Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: qQCFsrveIYz/lwByjjY9Wb1FxaXeh2jeZ3vK4Kmk1FM=
Subject key identifier: AC:19:AD:15:13:F9:27:63:13:41:75:B1:21:6B:70:A8:19:B4:92:7E
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0194BC3CA2975DA69C089713AFFFA6C26C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 13AC
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: n8/mw7JDnh4L5C3C6asCPKjG7ZN8Vnll2ZZ90TEffRY=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:97:5d:a6:9c:08:97:13:af:ff:a6:c2:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=ac19ad1513f92763134175b1216b70a819b4927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:19:0b:af:85:10:65:cb:3c:e2:5d:9b:93:
bc:4e:f4:b8:35:72:49:96:89:24:8a:a6:16:b4:42:
26:53:f0:57:52:50:13:86:7a:8b:9d:09:c4:4d:cc:
1e:c9:92:73:e4:91:80:3c:ea:ac:93:ee:5e:5f:f1:
3c:c9:72:5c:35:de:a2:77:d4:28:49:20:c7:ad:c9:
68:9f:99:6b:22:18:04:57:29:67:ee:35:69:4f:36:
5b:16:e9:7d:97:9a:60:10:2f:42:e4:5f:62:1f:f5:
5b:b6:d8:fc:89:fe:10:fd:c9:ad:6a:40:22:2c:bc:
64:93:d4:0e:eb:21:f9:1a:07:ce:d6:1f:23:21:9d:
b1:96:3b:cb:77:35:19:ec:cb:49:e8:f3:b2:80:d3:
1a:ab:9f:6d:c9:12:f3:d0:a6:aa:82:c9:da:dd:23:
80:8e:d2:7f:52:8b:8b:a6:7a:ec:00:ed:91:a9:df:
4e:df:38:bd:a6:ad:9c:03:04:47:2f:51:d7:a6:d3:
0d:6e:6d:0b:34:09:c7:42:ca:ac:60:59:c4:c7:c9:
e0:f2:7d:f4:ca:aa:70:24:a4:40:0d:06:29:f9:eb:
05:78:66:2c:6a:40:e7:30:65:6a:99:e2:8c:53:0b:
a8:5f:ee:e1:75:a8:cc:fb:d9:45:82:70:df:c8:0f:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:AD:15:13:F9:27:63:13:41:75:B1:21:6B:70:A8:19:B4:92:7E
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:fc:98:55:b7:5d:ea:be:69:ef:c7:f8:1c:33:55:64:bd:
40:76:4a:ce:38:c1:b0:2a:0e:6c:7c:3e:6c:06:24:da:e8:48:
56:f4:a7:35:5f:f7:a6:90:db:ca:49:c3:c2:c7:f9:a6:b7:f4:
bb:3b:23:f5:15:01:58:94:a5:20:f4:96:a5:0e:a3:6c:de:dc:
94:39:c5:8a:61:f5:00:82:d0:6e:2e:a1:4c:c6:ec:47:c4:a8:
1a:be:7c:77:00:59:14:22:aa:53:80:f2:91:16:9f:24:e9:15:
6b:6a:3e:e5:67:ee:1d:f6:49:df:7f:74:00:a9:1c:4f:ba:c2:
e7:9a:0d:b4:2f:e3:2c:b2:58:5d:a9:a0:c3:6e:65:9a:99:28:
f1:94:d5:5d:32:fe:ab:a7:cf:99:95:af:b5:0e:f1:11:94:f8:
71:1a:a7:af:17:bf:6c:dc:ec:20:f4:55:45:48:94:a0:7b:50:
8e:5b:ab:81:b0:3e:b1:2b:a2:49:5a:2b:e0:ab:84:74:ed:54:
60:eb:62:76:af:d9:79:d3:ee:9f:08:92:73:84:2a:15:8b:ae:
4f:d3:57:88:b0:ce:c9:d8:8d:a0:ba:ef:eb:33:c1:71:4d:d8:
9f:8e:49:10:af:42:c7:6d:ed:81:89:21:7f:6e:74:b9:c8:93:
b3:6a:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:47 2025 by rpki-client