Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: M8P4Z2yMGPdJQCZBsrWtS9o3l2KGRAWjfFVYg1OLV8g=
Subject key identifier: CC:8A:BA:39:68:27:12:80:13:7A:EB:A2:86:D3:5E:CC:6D:BF:E2:BB
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 0194BD175F8228312A6765C0311574AFF3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1051
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: GvIqQ74yNn5El9HPuYGS6rHNCdxA9cdati3DumhIogQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:82:28:31:2a:67:65:c0:31:15:74:af:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=cc8aba3968271280137aeba286d35ecc6dbfe2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:5d:be:90:da:ba:3d:57:60:81:67:97:98:
e8:3b:6d:f8:9a:fa:07:3e:3e:0f:ea:89:cc:f6:83:
60:90:fe:eb:f9:78:11:8b:d1:51:c7:18:71:42:27:
3c:c5:65:1a:cf:4c:d8:4e:95:5d:19:9e:74:b5:bb:
75:28:be:e5:bb:0b:f2:c7:4f:a6:9a:08:50:39:73:
1b:a0:6a:9b:c0:11:71:3c:5e:60:7c:75:d2:ab:e3:
35:7e:4c:2e:51:9a:57:2b:c5:d4:b9:f8:08:83:f5:
b0:2a:11:ff:39:34:56:bf:7c:4c:e7:6a:7a:3c:0c:
f8:70:d1:23:7b:f2:ea:62:50:24:eb:48:b4:ce:63:
ae:7a:54:c0:4a:37:f4:90:86:54:13:c6:85:ac:66:
cd:58:ff:32:bd:15:b6:74:2c:13:1f:f8:20:6e:b7:
6d:60:46:b6:40:f9:c6:0e:bb:1f:dc:ce:0b:3c:f5:
37:bf:c1:86:c3:05:6b:16:41:dd:7c:01:da:d7:bd:
fc:6c:ee:66:6d:74:7e:4c:8b:5d:ea:5f:ce:82:38:
a2:fd:24:4a:4e:4d:c2:6b:d8:c2:3f:36:82:3e:cc:
04:6f:93:74:3b:89:57:2a:91:78:94:09:33:26:16:
aa:6d:4d:1c:2f:e3:54:c8:25:2e:a8:38:cd:69:81:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:BA:39:68:27:12:80:13:7A:EB:A2:86:D3:5E:CC:6D:BF:E2:BB
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:22:5a:7b:92:78:d9:e5:b2:9f:2a:e4:eb:72:ae:0e:9c:02:
02:e8:a6:be:4a:ff:ad:b3:e8:e0:03:44:65:5e:35:ec:7a:8f:
43:6d:f1:cd:7b:1b:39:31:94:28:26:2d:bf:ea:c8:f3:98:79:
e2:b7:50:fd:9a:ed:f4:0d:58:7c:03:94:11:c5:8e:1a:c6:40:
f6:61:49:08:38:db:29:5d:fc:64:35:07:34:e3:31:1d:29:d9:
90:d8:68:cf:68:f0:a7:8c:e5:62:e0:fd:40:f3:96:23:37:aa:
c2:5f:ec:40:28:ad:dc:18:19:4f:31:13:1c:b0:0c:01:bc:b1:
21:66:38:f6:03:a7:66:4d:e8:fa:f7:33:1f:d9:51:74:48:f9:
95:ee:3c:bf:1f:9a:0d:ca:ca:35:a6:4e:86:83:dc:82:74:54:
54:e8:c9:f4:3d:41:69:2f:0a:cb:1b:a0:60:dd:5e:bd:f7:a1:
f8:ee:f3:30:95:bc:d3:1c:3d:ed:fc:a9:ac:c2:15:0e:85:86:
d8:17:23:1c:a4:66:ca:5e:1b:44:3f:e2:0c:c9:88:b8:23:1b:
91:16:58:94:a2:f8:5a:0b:34:d3:38:31:35:2d:67:38:88:33:
da:b6:72:4c:31:d1:e1:1a:6c:b9:21:d7:08:b6:0f:4f:a0:7c:
a6:78:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client