Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: 14BE4MznRNWelJNZKKEVTV0Ume3oKh2RppPi95JbRCo=
Subject key identifier: B7:88:1D:7C:AD:89:67:A1:3B:64:1D:EF:9B:A7:97:49:DB:4B:2D:1D
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 0194BC728609F3379C727146BAA48C307F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: OcoFzYR/ScqMTRvPXSmaXT8Bld41A34COMpWG0YhfWo=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:09:f3:37:9c:72:71:46:ba:a4:8c:30:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=b7881d7cad8967a13b641def9ba79749db4b2d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:57:54:d7:b5:d9:4e:09:8b:ab:54:af:7b:
50:61:49:6f:e5:d4:c0:27:d0:2e:e8:33:c2:59:e0:
bd:f5:66:6e:ff:29:36:48:c0:4e:4d:28:77:86:dc:
21:e1:1d:4d:a1:f6:5d:2a:8a:24:6d:a6:29:77:30:
60:03:be:e4:38:8c:27:d9:ad:1e:1a:16:0a:3c:57:
4f:e4:a8:38:fb:66:84:ec:d5:95:82:b6:8f:b6:28:
38:20:96:77:76:5b:28:52:b4:15:ba:76:d7:24:b1:
32:43:ff:a1:76:fe:b9:c9:27:59:58:85:9f:fb:17:
6a:0e:2b:22:f3:e2:87:a9:dc:4c:5d:b5:dc:46:80:
0f:5c:1a:9b:8d:f3:96:a8:1e:3b:64:ff:0c:85:8a:
64:d1:53:f9:16:69:b0:67:6d:c8:b1:57:48:e7:b8:
60:bd:6a:e2:40:c6:e0:21:dc:62:07:b3:7c:72:2e:
d8:58:09:b5:d8:ef:b5:0e:fc:d0:9e:e6:3b:63:ee:
6b:6e:0a:e3:9b:fd:49:e8:c5:bb:ae:2b:70:a8:d0:
54:8c:c7:0f:9f:fa:11:a9:7b:7e:e1:37:a6:c4:e1:
d8:0f:d3:f3:f9:73:a3:9a:f0:67:a7:01:d3:6e:5a:
32:10:45:14:e1:25:56:9d:a9:8a:2c:a8:27:c7:01:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:1D:7C:AD:89:67:A1:3B:64:1D:EF:9B:A7:97:49:DB:4B:2D:1D
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4e:ef:07:38:d4:8c:5a:b7:d5:01:c2:42:df:79:24:48:01:
51:05:80:e4:81:50:0b:a1:41:1c:a7:8f:e2:2c:10:a6:6a:d4:
bf:80:04:f5:71:33:7d:08:fc:05:f7:b9:b4:fb:aa:64:04:c4:
7b:70:b8:8d:d5:6b:e4:f1:38:34:3b:03:b8:dd:db:43:78:c8:
6e:d3:5a:d1:cc:29:e4:fc:e8:b1:64:d8:0e:8f:c9:5c:b8:8e:
54:2c:1e:cd:4e:84:89:9d:88:9b:f9:55:a6:4f:a5:00:fb:db:
92:38:ef:e8:e4:ce:21:14:f7:00:83:78:ec:47:11:16:b2:ad:
28:77:c6:1a:cc:77:8b:ff:b3:72:44:6f:3f:83:b1:e3:a1:92:
96:f7:4b:6e:10:79:23:f3:30:07:5d:ef:d9:b7:18:a8:eb:7f:
0b:52:59:27:9e:d8:51:f2:30:3c:d0:25:15:fa:d2:58:6c:27:
80:76:2c:2b:5c:66:e6:7a:8e:98:17:7c:07:fb:84:21:ea:9a:
54:eb:b0:7b:17:07:c1:9a:b5:b5:e3:91:37:29:1d:68:86:63:
79:0d:8b:f4:de:b0:d9:24:42:8c:f0:2f:7f:13:0a:83:cb:b8:
1f:fd:ae:28:41:84:5c:5f:fd:d6:17:fd:92:d2:5c:22:e4:e3:
9d:02:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client