Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File: jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier: J0xWi7hccrm8P2edUkqOcTN5HA1wErgKKiaMlB98nVk=
Subject key identifier: 41:0D:FC:2A:47:E1:08:F3:E5:66:9C:BA:CD:F2:43:1F:8B:CE:AE:66
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0194BD859B86303D6D4DA4596C0244E67A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number: 0A65
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: n5M9hbuHvEgzXi7TMJmWE7eukjRSL1IdqKncWe0i+ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:86:30:3d:6d:4d:a4:59:6c:02:44:e6:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=410dfc2a47e108f3e5669cbacdf2431f8bceae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:37:bf:20:f3:36:8e:1a:9e:e5:1c:3e:8b:
d0:ce:e5:07:5d:a9:19:a6:ff:c5:56:96:ed:73:d1:
93:6a:6c:33:cd:41:19:58:30:1a:3e:0c:cd:58:38:
2c:2d:96:c5:51:88:ac:5e:aa:7e:12:65:ee:d2:d8:
a5:f3:db:90:3e:af:b6:bb:93:7b:88:d8:f8:fe:15:
ae:1a:0f:31:e2:72:7e:48:7b:b1:56:85:09:b7:ee:
f6:bc:bb:6e:ab:99:a2:c3:28:01:88:93:5a:41:22:
9c:99:41:98:b6:cd:7f:98:d0:69:e1:78:6c:f2:8f:
26:df:fd:60:53:39:2a:9f:52:46:af:e4:97:5f:f4:
cb:04:16:ec:78:c0:f4:ff:d7:e1:51:f6:e9:a8:c4:
a8:b4:1b:a7:c2:c1:8d:a2:fa:87:39:d7:1d:77:e1:
7f:6b:df:91:92:1d:f1:c1:2b:00:e7:ff:06:a3:56:
91:db:23:31:ae:b8:e7:57:a9:c3:94:3e:0d:b8:62:
13:db:f9:62:bf:3a:a4:2b:97:bd:9e:8f:07:08:14:
6f:fa:ed:53:f4:ac:1b:72:27:ee:01:ea:80:78:ae:
e7:e0:32:d7:64:5f:2a:5e:70:3e:60:2f:25:3c:85:
2c:3b:19:18:d1:8a:68:e2:f2:a2:d2:bf:da:97:8d:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0D:FC:2A:47:E1:08:F3:E5:66:9C:BA:CD:F2:43:1F:8B:CE:AE:66
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:87:6f:5f:22:aa:2e:04:ae:2e:ab:43:e7:ee:0b:d8:6b:
c7:d8:3a:d9:89:77:8c:a8:83:e6:a9:b3:40:20:af:ab:ce:82:
57:a3:39:7d:a7:48:93:ce:29:fb:2f:df:32:d6:4b:e2:1e:6e:
d1:ab:31:e0:ed:3f:94:41:d1:28:bc:9b:8f:e8:93:96:b5:11:
0c:1c:e9:6c:3c:13:1c:c0:bf:a3:87:a0:88:3b:98:34:db:4f:
9f:81:31:70:22:dc:cc:b2:84:c4:6b:5d:29:6b:8d:71:d5:53:
0e:3a:4b:6e:8c:dd:e8:16:ec:88:c8:56:fd:fe:fe:64:97:d9:
bf:7a:2a:d7:6d:0a:38:6b:82:59:cb:64:f5:71:61:dd:54:fb:
62:3f:93:10:63:51:d8:c2:b7:7c:76:11:20:37:70:21:c8:a0:
a6:01:4e:bd:56:f3:53:0d:3a:bb:86:a3:09:ef:5b:75:e8:24:
f3:c2:c9:bd:6b:12:6e:bb:1d:1a:ed:0f:ab:4b:44:2b:7b:97:
c2:fb:61:cd:58:8e:8e:f3:aa:be:fe:6b:b8:dd:24:4e:8a:63:
6e:18:56:41:c3:6a:e8:34:98:8d:58:b0:dd:6a:79:cd:2d:50:
1c:81:70:a1:74:99:22:cf:6d:68:c9:f2:39:12:76:67:53:4f:
90:e9:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:49 2025 by rpki-client