Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: v72Dg/ods90V1V7pHROlxpiQmEQGV5UGkJiiS8eorGQ=
Subject key identifier: 00:7D:40:FB:2B:80:8C:3D:98:67:4E:4D:75:CA:74:6E:00:CC:94:09
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0194BD4E5B2324BDFFB57CF99C57BE28BFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: NBiB7+cXCchk0DqZal/PI78KJ3D2hMdSoWp+qlC5gtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:23:24:bd:ff:b5:7c:f9:9c:57:be:28:bf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=007d40fb2b808c3d98674e4d75ca746e00cc9409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:31:ae:c8:02:88:18:46:20:1e:12:b2:46:
93:c1:ac:55:b0:b3:50:66:89:24:fe:7a:f3:46:c3:
c2:19:1f:3e:28:ad:9b:e1:07:d8:01:5e:10:bc:8c:
25:4b:11:28:08:77:52:0c:9f:33:36:87:c5:45:71:
71:3c:19:96:e8:da:34:fa:4f:07:01:b2:dd:7b:b2:
00:7e:bc:30:b0:5b:eb:b0:cc:70:5a:b6:7e:ea:9b:
fa:4b:7e:d6:ad:4e:55:42:0b:70:33:64:37:99:b0:
f1:4b:2c:25:fd:57:b8:13:a2:e5:34:55:7f:e2:6d:
4f:dd:22:96:98:b6:2e:de:25:da:14:f1:9b:4a:a0:
4b:b2:87:5a:8d:2b:a3:08:55:b2:9e:90:fb:8e:8d:
f2:47:aa:7f:23:fd:3f:5e:06:4c:75:30:ef:2c:a6:
e0:1d:93:dd:05:91:47:84:8c:98:83:08:b0:b1:c1:
8a:b1:b0:e4:ee:2c:20:dc:a3:07:d2:7b:42:50:86:
28:10:f5:1c:5b:d0:c0:35:87:e5:ad:f9:1d:81:a9:
92:69:57:60:9b:17:37:ce:3c:0f:7e:3a:35:4c:d8:
5e:bd:f7:42:68:54:08:79:c5:98:ae:04:7a:9c:6f:
65:9a:71:52:49:9b:36:2a:32:9b:87:6f:b2:bf:c4:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:40:FB:2B:80:8C:3D:98:67:4E:4D:75:CA:74:6E:00:CC:94:09
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5f:69:62:85:63:58:32:55:2c:50:0b:45:bb:50:d5:b5:b3:
74:f8:db:52:c9:fd:a5:46:0f:ea:fd:ec:03:e8:4d:1f:39:83:
9b:5b:21:b0:83:be:13:8a:4d:f9:c1:e5:e0:54:e2:d1:c6:4e:
cf:05:8b:29:1e:34:fd:5b:5c:e0:23:8d:7d:07:dd:85:29:49:
12:39:9a:8b:6c:bf:8e:90:51:1c:c8:af:51:75:1f:ff:65:ad:
a8:b1:ab:70:bc:82:25:5f:fa:cd:73:05:87:9e:5d:8f:93:61:
8b:4a:49:aa:6d:61:f9:c3:47:90:61:b4:f3:99:b8:d4:b7:54:
1f:45:3a:04:a0:74:03:b5:f1:12:02:e6:77:e6:b9:c1:6d:31:
20:22:a8:c1:a2:63:7d:54:91:1a:69:b8:ae:05:99:74:5a:e7:
22:0f:92:c4:69:e5:28:48:6d:2f:20:0c:8d:09:42:07:e0:8b:
62:7c:85:dc:f1:9d:fd:b3:e1:23:c4:a4:d3:0c:0e:9c:df:45:
16:d4:d6:3b:a5:93:71:20:7e:48:49:41:2c:c9:d9:97:2e:3a:
5f:d8:9b:a7:e0:15:a3:38:70:84:ac:12:ac:4d:ff:3f:eb:4a:
0a:cf:c9:af:ca:90:85:9a:86:8d:d6:21:f4:ee:15:c7:c2:9b:
9f:00:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:09 2025 by rpki-client