Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: joxPiLG/zh0aRCb5PZXEBwWIPV6WxuDw7XsMzFxFfBc=
Subject key identifier: A3:53:76:5B:BB:6A:38:EC:E6:32:82:96:72:B7:06:04:E8:A4:CF:08
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 0194BD4E7B74C425184CFF892DEB9DB73717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0776
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: BQh7QT9BX7cTqXjHHhGh4E0jau4.roa (hash: ji+6a8qXV045VZtKjEfl6cGy7fTl7ME8scmY2gpWI2s=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: zwI9sNghDGuXMZKkRL7nK2GE7Zf1rc+3zpsSzbSy8Ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:74:c4:25:18:4c:ff:89:2d:eb:9d:b7:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=a353765bbb6a38ece632829672b70604e8a4cf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:5b:b7:e1:33:8e:0c:e9:bf:e0:f5:34:66:
41:24:5c:52:85:54:87:33:2d:b2:23:26:9e:b4:a9:
ae:9b:5b:13:e4:3f:36:45:7d:8f:6f:ec:90:d6:fc:
7f:7d:db:ed:1b:ba:e6:1c:41:8e:27:11:91:63:88:
85:86:2d:c8:ee:79:87:60:18:84:e3:98:25:ed:81:
f2:34:8f:3e:8b:83:d0:d7:e0:2d:d8:9f:e4:35:7e:
42:c1:c2:13:43:6b:40:ba:86:91:01:a9:10:69:02:
fc:a7:ee:49:63:49:97:15:e8:f1:66:72:0b:a2:43:
4a:4b:6c:06:7c:41:67:20:a2:22:48:dd:35:8e:1b:
6d:df:29:c6:87:2e:63:39:2a:d3:d0:c1:d9:61:1e:
44:1b:9b:db:d5:8e:d3:60:b5:fa:2f:e9:7c:dd:ee:
69:79:08:08:1c:0d:59:5f:1c:a0:96:01:8d:91:22:
e8:5d:5b:20:55:7a:e6:69:04:d9:d3:7a:17:eb:94:
0f:f1:43:95:48:4c:2a:96:6a:4b:a1:38:d5:de:3a:
b6:a2:03:5b:15:39:52:40:fd:e4:bc:42:6c:6c:d2:
80:f6:17:b7:c2:a6:03:b2:9b:bc:ed:9e:0f:60:af:
62:86:33:15:82:2a:c8:f7:ca:59:c2:a4:62:80:fc:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:76:5B:BB:6A:38:EC:E6:32:82:96:72:B7:06:04:E8:A4:CF:08
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a8:09:93:8b:ac:23:19:50:66:05:c6:e2:6c:03:0f:40:8d:
52:32:73:06:05:9b:73:e3:e1:77:2b:28:0b:2e:9c:eb:f7:6e:
a4:43:6d:58:35:ad:cf:35:8e:14:5b:60:dd:50:03:18:4c:e9:
27:21:1f:0c:92:a9:ae:8d:6b:8f:a8:3a:69:d5:ed:af:2b:0e:
b8:af:52:fc:90:9c:ca:0e:6b:aa:c4:57:53:22:3b:63:a8:97:
7a:f4:fd:62:99:37:fc:66:99:89:00:70:6f:36:e5:7b:8a:b7:
3a:33:7e:ec:f5:f0:5d:cc:8f:5a:2d:03:4d:e4:e9:4d:d2:b0:
c2:3b:98:88:2a:b2:a0:f7:86:d0:36:62:a1:23:eb:ce:13:6f:
d1:60:d0:99:03:c8:c7:bf:15:f2:ac:9c:6f:84:1e:2a:83:44:
25:c4:b0:2a:a8:79:98:1d:40:22:0a:dd:d8:e6:4a:3d:1f:8c:
bb:7b:9f:17:68:87:5b:b4:0a:b0:2b:1c:9e:00:fc:63:ba:3f:
f2:85:f1:ac:73:b3:e5:4c:d1:87:4c:5a:05:ac:f8:b7:bb:6e:
69:3e:ea:5a:64:ef:c2:31:ad:aa:24:66:d4:74:fe:6a:66:ed:
74:3c:01:63:5c:ff:1f:a9:ce:80:55:6d:f6:d1:91:17:8c:33:
e1:5e:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:41 2025 by rpki-client