Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: /XSV6VjOi/tO0+Kn16YBoQXLQalGktJl5jhDED/EfQk=
Subject key identifier: 40:65:73:52:6D:1D:CD:DD:B5:46:DE:88:61:55:B3:1D:B9:6B:7E:28
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0194BC3C70D176ACC9F454505694D580992C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 0EF8
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: ds8x3qHhuROEI3eYeW-J-KnoVOY.roa (hash: sZSMC1BrQoLmX+rojH+SOE/CV/DFjkpNZIlB8RClTc0=)
3: jQInECNXc0p8Lpjj-s1SoXORrsY.roa (hash: QgcQD1WSSYMYOa1FRqEex60YkyPfDqbnNuvvBLNxxGQ=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: ZQaP3vcAXbd2OggZoyTpKdoa6j0HzuHUAJIbdawUCqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:d1:76:ac:c9:f4:54:50:56:94:d5:80:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=406573526d1dcdddb546de886155b31db96b7e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:e3:58:6c:85:a4:6a:80:94:7d:c1:fe:e1:
f4:e9:db:29:87:7f:9f:b8:99:81:1e:77:92:d7:2b:
13:a6:de:16:6d:fc:aa:58:27:eb:13:93:66:88:c9:
63:e8:4b:92:99:30:7c:fd:1c:4f:53:aa:31:0a:86:
09:87:20:2a:93:5f:a1:16:0e:0d:bf:9b:34:00:c1:
d9:f3:a8:01:51:a2:59:8e:1f:c6:06:95:64:86:26:
86:8c:f8:53:c6:e0:8f:77:e1:38:15:fb:07:e7:b6:
ef:15:73:ea:5f:72:a6:c9:bf:6b:16:77:01:91:42:
a5:1a:70:f7:4f:a7:92:17:b4:2a:ad:f0:bd:bc:c3:
ce:e6:3e:a9:63:51:81:4b:2d:bc:e5:68:7b:f7:9a:
dd:fb:11:93:a7:76:56:30:d0:51:14:b0:df:df:2b:
88:fe:a8:08:82:19:d3:62:19:7e:0b:3b:b5:6a:bb:
48:6e:1e:84:74:a7:24:3b:41:d8:71:bc:53:cf:20:
7b:5f:11:69:3e:fa:9e:b1:c9:2e:f8:4b:e3:3d:0e:
45:64:de:d3:68:b2:71:17:09:4a:d2:0d:ff:1f:ff:
de:d5:11:10:9a:0c:cc:e2:71:5b:7a:80:51:e6:8c:
df:a2:6e:ba:12:e5:75:00:46:2e:7d:03:44:ba:cc:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:73:52:6D:1D:CD:DD:B5:46:DE:88:61:55:B3:1D:B9:6B:7E:28
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7a:36:ab:b6:4c:0c:ba:fa:d8:00:ed:34:31:75:f0:2a:8b:
88:a8:46:c8:81:b3:83:de:06:9b:41:05:a2:63:87:a4:a0:ef:
ea:f7:83:7e:e9:71:ee:90:2b:1c:a7:ca:d3:0e:97:14:71:10:
e6:c3:a8:1c:4c:54:8a:0b:c1:61:f6:91:ce:5e:bc:97:40:9f:
e5:11:a3:4e:0a:84:d1:56:18:bf:bb:66:c7:4b:76:50:72:a8:
72:1e:85:ba:10:5f:1c:ff:59:2e:71:61:34:c4:6b:a6:f3:5f:
21:fa:f7:26:de:06:b6:02:f1:f0:46:3b:6e:1e:cc:79:f1:54:
a4:40:6d:e6:5e:2c:32:11:89:f6:a2:78:57:8f:76:6c:34:ea:
dc:05:4b:8d:27:b5:37:69:9b:bb:9e:5e:1e:48:a1:c3:0b:8f:
50:60:36:bd:ce:7f:9c:62:b9:5a:22:83:a0:1f:d4:fa:8e:32:
dc:8d:1b:2c:46:8b:77:11:cc:12:62:5c:81:e7:c3:1d:5d:03:
3e:d4:4b:56:5a:67:74:c5:43:c2:1b:c9:f1:1e:ce:e9:c3:b7:
87:d8:22:8d:f8:7e:96:44:5c:36:40:f2:23:1a:02:f2:23:0d:
ee:8c:bf:8a:fe:aa:ce:3b:a9:d6:56:66:5c:5d:05:fd:ee:0a:
7f:7c:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:07 2025 by rpki-client