Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: KigvyJk2KHEzAfeWjdjJVTqjrGg+PQ5y13qWVdgdcfM=
Subject key identifier: 68:4B:0A:58:8D:45:6C:A0:78:27:14:AF:08:5C:98:CA:32:70:19:5E
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 0194BBCE9DD45234EFC4CCB1818BCFCB5517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1284
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: PWxdvTucmrNFejfoDGPSMCej/57y+95LPfCjDCF8BM8=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9d:d4:52:34:ef:c4:cc:b1:81:8b:cf:cb:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=684b0a588d456ca0782714af085c98ca3270195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:79:ed:59:c5:9d:96:9a:1d:f2:3a:f4:f3:
97:60:5b:1f:0a:96:6e:c0:d9:8b:db:79:aa:9f:fc:
a5:52:b2:1d:20:6c:aa:b3:53:c1:32:84:6f:10:a3:
c9:f5:d1:d5:d9:85:06:1f:1c:7a:43:c3:6c:d3:a0:
fc:95:d1:af:37:9a:fb:58:06:27:ef:85:92:cf:11:
2d:6c:d1:96:9e:87:a8:78:52:ab:64:7e:23:e1:78:
f8:41:f3:f7:3f:cd:65:f1:c2:79:0d:22:a9:fc:d5:
13:c0:85:3b:b3:98:d8:67:bd:7c:e5:91:f2:9a:e0:
d8:17:4f:a7:9e:e6:f6:45:c8:a8:6c:13:d3:89:27:
14:72:bf:0b:b9:e1:b6:92:c9:1b:98:0a:1f:8f:19:
da:0a:6c:31:61:b3:02:de:60:96:9d:17:77:c9:77:
e1:6a:78:f6:66:a2:c3:a1:8a:ca:34:b2:57:0c:ee:
2d:53:2e:3e:6b:b2:73:e7:8b:02:4c:6d:fa:11:3f:
66:c6:df:7d:47:9e:10:03:64:a2:b7:54:b2:cf:a0:
0d:96:6e:de:5d:70:d3:81:16:11:61:ea:86:80:de:
9a:98:ea:ea:fc:82:84:67:36:9e:bd:89:58:8a:af:
06:fa:de:df:b1:56:49:f4:ed:a1:75:11:1f:4e:ff:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:0A:58:8D:45:6C:A0:78:27:14:AF:08:5C:98:CA:32:70:19:5E
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:d4:05:3e:cf:f6:3e:56:17:4c:15:ba:b9:c7:a1:8a:de:
2d:86:22:5d:88:e7:1e:b5:c1:6e:25:a6:76:a1:ff:ca:dc:e3:
8b:6c:89:62:78:91:fd:c6:5b:ce:81:33:ce:b1:11:51:40:ce:
68:8c:91:6e:8b:4f:fb:fe:2b:47:b8:f3:82:f1:79:16:88:48:
f6:6d:c8:53:d8:da:fe:dd:eb:78:97:6d:68:8f:24:4e:bb:e9:
47:66:79:23:1e:cd:3b:ff:2d:4a:e8:4b:76:0c:66:04:7a:29:
50:f2:0b:f2:72:fe:d1:d1:ee:ab:64:6f:21:a3:c6:8f:2e:ed:
e7:48:3a:cc:30:4d:6a:65:a0:4b:8f:4a:fa:75:38:56:f1:78:
e3:53:68:f1:cf:e9:47:7c:ca:a1:5a:d7:15:2b:da:e1:9e:7e:
82:d7:f4:9c:38:23:35:e7:9b:27:b5:bc:c8:24:17:b8:f1:01:
1a:90:59:ff:27:45:7e:eb:ea:02:43:72:36:3d:fe:c2:9d:2c:
69:92:91:b5:91:0d:4b:06:89:2a:45:c4:29:1e:ac:d0:91:a5:
0a:d8:01:c3:5c:d2:03:ab:99:d4:29:d2:6c:16:45:88:de:47:
49:4a:7f:ff:55:c8:26:f8:06:b4:2c:a3:0e:da:f6:0b:9b:22:
26:82:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:07 2025 by rpki-client