Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: kKdwzV19m9Wcr7hc8bmxouNX04d7LwTJFuP/ADAsez4=
Subject key identifier: E8:0F:C4:F8:9E:D6:E6:5A:B3:E0:77:B3:E1:C0:A7:F5:AE:C4:35:F8
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 0194BC3C264EE008C74B29F98C8781702DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 076E
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: yNexdMM1umNBI8+PDwEzBuGyic7IwwCfaQIG7OUtjac=)
2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:4e:e0:08:c7:4b:29:f9:8c:87:81:70:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=e80fc4f89ed6e65ab3e077b3e1c0a7f5aec435f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:da:75:61:8a:a7:7c:71:28:88:9a:ad:a5:
59:c6:31:0b:20:d4:a2:0c:6b:51:9c:8e:aa:f7:11:
a3:b8:35:ec:ad:d2:d8:54:40:75:1b:b4:fb:b2:0c:
44:bc:e7:99:5f:42:62:32:3f:5d:27:e6:58:ec:31:
bc:ef:c1:95:74:a3:fb:d3:0c:49:6d:32:4f:50:1d:
89:4b:af:2c:1a:0d:49:49:d9:ef:41:f4:df:cd:5f:
a5:5e:7a:5c:8d:c3:12:6a:6f:de:20:69:b3:91:a1:
c3:b4:54:88:38:90:98:db:e3:1e:9c:7d:5b:58:76:
d2:c4:ca:63:5b:e3:86:7d:5f:aa:15:f6:6c:62:ba:
2a:df:91:81:8d:92:13:1a:d6:f8:99:0b:20:98:b8:
af:e2:52:a5:b2:69:6d:b1:4c:fa:5c:df:ea:44:ab:
e0:dc:74:14:c7:eb:c7:2e:5b:12:ae:f0:3a:dd:20:
f3:f4:2e:a8:b2:f3:db:18:4d:2e:5c:20:e9:e4:32:
22:7c:2c:48:a1:7d:dc:7b:0e:98:e3:24:98:ff:65:
9b:53:3f:49:be:6c:4c:0f:79:9b:71:ac:fe:28:82:
57:ab:c9:18:24:9d:d2:fc:50:26:1c:ee:6c:03:f2:
a8:3b:1f:0c:06:30:09:21:2a:da:49:68:6d:34:b4:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:C4:F8:9E:D6:E6:5A:B3:E0:77:B3:E1:C0:A7:F5:AE:C4:35:F8
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:95:19:6a:1b:aa:5c:58:38:d7:a3:00:d5:9d:ba:e5:b4:65:
84:7e:fa:e2:a8:7e:13:67:88:69:a8:d5:d9:06:7d:b3:56:31:
c0:cb:df:32:4b:eb:73:f4:0d:34:f3:47:b8:7a:1b:7d:69:f5:
61:44:13:6a:95:86:eb:c1:ee:aa:01:51:d4:7d:2b:ac:0b:a2:
02:b3:44:40:a0:e1:07:71:5b:01:69:40:84:eb:de:f7:69:be:
da:bb:ae:fe:4c:d6:91:f6:6d:48:fe:94:fd:e6:65:f4:a4:9b:
a4:cc:dc:df:30:6c:8c:6f:a0:0a:8c:c7:c8:08:64:c6:1a:83:
f7:e5:f5:c5:e2:14:5c:14:9d:6c:72:48:bc:6a:01:97:12:25:
ef:03:b3:fa:8e:7e:a0:50:75:84:b6:4e:af:c4:01:d4:cb:2a:
7c:ee:33:c8:c5:72:8f:53:52:bb:66:de:da:ff:82:d6:2b:64:
a7:ff:23:05:06:d5:e4:fd:21:23:25:34:3e:49:72:a6:dc:b2:
25:66:c2:d0:81:c4:f4:65:92:eb:f8:dc:2b:2b:fe:be:7a:e8:
d0:96:77:e6:d1:ff:fa:c4:7f:18:6c:3f:44:4a:70:4d:4e:4e:
02:59:22:5d:a9:fa:89:a0:3a:db:c4:1d:52:d6:50:d2:67:01:
07:55:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client