Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: D5Pcw47IsuQi1ASGYotHqDuGs0G+PKiP1Q6fXN0Z0ho=
Subject key identifier: 9D:CC:D2:30:10:CE:41:BA:66:EB:E8:D4:4A:34:17:65:45:A3:5B:4B
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 0194BBCE92D206052142789878E0E2B4170A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 112E
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: I/JLOaXPGZip3SswI2FwsNNaIU9UyGfW+Ie7S/78JQk=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:d2:06:05:21:42:78:98:78:e0:e2:b4:17:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=9dccd23010ce41ba66ebe8d44a34176545a35b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:fa:ff:54:eb:d1:d9:70:a2:df:e1:e8:de:
ef:f5:80:b4:24:a0:85:f2:25:c8:e4:b8:c1:95:68:
a1:42:c4:f1:33:35:0f:40:fb:59:07:9e:fc:4e:f1:
1c:74:84:dd:89:66:16:a7:4e:14:07:c8:d4:87:14:
7a:d1:56:2b:77:b4:31:39:9c:1e:f6:39:a0:90:f8:
c3:51:e9:89:a0:88:8e:e8:bb:9a:be:4d:fb:7e:5f:
31:1e:b6:fc:ac:3a:00:04:ac:07:86:dc:41:5a:29:
09:b0:fa:66:06:50:27:01:d1:b7:13:d1:af:19:4a:
50:62:68:92:06:6a:bd:c7:59:ed:d1:08:d7:fa:01:
6d:93:99:6e:2c:3c:6e:d2:7b:38:52:9d:d5:78:b3:
bd:a8:0c:23:4e:22:15:0f:6d:40:f7:f7:97:76:ee:
94:84:b7:59:35:41:7c:8a:ba:48:4e:98:eb:fe:f8:
7d:65:0f:f4:8a:3e:3e:f9:2d:cb:56:0b:c6:16:73:
82:de:3e:11:4e:7f:74:43:c3:5b:3f:6d:4b:52:92:
c6:6d:e7:8a:f8:3e:1a:62:a8:e4:4a:17:48:92:88:
c0:f6:75:28:84:e5:79:3a:a3:f1:44:4f:91:0f:e7:
a6:49:08:d0:a3:74:3f:83:68:5e:65:13:ae:75:db:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CC:D2:30:10:CE:41:BA:66:EB:E8:D4:4A:34:17:65:45:A3:5B:4B
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:0c:ca:93:4e:37:50:8d:f9:2b:cb:15:91:1e:b2:2b:32:
a2:cb:dd:bb:1f:70:31:74:00:26:cc:3d:c4:6d:2c:bd:b5:c7:
44:76:51:d5:14:41:3c:c0:35:18:6e:3a:91:a3:91:07:ce:2f:
88:5b:68:86:90:ba:b1:3d:8d:bd:25:ac:24:21:b7:74:63:39:
8f:d9:a1:f0:9b:ac:88:1c:df:7e:ee:92:e0:8b:24:55:9c:fb:
c1:ef:86:49:78:bc:c2:1d:82:41:e5:9e:5c:c9:9d:48:95:e9:
a9:7c:ca:96:7d:f5:6b:12:10:41:f5:88:a3:f4:76:98:cf:df:
b0:20:4d:ea:e9:7b:4a:22:67:6f:62:a0:5d:c3:8b:ce:08:3b:
58:0e:36:7f:f4:9a:f5:36:2b:bc:20:7e:99:ea:ed:37:24:6c:
b0:f8:d6:e9:df:f8:18:9f:11:c3:1c:f9:8f:62:fb:bf:63:3c:
e5:90:8b:6a:d5:e4:16:3d:40:ac:b3:93:e2:91:73:29:8c:80:
f1:1e:59:7a:78:bd:8e:a8:f4:b1:39:d0:36:f8:8c:4f:8f:2c:
f4:3a:ec:af:29:88:11:48:7d:b6:73:b8:6f:20:02:ce:ea:6e:
5a:1e:63:be:24:93:3e:4c:c4:14:11:53:9e:d6:49:e4:b2:5f:
9c:62:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:51 2025 by rpki-client