Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: Mh2G7R1PcbXCPPTtEfEV0sz2fNCR1erly6UtZYVBYbM=
Subject key identifier: D0:35:3C:D8:6D:6C:F3:25:B3:2B:6B:CE:30:0A:EB:C3:F0:54:6A:96
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 0194BC3BE46E0E2CD69F368E177EE23FCCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: oR1SOWgLhCMnzbAXmAAcMluJj+qvF4oLsSgnDRViLic=)
2: kGh2ZAKJM2CfYt9swIKSZAfzB_I.roa (hash: aTLGH5HWVmrOF0Jwd8eHkKzJcYT3fAVpizSVbGt2XVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:6e:0e:2c:d6:9f:36:8e:17:7e:e2:3f:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=d0353cd86d6cf325b32b6bce300aebc3f0546a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:84:3d:78:91:06:b5:ac:2a:73:be:e2:6a:
f5:7f:ba:3b:8b:85:12:5b:63:e4:21:23:18:d6:aa:
51:66:d1:7e:95:f8:cb:e9:73:3a:96:c2:44:8b:98:
73:5f:e1:40:3e:2f:5d:9a:02:61:3f:48:ca:e3:ee:
a0:05:5b:21:bd:d4:b1:2d:7d:8d:fe:23:7a:59:4e:
8b:af:b7:59:71:5f:33:8d:de:2f:8a:4f:8c:9c:3a:
4c:01:ab:9c:23:ec:af:06:2d:61:fa:e0:da:72:0b:
e9:37:59:c7:ae:af:cd:18:37:de:5d:3b:61:1d:8c:
36:6a:2b:81:6f:23:02:ae:ca:d4:85:a4:81:5d:bf:
40:34:1d:5a:64:37:d2:9a:d2:c9:a4:0e:4e:ce:b1:
39:d7:13:db:a2:a2:42:6e:4d:d0:5c:7f:91:ea:68:
c8:a1:1d:8c:0e:da:f4:d1:19:2b:6b:81:92:4a:9d:
87:e8:a2:c8:92:91:d9:95:22:7c:4c:ee:22:10:51:
be:86:a1:88:0e:8e:a3:9d:c2:be:5f:bd:ee:27:4b:
ec:99:51:81:83:70:ab:95:41:7a:bc:0b:f0:83:47:
d5:c8:b3:f2:03:9d:6d:07:16:a0:14:46:98:33:78:
37:a0:23:bc:0a:f5:70:8a:f9:f9:33:1e:1d:34:fd:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:3C:D8:6D:6C:F3:25:B3:2B:6B:CE:30:0A:EB:C3:F0:54:6A:96
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:0a:6e:e0:50:4e:e6:00:23:83:db:ad:a8:f1:7a:93:8d:
a4:32:f1:44:ed:53:01:01:99:4f:ac:b2:35:dc:83:44:ac:cf:
bd:6e:f7:7c:72:1d:c7:33:53:f0:f3:3c:10:fb:b1:19:e1:22:
c1:06:25:e9:00:42:f7:85:ff:a0:39:00:90:53:96:55:5b:ff:
50:14:25:63:02:7c:8b:28:76:64:69:4b:aa:ce:9c:ac:0e:cc:
af:b1:60:ac:16:48:74:58:22:fb:ee:b0:62:da:a6:b8:16:78:
3a:34:33:a7:35:7e:1b:a3:d0:40:95:2c:94:da:e2:f0:71:47:
24:61:f1:ce:db:1b:78:c4:70:c7:e8:ab:65:76:28:03:15:91:
6d:7b:67:98:9e:03:ec:41:cb:a7:ee:dd:ab:8c:4e:e2:cd:61:
60:fd:2b:5c:33:41:7e:c2:77:a2:ae:e5:f0:bd:28:d8:9b:85:
e2:ae:3c:64:d8:cf:3c:b4:42:37:ca:fe:1e:27:3a:4e:47:0c:
8e:29:4f:64:cd:41:a8:23:14:e8:d9:ca:0e:d5:f2:cb:3a:61:
81:6b:94:a9:72:ec:db:9b:91:cd:66:54:1f:f3:7d:6e:c4:53:
43:d7:dd:55:6d:f5:9d:1a:65:b5:17:16:95:66:54:17:d9:f2:
83:6d:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:54 2025 by rpki-client