Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: GrKlu8JL9HnIoxFDukjoQspD4V4jT6F8iOSdBnvhRi8=
Subject key identifier: 9F:04:C5:C9:18:3A:4B:CA:77:93:B9:5B:34:1F:3A:C7:E1:AE:5E:2F
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0194BBCDF7CC6CBF573DB08F94EBCB8F684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: hmdgGftWEog+KJr7VqrkWWQWC4gHCb//yX9ImSCtNcc=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:cc:6c:bf:57:3d:b0:8f:94:eb:cb:8f:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=9f04c5c9183a4bca7793b95b341f3ac7e1ae5e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:27:8e:d6:aa:71:72:b6:06:d0:6a:71:e6:
24:cb:5c:bb:d7:ff:3b:16:27:be:41:54:9e:f7:31:
be:01:b8:74:29:ee:9d:84:48:e0:bc:40:ce:4e:75:
f2:b2:ce:65:6a:d4:fd:27:aa:9d:17:a6:45:23:79:
5d:a4:81:ba:47:c0:73:5f:c3:f4:7c:42:14:cb:0f:
d4:da:ea:56:e0:0b:39:b0:55:ef:8e:64:81:12:f1:
ce:28:61:89:02:90:08:dc:ff:7e:6b:7d:ac:73:57:
60:cd:47:3c:85:6e:f0:e3:fe:83:eb:f8:bc:16:7d:
0b:46:5e:22:e6:e2:eb:d4:8c:d7:a3:f5:ea:b2:5c:
00:46:62:e9:85:99:57:de:3c:3b:cf:2f:64:cb:95:
18:49:ba:ab:93:37:6e:55:09:05:5c:e5:a2:af:36:
6b:2c:28:a4:9d:63:5a:e3:cb:90:c2:67:af:d8:fe:
84:6a:99:52:2c:7a:56:7b:18:01:39:6b:77:dc:9f:
3d:db:c8:da:b1:b5:53:a7:64:12:3f:26:64:39:3c:
7a:ef:89:1a:f0:39:35:1a:20:b0:6e:11:e8:a5:be:
ce:57:56:f2:60:d5:36:b1:cb:28:b4:4a:5a:02:5d:
53:8e:2a:21:2e:a7:5b:c6:df:ac:38:4d:b4:77:43:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:C5:C9:18:3A:4B:CA:77:93:B9:5B:34:1F:3A:C7:E1:AE:5E:2F
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:8f:e9:78:e3:72:e3:04:e3:76:e4:a0:b9:60:1e:76:d2:
b2:b3:f2:9a:11:37:1b:da:98:bf:6d:44:71:92:77:46:66:c2:
6f:40:a8:f1:ee:9d:eb:73:aa:a4:55:61:65:fb:79:f5:3a:0d:
3f:e9:d8:52:98:ee:8b:3d:0d:73:a0:85:67:5c:76:5f:c2:7a:
3e:25:be:59:58:f8:2c:fb:7c:98:80:aa:a6:9b:1e:cf:c7:67:
9e:f7:4c:55:be:56:12:da:af:ac:13:81:ac:d1:f4:1c:23:a2:
6b:ca:61:ff:4e:c7:cb:ad:ea:0f:bf:9c:b8:66:95:6c:59:18:
6b:c7:bf:ce:f5:ab:79:3a:76:14:45:9d:7d:bb:25:c3:f4:f5:
be:11:2b:52:98:d7:e3:78:77:43:95:37:72:f9:8b:ff:3d:dd:
32:b6:8b:33:c1:5c:93:21:f9:11:c1:58:f1:78:e4:bb:a7:ee:
dd:27:87:85:36:78:a1:ff:25:f0:b8:9a:8a:db:58:66:1a:23:
2f:62:65:8a:59:16:70:1d:6f:6a:b1:47:cc:e1:76:00:76:c9:
90:90:9a:12:37:9c:9d:7c:81:e6:60:7f:0e:94:6f:2a:a5:82:
56:1a:6e:cb:c1:dc:cb:e0:68:dc:6e:b3:f6:b5:8b:6a:51:e3:
c2:02:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client