Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: krMfDXAZRQKVUqdtWioRTk6/B5U+vc+uD/+MQO0V2K8=
Subject key identifier: A8:DC:5D:B5:C9:18:D2:E4:C3:F7:69:FD:4F:D7:47:8B:89:CB:49:9E
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 0194BC3C1D614ADEC226915A5107B3B61048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: PToXNFIInU47qLW4ZE5i+N1+AViGjDVyMzxSVyni/Uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1d:61:4a:de:c2:26:91:5a:51:07:b3:b6:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=a8dc5db5c918d2e4c3f769fd4fd7478b89cb499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:5f:d0:f4:80:cd:cf:fc:bf:0d:3c:68:f7:
a7:1a:9c:ad:f1:72:73:2b:a7:eb:50:3b:b9:5a:e9:
51:bb:30:2a:c9:89:81:26:61:94:47:eb:e8:fe:14:
17:ab:1d:c0:23:f7:cd:af:6f:6f:65:20:40:81:12:
12:33:02:54:bf:07:b7:c7:00:68:a1:af:f4:0c:c8:
6e:87:a8:77:c0:63:6e:85:33:9b:7b:93:1f:33:33:
80:21:03:32:3a:ee:d4:a6:03:94:2c:54:ae:9a:36:
ef:8e:f5:59:fa:8a:08:2d:75:fb:ac:08:1f:73:c7:
53:76:d9:a6:6e:35:30:2b:12:67:f2:e8:cc:34:42:
fb:c6:26:0a:2f:18:93:16:03:ed:b9:9e:a2:5d:ca:
37:29:74:a4:09:a8:26:9a:02:5b:86:92:ac:bd:3f:
64:bf:ac:40:85:fc:3a:06:e8:b8:d4:2e:6d:e1:87:
4c:83:23:23:ca:f0:d8:86:3a:db:60:83:d1:0a:01:
cb:20:56:84:d2:20:47:83:c7:67:1e:c7:c3:d5:8d:
c5:08:6b:ca:4e:bd:1b:93:aa:cd:9f:a8:66:e9:c2:
ce:59:94:e1:13:2e:81:d6:a2:9f:61:26:3d:7d:f2:
f4:c4:f9:a9:16:78:1e:9b:ea:57:91:81:20:47:7f:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:5D:B5:C9:18:D2:E4:C3:F7:69:FD:4F:D7:47:8B:89:CB:49:9E
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a7:57:1c:0e:25:43:76:1e:e2:c6:dc:e5:89:52:a3:ac:4e:
d5:e2:e6:5d:af:99:a8:79:91:5c:48:c7:33:a2:2a:ae:77:37:
8f:d3:e6:e8:19:39:1c:fa:3c:ea:17:ab:4d:9e:1b:69:7e:62:
cb:62:59:d4:7d:7a:04:d7:0b:f2:9d:19:f3:87:b4:34:05:e5:
c0:dc:e6:12:e5:80:f8:63:22:51:43:e3:76:84:56:56:04:08:
04:ae:f5:28:05:92:20:a7:b5:3a:0b:3f:93:69:28:cc:57:b1:
47:ef:87:10:5f:3a:73:5b:ff:a4:bf:3a:ff:aa:89:50:5a:c0:
85:3e:03:bc:98:62:b9:ca:62:af:53:4e:19:f2:4c:44:f9:03:
c2:b7:a8:23:61:05:1a:be:91:c9:01:0b:67:98:05:2e:04:a5:
ca:d1:f5:c3:9a:2d:ac:e7:79:9c:82:b6:4f:e5:42:cc:dd:0f:
47:f6:8f:73:3e:98:1e:1a:9f:27:31:48:1d:1d:45:33:84:83:
32:7e:74:ad:b4:85:29:28:64:88:b9:de:ca:24:42:ff:07:00:
13:3d:b6:44:2c:02:c8:83:4b:e9:38:17:43:32:c4:99:6e:cd:
33:a2:39:6e:50:c1:ea:aa:9e:b6:aa:21:04:ab:b3:15:41:8b:
57:8f:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client