Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: bU4SfNje4gw/PdIwhzCZD4iWJNBXg6MACEhDgMg6P/0=
Subject key identifier: 1F:DB:DB:18:4E:98:6D:5F:A2:F1:90:B4:6F:45:BF:17:DD:94:6D:52
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0194BBCEB9345FE73940F3CC56CA45B5BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 06E6
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: j2zP8zOa8n4zBc99Z0R1HYz6B4BPRAo1liKHwIwfeLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:34:5f:e7:39:40:f3:cc:56:ca:45:b5:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=1fdbdb184e986d5fa2f190b46f45bf17dd946d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:e7:56:23:ec:51:8d:c6:2a:dc:e5:71:80:
8d:57:8b:3b:04:cc:02:6e:9e:16:97:33:77:a8:b7:
91:41:7a:89:25:d5:27:31:9f:44:7b:e2:82:20:b0:
09:27:a3:33:97:b0:9b:a1:35:8a:80:b0:db:22:eb:
48:64:16:47:51:58:ad:e5:2e:d2:7c:96:fb:ab:a1:
fd:c8:12:6d:c7:45:4f:5f:ef:9c:cb:ab:bf:ab:37:
32:16:ef:d0:55:43:5f:a6:0f:c0:99:80:57:ae:f5:
df:e2:fa:8f:2a:46:33:49:be:7e:5e:5f:ae:8f:cc:
24:bc:c6:b9:f8:18:6b:01:9d:3c:20:77:27:eb:5a:
ce:7b:87:a1:f1:a5:84:38:e7:91:83:47:fe:82:3a:
39:6c:0f:af:a2:ed:19:4c:db:f1:ba:de:8f:46:56:
8c:aa:b1:3e:45:d1:ac:21:ae:08:db:8d:29:71:d9:
83:99:7a:5a:93:dc:b2:f7:92:ef:3c:40:9f:49:34:
ca:ae:ba:a5:4d:79:8b:44:73:50:d1:e2:bb:43:73:
cb:91:02:3b:0a:a7:17:c5:4a:7e:6d:32:25:76:b6:
37:91:f2:48:64:47:f7:8b:5b:b5:8a:03:80:68:f3:
58:7f:ef:be:55:03:23:74:b2:0e:23:76:f2:89:7a:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:DB:18:4E:98:6D:5F:A2:F1:90:B4:6F:45:BF:17:DD:94:6D:52
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a4:2e:6f:f7:c9:57:8d:6e:0e:b3:e7:5a:8a:6d:e1:fb:5a:
cf:33:bc:8b:98:08:1a:67:ee:36:88:dd:9c:8e:20:a9:5b:59:
6c:e4:3a:c2:14:c4:bf:c2:4e:3c:95:6d:cf:3e:b5:bd:c4:b2:
0a:7c:39:7f:da:cb:ec:bc:b9:18:ea:b5:d4:9d:23:b1:ea:60:
7b:ff:ec:ba:5d:6f:a1:73:dd:76:24:fa:05:bf:c6:93:f5:13:
dc:f9:40:84:d9:aa:eb:99:dd:be:46:31:20:3e:1d:bd:b6:2a:
cb:2e:35:18:10:97:6b:0b:2c:f2:55:b1:64:41:9f:aa:90:7e:
64:29:6d:d2:be:2e:77:44:e8:42:85:c8:5c:f4:3e:58:d2:7f:
42:1f:c6:81:52:4d:4d:82:9c:e1:32:45:37:7b:24:f4:0d:fa:
a7:10:bf:d7:50:73:a1:c4:3e:5f:d9:77:2b:de:6a:8c:68:57:
61:c4:33:ee:21:a5:74:c0:0e:00:e4:25:a7:ad:3b:e5:8c:d8:
13:98:ac:7a:9c:41:f7:8e:99:99:a1:45:d4:28:3e:f5:20:fd:
8d:6a:5e:74:0a:ba:17:78:1b:ce:54:f9:cb:54:37:00:dc:62:
be:00:79:f4:8f:7e:c1:1c:28:d0:b2:8d:8e:37:17:28:c9:02:
cf:9e:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client