Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: XpaSVxWZtLqYjvlEmebh6pKhb6wKWoD3+Ht85GzONRQ=
Subject key identifier: 97:38:10:85:81:62:CE:0C:D8:EA:62:C9:92:E7:CF:6D:E4:4B:A4:40
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 0194BC04E96EDBE9CCD90500B3A683290763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1328
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: NUKcg4/jx5h9sZPBfD4a9IznXE7vT/AZXQYKE5mHAEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:6e:db:e9:cc:d9:05:00:b3:a6:83:29:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=973810858162ce0cd8ea62c992e7cf6de44ba440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:1a:fa:86:bf:4c:12:dd:cc:84:69:22:37:
94:88:1e:57:fa:41:c7:8c:e9:52:1c:04:63:6c:ae:
b7:f0:ca:ab:dc:01:75:58:23:57:66:90:65:62:c9:
cd:24:ce:fb:28:2e:9b:4e:ae:56:71:63:7d:15:28:
50:63:c9:db:a1:bc:66:3a:f5:03:62:7f:45:71:b1:
cb:3b:5c:fe:95:25:0e:f1:29:96:9d:e3:2c:63:ec:
2b:9e:2c:f7:f1:9a:5e:e3:de:35:c4:e2:33:b4:e8:
dc:42:6c:ae:88:00:06:1c:9c:e1:8a:4a:71:4a:e4:
2c:98:eb:93:26:17:a3:1a:1f:8c:38:bf:8e:43:a8:
e1:77:46:a4:c8:96:fb:eb:4d:ad:60:11:30:58:8c:
21:da:f0:6f:ae:5c:fa:3b:1e:c4:08:e1:31:f1:02:
c2:ab:9d:4e:09:74:17:bd:09:5a:bb:38:08:14:2f:
b4:fc:67:3f:c6:e1:f5:16:e2:0a:ef:e4:3b:7c:a6:
73:44:6b:91:21:6a:87:cc:d7:fc:46:e5:ac:ea:b4:
99:b9:76:96:ba:69:65:59:6c:af:64:f5:33:9e:4a:
60:40:0e:78:0e:3d:2c:b9:75:d6:2f:ac:31:ad:02:
03:5a:f5:2d:5d:28:f4:22:b7:96:b9:38:e7:c8:1d:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:38:10:85:81:62:CE:0C:D8:EA:62:C9:92:E7:CF:6D:E4:4B:A4:40
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0b:e2:fb:cc:2c:aa:8f:58:91:a1:41:0d:83:7c:ee:29:14:
12:61:38:4c:1c:0d:17:55:29:e6:f0:de:94:cd:e3:04:e4:74:
db:e6:05:5a:79:55:47:15:db:59:dc:49:ca:9d:20:08:02:4c:
69:8b:1b:ac:3d:24:a3:22:7d:d5:88:93:d9:84:5d:62:47:6e:
2b:60:dd:66:97:4e:d2:c9:10:b5:42:97:c5:95:af:fc:6f:d5:
41:dc:de:e2:31:27:19:30:38:3b:7f:58:e9:4a:8a:5d:8d:d6:
6a:ac:f3:12:bb:a5:6f:d9:b4:6a:a6:ad:ee:da:c6:d8:8e:53:
d4:d0:0b:fa:98:c0:75:a8:56:15:1d:9d:de:a8:2f:cf:a1:3c:
ca:44:a2:01:43:42:0b:1b:c9:18:f9:d0:d3:a3:87:bb:8f:12:
1e:d8:d4:5e:30:ad:be:45:a1:02:96:33:8a:a9:8e:4b:f7:a1:
d7:75:85:3d:c0:7d:94:06:ba:5a:0b:c6:50:5e:a3:2d:da:08:
3b:cb:55:de:81:e1:30:c4:55:d5:d9:d6:a5:f2:66:76:6b:98:
5f:8a:96:90:7a:aa:79:3d:0d:e6:3b:3a:df:d2:eb:f0:30:26:
58:02:9b:a6:4a:66:fa:60:ae:3d:cd:9f:3d:4b:d6:20:52:03:
06:f5:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:16 2025 by rpki-client