Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: 8qesXtSV1lek7ZfGkOBUuDsUBwRPfDrBKa1qbH8KGUc=
Subject key identifier: D0:35:E4:B8:A9:7F:F1:43:69:70:71:A3:F1:35:95:42:8D:A2:F6:6E
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0194BD859B09EC01E8637CFA6B1A15FD5A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 0F1F
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: jz8PTknWrCBA0GwNaOdZFCFh3tP7+qn2jweHEmuO2+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:09:ec:01:e8:63:7c:fa:6b:1a:15:fd:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=d035e4b8a97ff143697071a3f13595428da2f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:31:dc:87:28:1b:85:5c:f6:23:d9:50:73:
16:4e:00:ac:a2:8a:3b:01:f6:79:35:61:51:98:24:
92:aa:79:9b:17:3c:2e:db:5e:23:aa:9b:b2:f4:6e:
c9:c4:ac:c3:4e:55:d8:3a:f5:dc:59:4f:3d:9f:6a:
0f:3c:40:bd:88:3b:9b:97:00:dc:b4:05:19:a8:c0:
62:f1:d8:b3:0f:7d:80:64:bc:a3:6b:c7:90:da:58:
4b:13:e4:85:a9:cc:e2:5a:0b:c7:c6:98:f5:e2:13:
56:6e:06:2f:32:81:6a:34:a6:21:f9:70:58:0b:89:
ec:8c:51:5f:8e:2d:31:ac:ff:f3:cc:ae:da:74:1f:
6b:3d:70:5d:de:ce:f1:be:94:9c:44:7f:38:48:1d:
31:58:e6:ba:aa:81:b1:3b:d4:2a:19:42:ed:91:28:
0e:f9:29:ac:54:69:2c:0a:78:43:6f:49:ab:a8:a4:
09:11:b7:d3:80:bf:d0:17:a1:e0:1b:96:1a:6b:64:
97:1a:60:2c:21:61:59:7e:40:11:b3:71:9c:9f:7d:
d0:ff:c5:be:18:39:b4:72:c6:da:fa:50:28:59:ae:
bb:ec:52:84:3d:cd:d3:fb:d7:c7:09:73:12:b4:f9:
74:aa:6f:4c:41:73:4a:eb:16:de:ab:73:7e:7f:bc:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:E4:B8:A9:7F:F1:43:69:70:71:A3:F1:35:95:42:8D:A2:F6:6E
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:f2:c4:d5:93:01:16:ab:02:0c:9c:09:ed:71:00:7d:0e:
bc:a9:a2:4a:69:67:08:9e:1f:3b:b3:18:95:0b:0b:8c:54:0b:
ee:e2:7d:c7:9b:fd:12:10:8c:9f:ed:b8:72:10:58:96:c7:3e:
07:c6:ef:37:df:26:49:d6:ed:50:17:d0:ac:9c:7b:f6:17:52:
3b:45:6a:2d:85:77:b6:eb:40:1e:32:ed:df:09:b1:15:c8:c3:
61:13:74:1e:94:ca:7f:2f:7b:63:a0:40:2f:7f:db:d3:d1:a8:
67:1b:80:49:ac:74:bd:55:a0:e1:65:e5:e3:b8:39:0c:dd:4a:
76:e3:a5:b1:80:fa:95:75:6c:57:bb:33:2c:0d:f3:b6:f0:96:
a9:79:76:3f:76:2a:e0:54:bb:08:15:08:01:85:ae:fc:26:f4:
75:06:79:72:53:6f:51:3f:40:1e:35:94:34:ee:96:5f:0f:a5:
bc:f2:ea:89:f6:16:9c:70:e3:35:e7:4e:e1:19:98:50:55:ca:
ff:10:29:08:32:f8:39:c2:35:64:83:f0:61:a6:9d:63:ed:53:
ee:b4:6e:5a:7d:80:62:28:fe:80:0e:2f:38:e2:1a:8c:99:cf:
6f:18:9f:a2:fd:f9:9a:04:48:f7:48:13:a1:a7:21:cd:0b:bc:
b2:99:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client