Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: kJp4fHOe2gc92Es8u5gmimIWIbVVlxFYYykJpQjAzLA=
Subject key identifier: 69:42:4A:31:D0:57:31:90:BD:46:48:1B:21:AA:B9:9F:29:0F:E2:A4
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0194BC3C5B619D30465D42E637C2A93E7126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 02A7
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: 9fECWl4Bc5sRfKwExrXtVI9FTPgCOSrpMKsa/t131N8=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:61:9d:30:46:5d:42:e6:37:c2:a9:3e:71:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=69424a31d0573190bd46481b21aab99f290fe2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:c4:07:6a:ad:e3:de:3b:81:c2:9f:bd:de:
21:d0:97:3b:6a:a2:b4:f0:02:2e:e1:3b:aa:92:6b:
7a:41:88:11:34:42:6e:77:b6:f5:57:66:3e:4e:71:
00:aa:dc:7f:75:2b:2f:32:21:0a:bb:6e:1a:8b:76:
0e:7c:7d:af:03:bd:c3:60:c4:a9:d0:59:11:2f:e7:
ef:55:ea:77:f4:8e:91:52:91:42:12:86:13:32:4b:
6f:35:0e:07:86:19:2f:cd:f3:18:e2:18:b4:1e:b3:
26:a3:ca:ab:e2:0c:73:31:bf:56:f2:e1:24:ee:95:
2d:59:5c:2d:14:b8:ff:02:3a:8e:82:8e:8d:0d:ae:
0e:b3:f9:76:ac:c4:aa:af:db:4d:99:3a:ec:fc:f2:
84:d0:4c:7c:b7:60:7d:65:f4:53:d6:03:9e:74:53:
97:32:12:8e:eb:c2:ee:48:f7:a0:d8:98:24:82:37:
f9:77:ed:45:e3:77:13:47:3a:8c:0a:05:db:6b:a7:
4d:2e:1e:f5:68:f6:3e:fe:85:02:18:b9:91:ef:27:
42:4e:12:ed:5e:b2:0f:e5:b9:7b:23:e4:d0:a5:f5:
4d:d2:09:41:9b:65:94:a7:70:e5:a2:32:68:56:19:
1d:69:f8:e6:ce:18:be:cb:a3:95:ee:0d:da:ea:1d:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:4A:31:D0:57:31:90:BD:46:48:1B:21:AA:B9:9F:29:0F:E2:A4
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:77:e6:a7:7f:f0:43:4d:84:d4:4c:13:f3:c7:e4:b4:74:db:
fa:38:01:b2:d5:86:40:66:5b:6c:8f:36:42:b6:40:6f:34:29:
01:e8:4b:96:8a:25:4d:b8:aa:25:0f:73:cf:d7:9d:e3:83:5d:
a3:3b:85:de:02:fb:3b:a1:82:e8:cf:6e:6d:52:33:e0:14:88:
1c:1c:7c:3f:14:42:45:4b:2d:c1:d0:d5:58:7a:8b:01:49:0c:
cd:48:bd:cf:50:8f:a4:da:68:d6:d6:88:9d:82:c0:f8:d8:bf:
ad:28:ed:4f:17:b4:bc:5f:da:a7:20:0e:d6:ca:af:e5:87:9d:
76:aa:7a:74:a4:15:ae:c3:52:f7:be:97:af:d7:4d:fc:95:dd:
b5:8d:93:8b:90:ea:77:5e:14:79:74:ee:bf:12:b3:2c:d0:9d:
ae:49:c1:dd:c4:ad:2a:01:64:49:5f:f4:e7:65:04:2c:e3:b1:
4f:75:3f:24:ee:f4:0e:bf:8c:8f:c5:14:ba:91:22:66:d8:71:
cc:ca:7e:5a:84:0d:c6:5f:73:a3:3c:83:4c:9f:ca:1e:10:b9:
ca:c8:6b:38:74:eb:fb:d8:4d:23:79:52:5e:c4:3c:0b:b2:cd:
a7:7c:04:87:f0:cb:ec:8b:98:2a:38:0c:12:4a:57:1d:3e:59:
1f:3f:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:30 2025 by rpki-client