Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: 7rB8fc06Okd4ubbnDX/0FmCwMgxR/wexYOtZFNfOAO4=
Subject key identifier: D2:7A:E1:F2:4A:FF:66:93:7A:F5:2E:97:8D:2F:DD:CD:D2:ED:EB:59
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 0194BD85A1694390512AF612917AFC86FD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: KK2u2OWnJbBOb7q14bZ2XPCB4mFOKzdr6HeKFhZE3wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a1:69:43:90:51:2a:f6:12:91:7a:fc:86:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=d27ae1f24aff66937af52e978d2fddcdd2edeb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:cb:4a:8c:ab:d8:ee:f0:06:f8:d5:a9:7b:
a7:3e:63:4c:68:a8:bf:d6:c8:88:85:7a:49:57:e0:
32:ce:a8:21:af:16:46:22:88:f9:d7:7f:37:cd:02:
50:80:42:f1:4f:d3:82:30:09:14:33:59:c3:5e:f7:
0e:89:82:e5:9d:9f:0e:4b:5d:06:a9:27:11:8e:4c:
92:0f:8c:c0:0f:f4:c5:8b:f2:0f:1b:b9:8d:28:69:
2a:76:40:3d:55:56:e1:fd:b8:2c:8c:40:73:fd:e8:
6c:1a:68:cc:a5:ff:5c:24:ba:46:3b:c7:a6:39:36:
f3:25:ba:90:25:12:81:13:d4:25:c8:0b:55:5b:de:
3a:24:74:98:fb:2b:23:68:49:d9:0f:59:11:6b:92:
69:08:00:4a:c8:9f:0f:7e:fc:13:d2:3e:ba:96:c9:
0f:89:f4:7f:49:f5:96:f5:44:f9:fd:64:f4:4b:05:
1f:50:cc:4e:77:82:cd:3c:51:7e:b1:66:1f:c4:14:
92:21:a2:4f:a5:fb:33:8e:19:de:03:60:23:68:f6:
d9:b8:3e:fb:93:0e:f4:5f:e1:20:9f:6a:5b:25:4c:
63:ac:14:5a:0e:e0:aa:1e:36:4d:32:92:a6:fe:48:
08:eb:60:a6:e1:06:83:79:4c:94:a7:0c:e3:72:22:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:E1:F2:4A:FF:66:93:7A:F5:2E:97:8D:2F:DD:CD:D2:ED:EB:59
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5b:b6:37:d0:cd:78:5d:76:1b:47:5b:96:65:0b:f6:c7:98:
8b:e8:6c:45:32:ab:9a:db:68:f9:43:9d:d9:88:18:da:28:86:
74:a7:80:92:c5:85:87:15:04:88:3e:55:a7:c7:90:23:78:d2:
01:d0:1d:f0:0c:0b:19:94:70:77:10:86:56:e1:1d:0c:0e:ab:
e4:04:97:ee:53:dd:41:1a:18:7e:67:0c:f8:9f:76:73:64:57:
2e:85:ca:fc:d9:10:02:59:8c:13:3c:f1:be:01:37:9c:12:8d:
25:f8:a8:2d:5e:42:56:d2:bb:34:51:43:da:80:15:1c:c2:86:
e7:23:bc:6a:3a:99:30:be:c4:1b:b6:75:12:76:aa:dc:c4:9d:
9f:13:81:87:a2:85:db:93:2c:1b:3e:93:2f:ec:6d:c0:a6:69:
da:2b:7b:a0:b1:e2:03:48:17:f9:7a:77:11:85:e5:94:68:75:
c5:7b:1b:5c:1c:67:e1:8f:be:d3:43:27:95:4b:36:b4:06:ce:
17:d4:25:20:ce:8c:92:bd:2a:f5:3d:ba:00:67:ac:05:f6:21:
fe:10:d6:21:76:20:52:82:10:83:59:ec:af:84:82:a8:ae:71:
61:98:28:33:38:6c:c3:11:b0:fa:07:30:b5:e3:0a:c3:0c:4b:
de:48:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:54 2025 by rpki-client