Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: 94V+os/PJtM9B47FttrqyM6IifsWaMnHt1koFQsJcZA=
Subject key identifier: 76:92:DE:A7:4F:71:E3:38:42:79:23:40:B3:35:D2:90:2E:1B:D1:90
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 0194BC0512CE490DFED8A2212592E0454338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 07AD
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: ITQHnbtvRCQ6R8BhrTGbTwP+dIneA+6M4a57LTFmMYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:ce:49:0d:fe:d8:a2:21:25:92:e0:45:43:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=7692dea74f71e33842792340b335d2902e1bd190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:60:ea:14:78:2e:f8:28:66:82:77:73:61:
3b:44:95:b0:d1:cb:04:d5:77:ba:4f:3e:57:fc:a1:
bf:f3:d7:a7:20:1b:73:b3:ad:e2:4a:9d:a5:b3:73:
5f:13:b4:5c:9a:28:6d:cb:1a:41:aa:56:2e:e0:3a:
02:11:f2:a3:21:55:4f:fb:dc:ef:0f:e9:ed:25:37:
6d:a6:ec:d8:34:80:53:dc:4d:5b:0c:08:00:81:b3:
5d:ac:b9:95:58:9f:58:17:d0:2f:86:d4:19:bf:67:
22:55:5b:0f:30:57:5c:77:24:6a:02:ff:8a:6d:31:
ad:8c:66:37:7b:3f:98:d4:14:c7:7d:13:a5:fc:6a:
a6:df:e8:27:b2:ce:c2:fd:54:a9:59:23:6c:d5:50:
e7:bd:25:3c:aa:fa:9c:1c:76:d2:17:f8:fa:34:0a:
74:f4:00:fd:cd:84:77:3c:f2:1a:3e:76:0b:08:94:
96:11:8f:7a:a7:b1:e8:0c:88:83:d0:cd:fe:b3:4a:
97:58:e8:f2:4b:26:1a:1d:19:10:26:f6:44:62:0b:
d8:ad:0c:e2:12:6b:ca:2c:a9:83:a6:b0:bd:6a:f6:
c7:3b:b8:c8:91:18:b5:92:0c:59:98:5a:7a:e8:8c:
b0:5d:f2:15:55:a5:c4:95:9c:2a:68:fa:3f:f3:21:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:DE:A7:4F:71:E3:38:42:79:23:40:B3:35:D2:90:2E:1B:D1:90
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ac:03:7a:d4:da:2c:eb:2a:df:f7:f7:25:b2:7b:7a:3f:10:
22:3a:62:b4:be:57:f7:1f:4a:13:44:c1:29:eb:68:b0:da:45:
a0:11:4a:69:95:73:38:c6:85:37:f4:30:55:c0:fa:65:2c:6a:
33:d9:9e:24:9c:62:1e:39:1a:b6:33:5f:85:47:5d:26:86:ce:
17:0e:fa:69:80:94:60:f3:bb:d1:a7:36:90:c0:15:46:81:62:
27:d1:7e:96:82:80:2f:77:51:03:a3:1c:54:9f:90:06:f2:b6:
34:af:43:d1:cd:fd:ae:1b:3b:6a:24:af:0b:29:7c:15:b4:72:
57:88:2f:de:92:d4:94:51:0f:51:1d:f6:2c:c4:fc:e3:ba:c5:
25:9c:af:6f:92:6c:f6:b5:1d:e5:4e:72:12:a1:60:18:a0:79:
3f:a2:68:c9:32:00:d0:e2:36:c0:83:73:95:e2:2b:90:f0:e0:
70:fc:0e:ff:c7:6f:4b:fa:87:8f:9f:ea:07:3a:eb:05:a0:65:
ef:14:fe:7e:eb:63:fc:a0:3b:05:79:68:7c:b1:f8:f6:76:8a:
c3:5e:88:4d:cc:29:c0:c3:30:dd:7c:48:a7:53:9a:da:d3:fe:
6c:02:d1:a5:59:c3:5a:1b:e9:2b:fd:0d:55:71:b0:60:0d:a2:
af:bf:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:04 2025 by rpki-client