Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: V3oa/50+pevMaZSYl10VF5EwcsKS20OcsL+IJ9DKA9s=
Subject key identifier: C2:9F:82:21:AA:AA:DE:95:92:B7:25:00:12:9E:91:74:37:5C:8D:E3
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 0194BBCE5F7FFFC5F0111D7FBDAF873FE43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: gWFI607GT4diptK6z6klQ2oZYkU.roa (hash: H46kA3fqfVNyrqG30wfIQclN0fJfVoNQ86D8lIAtPgI=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: qZq4gg8uNjNfm3ms1n17HThP0bprLzpownF+pRxKfjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:7f:ff:c5:f0:11:1d:7f:bd:af:87:3f:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=c29f8221aaaade9592b72500129e9174375c8de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:92:f8:a7:18:e7:05:b2:22:98:9d:d2:ef:
3b:df:bf:ff:c8:f3:18:e5:ba:fd:10:16:01:92:35:
3c:0d:88:eb:e5:07:b2:9f:fc:49:30:11:ab:79:c4:
49:b6:c3:37:9f:69:6e:19:27:de:a5:4f:97:32:65:
24:62:7a:63:8b:3e:70:aa:7b:8e:7a:60:24:63:42:
f1:65:4d:0e:70:22:f6:92:7f:6e:a9:43:9a:22:cc:
3c:25:46:59:33:59:d2:77:85:ee:b0:fa:34:86:c9:
8b:c5:14:18:8f:3f:74:59:4a:39:20:83:11:21:53:
15:01:7f:3a:7e:8b:85:de:4a:a7:fa:61:b3:7a:82:
c8:22:65:75:43:d3:e0:db:a5:e7:67:ae:01:37:d1:
64:a1:88:87:f4:bb:c8:3a:ea:11:58:0a:1d:c0:e8:
07:7c:32:1c:fc:f9:94:df:64:74:c3:4d:a1:e7:6a:
01:92:e6:17:f0:3a:dd:a9:20:14:39:0b:d6:f8:85:
2b:f8:55:49:16:74:24:cb:18:eb:f4:ea:cf:04:8f:
8b:90:41:a4:a2:34:eb:e3:83:0f:d9:96:df:13:f2:
65:0e:b7:c6:6f:a8:c9:7d:0f:44:f4:97:7a:16:6c:
5f:9d:90:f2:9d:e0:9a:fe:6b:69:12:6f:ce:c6:8b:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:82:21:AA:AA:DE:95:92:B7:25:00:12:9E:91:74:37:5C:8D:E3
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5d:a7:d3:c4:53:1c:4a:39:a3:ee:c5:b0:a2:d4:c7:2c:bf:
1b:77:82:72:f9:0f:9f:1e:02:a7:95:f7:a9:2d:95:f4:ab:9f:
5e:1c:e9:ae:33:d8:d5:c6:a0:9c:9a:19:9d:df:b4:56:ec:cd:
2c:7c:ef:3b:bf:90:6c:f7:e6:fb:81:40:5f:af:6b:07:77:8c:
3c:d1:3c:a4:1d:55:c6:59:b7:11:86:5a:e7:50:85:ca:6d:8c:
de:01:33:ba:b8:94:fe:82:15:38:84:9b:08:13:86:2f:c4:f4:
26:fd:6d:f5:09:82:a1:a3:af:75:15:b2:d0:fc:af:17:ad:22:
23:14:8d:58:bd:ba:16:0a:06:e3:7c:84:1d:91:77:42:f9:34:
92:99:e2:6b:63:d9:ee:1c:e6:50:ff:59:38:21:84:b1:8d:b7:
a9:b8:84:18:84:27:77:f1:ea:f4:84:33:ad:8e:da:82:ce:1f:
31:d9:1a:cd:31:e2:06:9c:d6:80:fa:18:59:90:c2:0e:ad:e8:
2c:23:b3:bd:2b:12:85:14:0e:a4:29:e5:f7:2a:66:f8:04:a7:
2a:c3:1f:1f:01:ef:5c:c7:5a:b7:c6:95:82:b3:13:ad:9c:56:
e2:28:4e:09:14:ea:08:8c:4e:7f:3f:59:d1:ca:79:7c:c4:c2:
df:39:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:44 2025 by rpki-client