Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: qLlhmTImfVFDTgVAPFZpdD0vkKO05dd/mtLO1xctpbI=
Subject key identifier: C4:E0:F1:9E:A3:28:83:5C:5B:07:EE:6C:8B:0C:33:78:D3:22:D1:1A
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 0194BCA97950A3182025142465576F6CF4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 054E
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: YbYL2KMAt5Yoqt7B2WBQl1X5kTy8MRgT7X3G5HeAruQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:50:a3:18:20:25:14:24:65:57:6f:6c:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=c4e0f19ea328835c5b07ee6c8b0c3378d322d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:45:f0:fd:b7:b6:59:3d:12:56:b4:61:4c:
e0:a5:d2:6d:6c:d4:5b:a8:2d:a3:85:b9:7a:39:53:
42:0c:8b:fb:6f:38:68:5c:41:4d:d7:37:f6:3b:7c:
e5:67:ba:16:7f:45:e2:97:0d:85:e8:dc:a4:ef:ed:
7e:ce:ef:fb:b3:f0:a7:1d:03:15:e1:25:e4:0a:04:
c2:e4:5f:06:bc:d2:28:d1:dd:9a:3a:9e:6d:23:e3:
64:80:f3:ca:6a:ce:63:ca:30:e6:41:7e:64:15:54:
1b:21:26:14:3a:5c:bd:bc:61:bf:eb:b0:f2:36:fc:
aa:f9:ab:48:f4:40:b6:a5:83:86:29:bd:3f:a6:9c:
5e:48:2e:f9:5a:a3:22:1d:57:dc:77:3c:b9:50:7a:
4b:09:36:76:0d:7b:4a:d3:9e:4f:42:49:5d:4f:b0:
a6:8f:8f:1b:22:c1:5f:10:b2:86:4c:ee:55:05:44:
ef:b2:aa:d5:4d:eb:4d:5e:61:6b:c2:4b:c2:67:a4:
5c:90:fd:05:e9:a9:0b:4e:73:b9:a1:05:86:d2:3e:
c2:ac:ab:52:66:c3:ac:78:13:e1:1a:0a:c7:74:9c:
5a:52:81:75:03:1b:b2:92:f7:36:6f:c1:b1:04:63:
3f:20:00:54:7c:e5:03:e6:4a:c0:cd:ee:0b:ff:55:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E0:F1:9E:A3:28:83:5C:5B:07:EE:6C:8B:0C:33:78:D3:22:D1:1A
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:43:89:4c:08:97:7e:a0:5b:47:bb:77:bb:67:1e:ed:ca:5d:
12:eb:95:1d:78:b4:51:85:b2:7b:c5:d3:5c:39:04:92:72:0f:
b9:6c:de:8e:e0:c8:c1:09:10:97:9e:ee:71:69:5d:d1:c8:63:
5b:a0:d4:ab:c5:d9:60:b6:96:77:85:1d:4c:67:19:5c:13:db:
f7:f0:78:39:cd:07:7c:6c:ed:28:8c:2a:67:9d:52:f9:72:47:
e2:57:e4:ce:83:59:fd:3c:ad:c4:88:45:a7:1c:37:93:22:2e:
aa:87:39:32:48:f6:c6:91:5c:76:34:6e:b1:53:66:81:1f:15:
21:68:51:db:8b:9d:a0:b7:b9:e0:f5:7f:6a:95:1c:fc:3d:18:
12:4e:3d:47:d1:aa:64:91:7f:15:38:5b:11:42:8f:5a:77:66:
59:27:15:d0:0b:45:78:d6:0e:7b:d4:a2:25:82:54:70:75:df:
19:23:62:6c:69:89:9e:31:c7:aa:67:de:3f:ff:47:86:20:bf:
ba:fe:f1:1c:d1:2e:3d:30:af:89:a1:3b:6e:2b:23:bf:48:6e:
40:71:ea:8d:a1:f0:11:4d:04:0d:b5:73:e6:7d:0b:b2:83:35:
71:d4:2d:7f:9d:10:ac:15:91:54:30:d3:b7:39:09:e6:45:5b:
26:53:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:59 2025 by rpki-client