Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: yrntvjVEPSrHqemkAM1xXcFiUCHJmaQfbOr//i6YugQ=
Subject key identifier: BC:BD:A2:DB:5F:81:B4:95:BB:3F:C4:97:17:8E:D3:4A:B1:96:A8:70
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 0194BC72E9876C96533B224B365876D382A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: o9aTJqXftYXLkr8zwWe8uQkan5w8WukKYkAQ4N3aED8=)
2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e9:87:6c:96:53:3b:22:4b:36:58:76:d3:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=bcbda2db5f81b495bb3fc497178ed34ab196a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:18:65:8e:f8:d0:f0:94:15:47:ec:f9:cb:
e7:e4:ab:b7:8d:7f:4c:ce:22:ca:81:37:fd:e8:d2:
54:c0:a0:f7:b9:f2:d6:e8:ca:a9:09:b5:c6:9e:68:
e6:1c:80:8d:6c:d1:9d:99:4c:d7:76:08:43:a6:a8:
cc:da:48:7e:0e:ba:04:9a:ce:22:3a:a4:59:ed:18:
56:46:41:2f:b5:b8:2e:6c:90:c3:8b:ec:a8:85:0b:
0c:f2:a0:71:ec:17:7c:59:67:52:47:49:07:f3:86:
65:ed:a0:89:8c:c8:42:d5:d4:cc:85:07:d1:96:25:
11:c6:ea:7b:20:4e:86:bd:f2:20:56:8d:be:a7:4a:
63:dc:ce:bf:31:88:75:98:9b:74:2e:e0:25:b5:39:
70:e3:29:ed:e1:56:83:e7:57:56:c0:d8:32:8a:e4:
cd:ae:1d:d5:60:9f:3a:12:98:b7:f1:df:56:4d:0b:
24:90:e0:e8:96:f2:d3:83:5a:35:b1:e7:f1:d9:0a:
d8:2e:b3:98:42:19:ee:b7:bb:4b:d1:f4:98:be:81:
00:81:a4:9b:53:a8:0a:7b:c0:49:e6:60:cc:ef:28:
f3:15:1f:d6:aa:2a:84:30:1c:b7:10:fc:b1:da:d4:
71:95:3b:d6:26:c5:d5:57:6e:ce:c0:bb:c4:34:63:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:A2:DB:5F:81:B4:95:BB:3F:C4:97:17:8E:D3:4A:B1:96:A8:70
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:14:72:5c:ca:16:61:79:d2:2a:d8:a3:a9:6b:8d:68:d0:
6f:b1:ba:fd:e4:b9:4a:00:d8:07:60:79:e3:6c:b7:0c:c9:f6:
88:59:6a:9e:42:e3:be:a6:de:ae:06:a6:8c:94:a6:56:40:41:
ea:d4:c9:2c:85:9a:74:f7:d3:b8:de:ab:e6:b3:ff:0a:9a:46:
48:ed:a9:06:fa:d0:ec:ec:f8:63:39:b4:2c:d4:c0:64:1a:a3:
1c:52:7e:20:c6:05:fb:37:4d:f8:c9:fe:02:78:56:41:68:d7:
bd:9f:0e:e4:10:6f:e1:76:2f:94:70:09:51:2e:e6:55:99:9c:
d5:30:2a:14:64:8f:69:40:8d:69:8b:89:2e:3e:55:89:3b:af:
47:b2:87:93:dc:a8:2e:94:10:c9:62:45:42:a0:5c:76:e1:96:
9c:6a:29:d6:ab:c4:12:56:f0:cd:5d:40:17:d0:c5:68:11:ba:
d3:a7:12:29:32:bf:ba:b0:95:e2:d2:a5:cd:73:59:0e:df:41:
77:b0:aa:36:c9:89:aa:c3:16:79:4e:1e:5b:8d:a7:52:9a:e7:
c0:b5:1d:14:be:1b:49:66:ea:59:3f:9b:a6:f4:de:ab:11:2d:
c2:20:45:fb:bf:6b:20:1c:f7:27:23:59:d5:8f:e9:19:b5:28:
99:d4:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:02 2025 by rpki-client