36:84:
87:ac:a4:66:ee:a3:98:19:80:3c:f9:f6:4d:4b:c1:fc:14:ac:
ad:65:84:48:2a:08:f3:e8:fd:c7:b3:51:18:39:50:ef:90:db:
d0:e1:38:a3:27:39:a6:10:02:65:99:2e:b5:d7:a0:43:7f:92:
2d:97:7c:2a:8e:ea:1f:d6:89:06:8e:62:c8:6f:0c:ef:f7:62:
0c:0a:38:8f:07:e2:ff:e0:d5:d1:d0:e8:99:67:72:83:4c:96:
54:a6:bb:40:8e:09:15:ec:61:86:a0:27:84:ab:22:d9:18:ba:
0a:d9:96:f7:c1:39:37:82:5e:71:0d:9b:14:23:0c:6f:44:75:
08:0b:72:1a:cb:31:bc:08:42:c2:fd:aa:2e:6b:29:79:52:5b:
1d:bb:22:f8:4c:53:59:82:5c:de:59:cb:00:65:c5:b1:2d:af:
87:d1:54:9d:7a:3a:b3:da:a6:3b:dd:0c:fd:c0:1e:db:45:4b:
11:23:0c:ad:4e:48:db:1c:8d:bd:f7:73:a0:fa:88:d1:26:df:
cf:0f:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:02 2025 by rpki-client