Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: N0P2oSN+SPXMYcDXjlcj9p0JegxdQJMTOTDvfOQtIfU=
Subject key identifier: 0D:06:6B:21:19:91:3A:BE:C1:1B:43:92:C4:DE:74:78:61:05:9B:5B
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 0194BD4E9F855A147AD8CBA68C578FB1F669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: Z6nMNd6W1zkwty9qeSHaDaWfF0pZ1EWwNvjBOFSxoYw=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:85:5a:14:7a:d8:cb:a6:8c:57:8f:b1:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=0d066b2119913abec11b4392c4de747861059b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:35:e1:e6:a2:54:17:50:17:d9:a8:6b:36:
b7:3e:22:2c:80:6b:1e:60:cf:d7:cf:c7:a5:f8:1a:
be:28:11:79:e6:ab:85:66:c1:9a:3b:22:58:82:8a:
68:5c:ec:48:a4:cf:2c:c5:f2:35:5f:31:b8:f7:8f:
6b:30:37:41:75:ee:66:96:1a:54:b3:46:ef:e8:ba:
55:d1:a4:95:83:1c:46:62:97:62:d7:cb:e9:53:26:
fa:fd:a2:64:93:6b:fb:77:48:b5:17:eb:aa:c6:de:
fa:cb:86:4e:b1:40:b5:14:20:c4:63:c5:b6:9f:cb:
0b:35:07:67:51:23:bf:be:96:1f:00:68:9a:c6:a7:
90:c2:87:62:c3:b3:03:a8:14:02:a1:1c:e5:cb:e4:
78:6b:ca:04:db:bb:d1:a2:f4:e7:53:df:02:22:c7:
60:69:24:6e:93:57:84:2a:5c:e7:a3:eb:e1:a8:d3:
48:9f:46:ee:a1:13:ee:30:10:b3:1c:fe:e3:2b:52:
e1:ed:0d:c2:db:89:94:9b:b9:4f:a2:d2:e7:c9:ef:
2e:83:09:ca:58:aa:ad:9e:94:b2:89:05:8f:03:70:
18:82:00:fc:b6:88:3b:4f:48:72:b3:86:66:36:d6:
dd:49:2e:9a:6b:44:c6:04:e5:55:40:82:86:3b:d6:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:6B:21:19:91:3A:BE:C1:1B:43:92:C4:DE:74:78:61:05:9B:5B
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:21:a8:98:ed:52:2c:0d:d1:25:82:8c:68:da:86:d1:da:b7:
49:0c:ca:eb:ba:a3:27:fe:ea:b2:62:2a:d9:74:34:08:3b:79:
c7:c4:c6:19:f9:56:2c:26:44:4f:16:2a:c4:5e:bb:bb:76:4f:
28:5f:56:cf:7b:f1:d8:81:12:65:bc:c8:88:5d:cd:0a:39:08:
96:34:cf:6b:bd:de:97:00:9e:f6:cb:f1:b7:e6:30:b8:93:1f:
d7:af:ae:fc:8c:28:21:ac:e5:ec:1a:d4:54:47:4e:4f:74:d8:
86:b6:d4:45:1f:01:78:1b:d6:e8:92:02:67:a8:18:66:75:ea:
5d:6d:ee:9e:93:e7:bf:53:d6:11:1a:8d:6f:4b:5a:16:1b:8f:
77:87:4c:ad:5a:7a:c1:42:c0:b7:93:3a:74:28:59:01:79:3d:
57:ab:a3:31:17:f2:fa:da:3b:a6:ce:5f:56:53:48:96:39:f6:
12:c4:bb:f9:21:41:07:7c:e4:fd:ae:b0:fa:0b:38:3b:62:15:
08:1d:36:4b:6e:d8:4e:6e:43:9f:33:e1:71:17:2b:24:5d:e5:
7b:70:ed:56:61:ac:f5:34:90:de:d6:d8:e0:af:be:29:00:46:
58:d4:34:1f:c9:e4:1d:ad:f0:dc:07:d8:b7:da:7b:0c:f9:90:
b4:57:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:14 2025 by rpki-client