Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json)
Hash identifier: rb+3VSm/YhkPeVIycFMcdOOYpE6+1IVvV4ajxBGPHR8=
Subject key identifier: 72:0D:6B:2B:D9:36:1F:FA:EB:06:62:11:2E:31:1D:6C:BA:59:E3:9F
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 0194BCE096C1233859992B50834BA6E2B6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=)
2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=)
3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: 4Fgy+j3RouvRzHP19Jq21RxWI1p4w6ghtMLI5/qPraw=)
4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=)
5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=)
6: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=)
7: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=)
8: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=)
9: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=)
10: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:c1:23:38:59:99:2b:50:83:4b:a6:e2:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=720d6b2bd9361ffaeb0662112e311d6cba59e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:a8:ba:de:44:35:05:ff:3d:52:b7:fc:9e:
92:da:e8:6a:80:d3:fa:1c:ac:e4:e3:8c:d7:26:f8:
16:b6:8f:9d:31:9a:34:75:fa:38:1b:81:64:73:22:
2f:48:6c:cb:ba:c8:95:2a:5e:7d:b1:d2:a2:97:cf:
4f:85:c1:ef:89:22:81:aa:1d:58:d2:89:f8:b9:b0:
0d:e8:a9:7f:0a:b0:eb:e8:50:68:88:97:41:2d:d1:
59:dc:68:cf:eb:8f:53:71:57:ff:0e:06:74:9b:21:
28:9b:6b:a4:4b:94:bb:70:09:3f:c1:f3:dd:6a:59:
ae:03:8a:87:16:ff:c4:80:77:39:c2:15:e4:60:68:
50:d8:b2:71:f9:b7:e4:8e:6f:5d:10:27:84:dc:10:
46:f7:cc:b1:16:7c:c5:c9:cf:5c:ec:14:af:9e:a7:
6f:d5:1f:82:eb:7c:5f:af:c7:2b:40:a2:fa:4b:0b:
93:a8:ee:29:37:02:2c:54:4f:4a:0a:9a:7a:ce:a7:
78:ee:66:84:13:f6:4c:2b:94:97:b0:8e:9b:88:af:
8f:ec:2f:72:84:2f:ce:ab:70:85:28:1e:1a:bb:90:
53:ca:35:3a:43:d3:53:8f:5c:aa:a6:56:c2:f8:1f:
bd:26:ae:2c:60:5f:68:fc:c8:d4:33:cd:29:6d:dd:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:6B:2B:D9:36:1F:FA:EB:06:62:11:2E:31:1D:6C:BA:59:E3:9F
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:98:b7:56:69:7c:04:0d:c6:d7:62:3b:70:f6:32:f9:ec:82:
85:e4:f2:70:a9:72:61:ab:46:2e:83:68:a4:e8:4b:b3:21:78:
ae:1d:da:4b:7d:44:ba:7b:51:46:a7:2c:f8:48:a8:a1:de:98:
8c:c7:e5:4c:32:29:43:65:56:33:f2:45:7a:d7:12:f7:70:cf:
7f:b7:60:f9:dc:fe:3d:10:b5:80:4c:14:82:4e:3e:b4:c5:a1:
ef:ce:52:36:03:4f:fc:cc:4d:2a:c9:7d:3d:59:c4:c9:52:07:
08:49:80:10:a5:ef:14:cc:8e:aa:67:13:ae:86:99:3d:7d:cc:
0d:4c:5f:a9:64:19:63:53:a0:d1:17:8d:4b:5f:a3:08:5b:d9:
90:68:2e:cf:93:9d:6d:36:b3:c6:02:14:d6:f6:75:df:3b:2a:
79:bf:3c:d2:07:62:84:cf:13:c8:d5:71:53:64:e3:d1:b8:24:
39:0b:6b:db:d6:95:54:b0:2b:eb:59:56:a8:3d:9c:43:ff:c0:
73:f5:40:58:95:1f:7d:1b:6f:19:7c:1a:e6:9f:b3:bc:81:bc:
2c:cd:03:b7:4c:01:b9:ac:fe:91:b2:91:a9:90:04:4e:d8:7b:
3a:8c:b6:f0:63:d6:58:18:63:11:af:b5:73:7f:83:95:de:60:
31:9c:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client