Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: ZgqSxzbXGZBJWxHAEX6iQ33IZ4A5SfR/cPHkvk/ZSX0=
Subject key identifier: 19:BB:56:CC:09:FB:97:77:A8:CF:57:C2:C2:24:CC:DB:AE:B3:89:49
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 0194BD855E071FCFE52EBE4AAA93F808E783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: yZJomzLu2Jw0i0dAWEbORR1pEJ9IUloDWeaSHaH3fbc=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:07:1f:cf:e5:2e:be:4a:aa:93:f8:08:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=19bb56cc09fb9777a8cf57c2c224ccdbaeb38949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:4a:35:43:46:0e:ec:f8:36:83:3c:44:8e:
c0:b4:c4:77:cb:73:ed:6e:b4:64:7a:12:b8:27:a7:
c7:16:ab:82:54:46:6a:cb:46:e2:56:ee:74:76:90:
54:31:2c:cb:e4:54:7b:b1:dd:40:8e:46:c0:ee:05:
6d:95:19:9d:83:60:d8:79:16:4a:2f:ea:9f:c3:8b:
9c:f0:c3:0f:5e:99:49:fb:ad:ca:49:97:47:0a:b5:
fe:d8:0c:a0:c2:de:02:b4:be:de:62:6c:ed:8e:14:
e0:c4:8d:7d:d7:f1:1b:a6:40:79:5b:97:1f:1a:3c:
85:d5:28:a7:2d:1a:bd:72:21:76:e7:22:0e:6a:ca:
b0:45:37:66:03:78:a0:7b:7a:b9:cb:dd:fa:0c:78:
44:6d:5c:18:06:93:02:89:e0:db:51:cb:7d:f8:61:
d9:69:58:7e:41:fa:50:f4:b5:dd:8d:12:ab:8b:d6:
1b:92:a4:bd:aa:72:20:69:08:3c:c9:92:7e:10:24:
9d:ef:70:b9:0b:92:8c:82:57:f7:5a:81:fb:65:50:
0d:e8:5e:81:1d:bb:e4:12:f1:b8:53:1c:ff:70:d6:
05:2e:2e:b8:4e:a6:22:7f:e9:e2:69:47:ad:ca:f5:
6a:95:3e:43:3c:a9:a3:2f:71:ce:3b:51:47:21:15:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:56:CC:09:FB:97:77:A8:CF:57:C2:C2:24:CC:DB:AE:B3:89:49
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:10:66:26:83:b0:30:a6:75:8a:bc:61:f6:bd:82:a9:d1:
51:be:1b:ec:61:9f:5d:8e:f6:41:78:2f:c5:22:32:d5:44:71:
81:9c:8c:87:d7:a9:73:71:38:37:1d:42:40:ba:f5:d1:f2:c7:
fa:82:80:f9:6d:f6:db:00:3a:bf:5d:a6:0f:f4:a9:c9:b2:a1:
ef:91:b5:e0:c1:3d:f7:c2:46:d0:4d:a6:1b:28:96:2a:d7:c8:
04:ae:86:f7:05:11:e8:45:79:45:c5:7c:52:ff:f1:ce:40:71:
e9:f6:82:10:02:a8:b1:d5:64:e3:31:23:92:79:0c:83:bb:37:
f5:00:ee:d5:e5:49:52:9c:b6:99:48:29:91:2f:bb:e9:69:1a:
63:0e:79:1d:bb:ba:7e:e2:52:df:d3:c9:dc:1b:57:d5:d6:d6:
ac:17:5a:05:5a:81:2c:5a:9f:90:30:85:30:88:12:d3:ce:12:
b8:9a:39:5b:90:58:b2:8e:99:47:37:44:0b:dd:d2:56:c6:09:
80:4b:26:55:95:cd:20:58:e3:f0:1b:d5:2c:75:3b:2b:fd:45:
49:fb:74:3b:78:5b:12:d8:66:11:c8:eb:1b:c4:19:44:2f:95:
1f:a4:68:69:da:bd:61:c7:20:d1:15:6c:1c:78:18:63:6f:fc:
1c:1f:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client