Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: 7JMQRXnZiCXtrZMPXU85iltYz7xFAxNWGgUg9NutHtE=
Subject key identifier: FC:4F:B5:48:81:43:0E:8D:BC:4A:8B:8E:DD:B8:A3:A5:67:A0:82:63
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 0194BBCE8F53A37130B3437958FB083538DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 0FD7
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 7aLBlpQ5X0vB68ERHFejhObezNS3wdFATCKrvqQs6KQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:53:a3:71:30:b3:43:79:58:fb:08:35:38:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=fc4fb54881430e8dbc4a8b8eddb8a3a567a08263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:1d:80:2b:69:e6:8a:cf:37:8c:04:65:48:
0b:4a:fb:48:9d:f1:20:b0:85:2c:99:bd:38:eb:47:
03:61:8d:eb:df:12:24:fc:a3:dc:c0:88:a6:ae:7c:
89:8f:e1:a4:a5:67:67:8d:95:c5:66:a3:e4:4a:d6:
1f:3c:43:e6:fd:69:8d:8a:0b:13:05:0b:d7:74:1e:
40:77:d3:b5:b3:8c:cf:60:79:89:5c:68:21:92:6f:
2d:35:67:61:9f:f0:8c:46:1a:3f:ea:fc:07:f6:09:
56:eb:5c:e3:72:2d:ac:ba:5f:24:df:80:75:5b:55:
4c:1f:2d:b9:2e:9c:fd:48:84:36:93:85:61:37:06:
7a:6c:70:c7:1f:c3:50:59:f2:87:ae:d1:19:55:03:
8b:44:57:f5:f6:1f:fd:09:e0:2d:80:f4:79:05:f0:
68:cb:ed:37:87:52:2b:63:5a:86:0c:62:cc:d6:f2:
b6:5c:50:d7:46:10:69:dd:fa:24:1c:d3:d6:04:71:
13:d5:47:1d:50:4a:a9:13:d8:51:e0:40:57:82:a7:
de:81:c7:f9:32:4e:e4:90:81:75:aa:97:52:48:e9:
ac:68:1e:4a:fe:e8:04:1d:8a:d0:e1:81:cf:ed:7f:
04:10:a6:a0:8c:28:37:33:c3:86:8e:93:f5:75:86:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:B5:48:81:43:0E:8D:BC:4A:8B:8E:DD:B8:A3:A5:67:A0:82:63
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7b:b1:a4:6c:a4:87:ba:16:79:ff:5d:f5:7e:20:73:c5:d8:
6f:0c:f8:bc:c7:ed:af:cc:04:a6:ca:4e:a4:a0:60:1e:99:d1:
9c:f1:53:a9:f8:70:21:93:5a:43:37:b7:99:89:33:be:7d:1c:
2f:39:36:bf:05:63:6a:f8:5a:8a:53:c3:d4:02:a6:30:65:49:
4e:fd:b9:16:f1:10:77:f4:be:6a:8c:a0:c1:80:3a:8f:92:4d:
c1:41:d9:c3:fe:53:8e:f9:36:21:16:dd:21:b1:af:b1:b6:10:
1b:79:1b:3b:ad:0b:b4:b0:a3:d4:2b:ae:cb:60:ff:dc:09:15:
9b:81:88:87:fa:b8:d2:14:1f:6c:57:7f:9d:85:c2:ce:1f:1d:
30:34:d1:20:ed:51:44:95:a0:9f:19:79:e8:42:f5:b7:f1:fd:
fc:ae:3f:d3:f0:f5:53:8b:ca:ff:2a:2a:f3:30:4c:6a:22:cb:
ed:93:72:2f:23:3b:89:95:cc:4c:2b:23:b6:ba:ca:26:0e:ba:
74:c0:10:90:7f:e4:36:0b:ab:2d:55:49:33:27:6e:33:38:1f:
6b:f9:b1:7b:5c:81:dc:39:76:86:c6:4e:04:40:6f:ff:de:30:
cc:b6:ed:4b:ce:39:23:ce:50:7c:68:21:ec:34:1e:eb:5d:0d:
00:b9:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:14 2025 by rpki-client