Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: UCgBxS/sLcQMpWxy3OgYHvIhx1pq2oHVjWdod5Xd5UU=
Subject key identifier: D1:97:BD:A6:32:E0:81:05:86:81:98:B4:4C:AB:07:DD:69:FC:E2:9A
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 0194BD17F6480E5DB6C4483A3E5F3918E7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: SwwJ1Nmqf4+L4fYlCuEepKGuH67C6TdysCVRCc8i1BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f6:48:0e:5d:b6:c4:48:3a:3e:5f:39:18:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=d197bda632e08105868198b44cab07dd69fce29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:01:44:bf:aa:95:91:5e:6a:a0:6e:f6:5b:
70:87:54:5d:e5:8b:cd:e1:5b:d9:64:bb:60:17:bc:
d5:a8:58:f3:3f:cb:65:80:75:0d:ca:bd:0d:76:c6:
31:bf:2f:37:9a:b0:53:28:9c:70:4e:0c:46:2f:2d:
ed:2d:10:65:0e:39:4d:dd:c5:6e:98:a5:bc:e5:1f:
03:83:af:d4:d5:8a:98:1e:6c:c1:c2:12:0a:f9:da:
a6:63:2b:18:10:2d:d2:11:d2:7c:28:e5:9e:7e:43:
cb:3d:2f:19:d2:33:81:03:83:e7:8f:2a:29:3d:c1:
a7:ad:24:05:63:c0:60:bf:1f:9a:2c:3b:be:6e:b6:
e6:82:4c:28:ef:94:95:1d:2b:c1:88:65:d4:35:1f:
78:fa:0c:55:10:28:55:6a:a4:96:af:3b:f0:6c:a2:
47:97:45:4e:c9:43:00:1b:06:a0:1d:4e:31:5a:19:
d8:8a:6b:ce:f4:f8:63:e9:b3:ea:96:fa:be:a1:24:
e0:ba:f1:e3:87:3e:1c:6c:9a:f5:8e:48:62:d3:3e:
b2:0f:f1:35:23:73:d0:e9:13:42:c5:cd:35:dc:0b:
2f:bc:f2:5d:5c:78:00:13:3a:0c:e0:1f:19:6b:83:
3e:45:27:71:96:50:c6:97:15:c3:4b:d8:1f:8e:bb:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:BD:A6:32:E0:81:05:86:81:98:B4:4C:AB:07:DD:69:FC:E2:9A
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:15:e7:cb:2b:73:de:cc:44:27:9e:8a:b5:d4:f9:95:1b:74:
7a:28:b7:d4:46:32:77:51:03:e5:56:0f:d9:53:7b:05:86:cd:
25:75:02:bc:94:7c:f8:f5:28:3b:5f:29:dd:07:b7:f9:1f:49:
e9:8d:23:69:45:84:ac:9f:24:fb:3a:9a:78:1e:71:50:5b:b6:
d9:ae:58:42:68:4f:bf:33:ec:d9:c2:d9:fe:cd:3a:71:ca:9d:
1c:1b:d8:dc:14:54:95:31:02:0e:ff:f2:46:0f:36:8f:77:43:
95:e8:66:62:c7:63:d2:76:bd:17:4f:14:ae:29:dc:d5:c6:cc:
b4:3a:b6:9e:cf:6e:e9:cb:59:cb:e1:e3:40:ec:4f:0a:de:60:
e2:c2:ae:78:a2:06:97:c5:01:c5:d5:a6:5c:39:be:e8:50:55:
be:68:b0:38:68:2f:2c:90:6b:18:a1:5f:f9:b9:bf:04:3d:11:
64:6d:d2:bc:15:6d:16:b1:a7:34:ec:e6:9a:d0:24:96:28:0c:
be:22:79:f0:04:63:af:ec:87:91:43:8f:fb:f6:f8:b2:9d:49:
7c:9c:fa:ec:db:42:1f:bc:e5:c7:c4:8e:4c:e0:66:60:ff:de:
61:26:62:23:cd:9f:c3:87:45:34:6b:e2:58:e6:0b:63:71:9a:
1a:dd:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:30 2025 by rpki-client