Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: eBCVWuWQkPdFqr804R9kPypSI/86Y5Ve2YsH+64pnoU=
Subject key identifier: A7:79:CF:D2:F3:4D:C4:9D:DC:C8:11:2B:13:F5:17:5B:40:2C:3F:86
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 0194BBCE65954D424E4561840C6AB5EC4996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 10A2
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: tdcFlQFyBP3oxPoar+q6qa6QyGI7dWTFQKRIu9/Sh1k=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:95:4d:42:4e:45:61:84:0c:6a:b5:ec:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=a779cfd2f34dc49ddcc8112b13f5175b402c3f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:62:2a:6d:23:f8:17:09:c9:41:c0:28:1b:
01:eb:56:d5:37:4e:52:6a:2c:a9:0b:04:6b:b0:ef:
c9:1b:cc:d7:8d:30:1b:a3:97:c0:e3:31:20:58:b0:
b7:46:bb:0c:30:8a:52:8b:a0:02:f8:02:5d:83:8d:
b9:88:c6:62:28:96:e4:4c:52:bb:1b:cb:35:bc:03:
5c:8f:e1:18:bf:41:b9:2e:9b:8a:a1:83:e9:79:03:
d8:ca:73:55:e4:0b:b9:ad:4e:c7:da:98:ac:ba:3f:
83:59:a9:12:59:7f:00:34:6f:b9:b3:a8:d0:b0:33:
19:b5:c4:48:a0:c4:01:79:4b:de:d5:82:0d:80:90:
de:0a:07:3e:60:d2:a5:b5:dd:31:1b:91:12:0d:90:
6e:9b:06:05:bc:2f:78:42:58:95:4c:c9:50:26:8d:
5b:4b:ed:dd:57:91:eb:68:eb:ff:18:c9:65:98:73:
de:dc:4f:2b:e9:12:15:29:e2:9e:3d:83:6c:41:0b:
d3:f3:07:52:aa:dd:a0:1a:9d:d4:08:1f:f0:c6:0b:
44:ed:4a:39:14:ce:c5:dd:94:b1:80:fb:6f:2f:73:
dd:bf:91:83:c9:0b:0c:a9:67:e6:22:9c:fd:cb:8a:
5f:98:9e:47:c0:b4:74:5e:b7:ce:ee:5d:6f:38:6a:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:CF:D2:F3:4D:C4:9D:DC:C8:11:2B:13:F5:17:5B:40:2C:3F:86
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:ac:a7:16:af:1e:27:fe:b4:1a:c7:c0:0e:01:64:11:62:
35:c0:07:d9:25:8a:08:49:f9:9e:45:1a:66:28:18:49:aa:c0:
a8:20:d8:ae:13:00:e5:a3:64:73:ee:db:fc:4b:34:b4:dc:70:
c6:7a:d5:20:56:ce:42:0d:8a:b1:19:f3:a7:e7:79:4e:8b:34:
ee:8d:4b:d4:84:e4:20:41:2d:55:ea:98:37:9d:16:dd:c6:21:
e6:5f:a8:db:88:bc:f4:10:76:77:a9:5a:14:52:db:a2:ac:2d:
85:eb:80:60:a1:b2:67:8b:92:bd:c8:cf:61:6f:31:8e:8b:27:
d5:60:e5:fa:75:cc:aa:25:c9:b2:09:24:ed:f0:57:f1:18:3c:
60:e1:51:fe:09:6c:3e:22:6d:88:5b:c1:09:9b:90:e9:71:a0:
97:b5:e9:d2:fe:e6:b6:d5:c1:12:92:5c:d4:29:c0:86:c6:10:
5d:18:20:e9:8a:d2:ac:18:83:19:05:e2:28:44:09:91:8f:48:
2c:f9:f7:47:13:c5:75:72:06:f9:1c:66:1c:44:7a:3e:23:07:
1f:ad:ed:dc:f0:ff:b3:53:4f:9a:1e:cb:65:87:8a:b8:f7:d9:
82:d6:98:16:1f:0b:d5:ac:46:34:5d:bb:e8:ef:e3:a4:cc:b5:
36:0f:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:55 2025 by rpki-client