Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier: ZX/URTwhA7rPOwuRMCLBBq2ZZyrOABtAHnQAwz7sTTo=
Subject key identifier: A2:90:97:58:0D:D9:73:5B:AF:97:2F:6D:55:09:C7:62:60:18:AA:6A
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer: /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial: 0194BC3C98347A4178A76F89DBD05B80CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number: 0593
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: EICXXyJXCA+TTG8dE3SWboLm3jERjOOb1nXL0Jn1N0g=)
2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:34:7a:41:78:a7:6f:89:db:d0:5b:80:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=a29097580dd9735baf972f6d5509c7626018aa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:fd:0f:7c:3e:76:af:ab:a0:0c:96:ba:b7:
eb:af:9d:34:75:f8:d5:48:1c:92:7e:ab:6d:03:2c:
11:0d:2f:d4:42:b4:4f:b6:d0:aa:2a:04:13:48:02:
bc:e1:fe:0b:7f:91:82:cf:e9:88:2b:fa:30:cb:78:
1d:a9:0a:a3:e4:63:24:3b:17:91:e5:4b:a7:ab:13:
c0:d5:8a:7f:9d:75:34:0b:d3:3c:f8:f5:03:a0:ea:
5c:b1:e8:7b:24:c9:4c:0b:5d:88:5f:f7:08:48:b1:
da:8f:dc:f6:33:e3:e4:c2:c7:d0:07:a0:5a:20:ad:
f8:f9:a4:6c:97:2e:96:27:c5:d1:4f:cc:ab:57:3d:
b2:1e:c6:83:4d:ff:cd:99:7a:24:b5:d3:4d:fb:4f:
8e:a7:7c:0c:2f:27:48:5d:12:3b:bf:35:7b:2e:b4:
d8:49:90:5b:a3:59:32:18:e9:23:05:f8:2f:f5:70:
48:c1:de:a3:57:d9:1a:c9:ea:3c:e1:f7:41:62:3f:
06:36:d9:76:7d:93:e6:e5:43:18:da:68:eb:6e:20:
cf:b9:90:cb:66:23:24:45:62:e9:40:df:77:0d:1b:
23:67:3e:e1:97:59:84:12:07:fb:9b:22:97:24:84:
f9:03:69:fb:cf:f0:60:9b:18:88:9d:6e:1a:33:1f:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:97:58:0D:D9:73:5B:AF:97:2F:6D:55:09:C7:62:60:18:AA:6A
X509v3 Authority Key Identifier:
keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:58:3b:94:66:69:78:1d:09:a6:cc:d3:28:07:7f:f7:c6:d9:
08:32:59:c6:6a:34:2c:60:81:43:1c:a9:c1:00:b9:af:38:75:
5a:50:c9:f0:5d:5a:41:08:a1:a8:aa:9a:e7:74:cf:7e:4e:b6:
66:8d:43:0f:5e:14:f7:a6:df:fd:09:97:47:5b:2a:af:a7:15:
b4:db:be:19:10:1c:ab:37:a1:14:80:f1:0f:23:1a:88:d1:f2:
5e:6f:84:ed:0a:ab:59:a6:14:6b:dc:1b:de:2f:a8:85:37:69:
13:1c:b1:d2:4f:92:0f:26:c4:31:e9:f3:99:67:89:e7:20:4b:
8b:82:1f:12:57:69:12:41:8a:c5:d7:9d:4f:c8:8f:e6:69:dd:
2c:e2:da:76:6c:7e:af:26:85:62:10:83:7e:d6:28:c2:92:30:
ca:c8:70:9f:5e:2d:87:78:8f:57:4b:06:b3:fe:0a:c9:8d:4c:
24:85:41:32:9e:0b:98:1a:0d:ff:cb:bf:e1:1d:55:f8:79:38:
bb:56:bd:b1:66:37:25:0e:02:e0:9b:63:93:44:df:5a:91:5b:
be:44:42:39:0c:00:c0:d6:a9:a8:26:4c:61:e9:92:e1:5e:f1:
86:c4:14:40:a6:1f:2c:8b:a8:60:9f:c8:5d:94:3c:40:5d:d5:
1c:1e:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:32:59 2025 by rpki-client