Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier: JDzA+3d3JHsECqEFulKr+HSfLCgdjtnGW5krvGXU/FA=
Subject key identifier: 72:60:EB:1C:36:8E:16:A8:0A:7B:B2:A9:9B:C0:29:26:7E:91:A8:FD
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial: 0194BD85A015024E8238CDB3CB86C29D4123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=)
2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: sc4UB038DYQAXkzoHzOXBkNO2iOdQaPQgIv2L/tdEsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:15:02:4e:82:38:cd:b3:cb:86:c2:9d:41:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=7260eb1c368e16a80a7bb2a99bc029267e91a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:a0:56:95:1f:fd:cf:7b:4f:9b:03:d9:1d:
d3:c4:97:d7:09:e1:ad:69:13:c0:c2:8f:56:fb:69:
9a:8b:77:f3:b6:a4:8e:31:25:8c:26:19:ac:3e:2f:
4b:08:1e:2d:84:e1:40:24:2f:15:a7:d7:45:23:df:
c4:39:e5:f8:f6:a2:30:37:7e:b2:fb:c6:fe:ea:95:
f1:fb:6a:af:2b:12:8d:ac:ab:14:f5:8f:c7:75:48:
e0:8a:f8:4c:bc:9a:a8:5f:07:36:8c:a4:df:a6:69:
53:49:60:b6:5f:dc:19:75:08:1b:88:f0:15:14:29:
08:a9:a8:08:aa:75:42:d4:52:8b:11:9d:03:99:26:
66:5c:38:66:fd:23:50:a6:e1:5c:7a:c0:92:53:c2:
b6:97:fd:c9:32:d4:c3:b7:10:4e:ad:25:b4:fc:75:
6b:a1:2d:90:87:17:79:e8:ac:2d:5d:74:a6:54:bd:
da:fa:5e:9a:3a:27:b3:ac:c0:d0:ea:45:a4:fa:a0:
07:61:4c:93:69:c9:4b:c8:0f:62:b3:f6:8d:20:d1:
63:bd:ef:f3:3f:ef:99:ce:6a:c3:52:c4:6f:0c:3d:
06:95:5d:66:34:af:9b:c3:1e:8c:60:1e:d7:f3:28:
6e:17:46:86:f9:aa:46:f1:69:6e:d8:e1:cd:85:73:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:EB:1C:36:8E:16:A8:0A:7B:B2:A9:9B:C0:29:26:7E:91:A8:FD
X509v3 Authority Key Identifier:
keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d6:f1:d5:d6:43:84:8f:d4:b1:1c:94:0f:07:6f:09:98:ca:
cf:28:6a:d7:7c:54:bb:d5:77:b4:62:b2:38:82:1c:64:23:24:
ce:cc:cc:40:55:c4:93:61:64:3f:75:49:ad:39:09:ee:7e:84:
f5:40:b1:32:ee:28:30:6e:f4:38:c1:ba:22:c6:c8:70:50:63:
6c:02:59:32:54:57:96:49:a7:eb:1d:c0:3f:ec:9d:df:8c:e2:
e4:fd:8b:f9:86:c3:a9:96:d1:19:69:8b:cd:75:28:bb:a1:cb:
2c:32:19:81:0d:8b:04:c6:7c:be:c7:63:ec:7e:e8:63:46:c7:
c6:fe:32:be:31:1c:a9:29:a0:0b:73:5a:97:87:6a:d0:b2:f3:
90:62:5d:92:29:b6:01:6d:6b:02:e4:05:59:e3:b6:42:b0:52:
12:4b:14:bc:db:22:26:25:0b:b1:11:4c:37:61:fb:6e:53:60:
1b:de:dc:6e:7c:7f:1f:39:e5:55:3b:c2:bb:88:2f:51:1f:21:
15:ad:b9:83:38:58:3c:1e:ce:0a:d8:59:00:c8:34:e3:b0:f4:
fb:3b:31:62:87:40:d3:25:ea:07:cc:5e:c6:6f:e5:f7:af:e4:
e1:c1:06:2b:9b:3e:20:82:5a:c7:b9:bc:00:be:ce:cb:f3:1b:
9d:54:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:27 2025 by rpki-client