Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: TGM4bClh1paTZxmfQQpfvT+w2o5ZZ4UBmoilPJRheWA=
Subject key identifier: 11:FB:77:61:70:6D:0D:94:E8:2B:5E:4E:E3:2A:2A:17:DC:FD:34:61
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 0194BD856B0A53EB21021A3127AE1B6C1FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: grfgWUmkLEj7GOITRyZacIuDOkVhE3f4HLFdh76XfN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:0a:53:eb:21:02:1a:31:27:ae:1b:6c:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=11fb7761706d0d94e82b5e4ee32a2a17dcfd3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:8f:b4:29:70:e9:f2:86:26:93:a2:2a:87:
70:b1:1c:c1:3f:b7:0d:4d:ae:79:02:38:b0:94:97:
07:cb:1a:4f:0c:5d:46:a6:e3:bc:fc:bf:f2:d6:9e:
ce:0b:ac:19:40:53:bf:85:69:b3:18:02:33:d3:81:
8e:6d:74:fb:f3:0d:27:89:f7:e0:bf:8e:dc:f1:80:
0a:fd:dd:42:97:6b:8f:29:93:98:21:74:1e:bb:40:
fd:8b:91:c5:ab:3c:c8:20:76:76:5e:1b:21:42:64:
f5:4e:b3:e6:64:ca:5d:65:50:27:75:5f:32:fb:d8:
93:e2:fa:19:bc:e2:c0:8c:ce:b7:ba:84:5c:39:33:
30:5c:3c:3f:f1:62:6c:5d:90:7a:dc:24:de:13:e1:
16:dd:0d:4d:f1:95:43:bb:29:99:8b:0a:dd:98:18:
06:bc:cf:b2:63:a1:a1:f3:c2:03:dc:ef:a4:42:86:
eb:ba:b5:f6:34:5c:e7:40:36:ea:05:c6:cd:0d:60:
7f:7a:b8:36:e7:f5:9f:c4:e6:60:9f:37:35:eb:55:
ca:4e:30:67:0d:b8:22:f9:42:3a:18:e7:ee:02:01:
5b:63:2d:4c:49:e8:c7:b6:60:2f:f0:3e:c8:aa:76:
56:41:2f:af:96:86:0b:c1:09:f9:22:ca:b3:0d:e4:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:77:61:70:6D:0D:94:E8:2B:5E:4E:E3:2A:2A:17:DC:FD:34:61
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:1e:9f:ed:34:de:34:eb:3e:8b:a4:e1:f7:2b:fd:91:58:
1f:7b:a4:98:d9:32:8c:43:63:0c:e1:21:89:cb:27:b1:58:b8:
a9:6d:ef:54:8c:ea:1c:ef:30:8d:7f:4e:2b:b2:99:9b:38:50:
59:8a:96:d7:89:f4:83:c6:03:a2:5d:53:15:b4:7a:e0:a8:5b:
8a:aa:68:f2:b4:8d:e2:be:1c:86:31:cb:35:84:13:e7:0b:30:
d8:d9:cc:bb:e8:fe:e5:4d:69:ec:af:90:41:1c:11:6c:57:aa:
a7:15:82:19:1a:41:c8:9b:35:2f:1e:a5:57:96:e4:63:c0:01:
4c:83:24:0e:74:df:25:86:f7:e9:4d:b4:e6:63:99:e3:78:4e:
37:43:30:20:0d:3b:db:25:6e:3a:fe:3c:3d:2f:7e:8b:1e:6c:
c1:aa:cf:b6:a8:fa:81:ff:e4:ec:79:15:ab:ba:f6:b1:9f:fe:
83:b4:23:b1:b6:dc:61:b2:e0:6d:97:02:f3:77:9a:27:27:04:
51:39:1d:89:6d:7d:3a:4b:b2:52:ed:21:50:04:e1:f0:9e:e8:
6e:c4:e7:8f:9a:0b:5f:e3:e6:c6:be:35:f5:13:64:bd:8f:3a:
42:c6:80:03:12:30:c7:45:db:c8:8e:34:d5:b2:be:e4:f9:1c:
18:2b:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:19 2025 by rpki-client