Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: Dl8BmLI+MvOx7oRsjkESdc0iWJpmgcWJvj9bswIyCgo=
Subject key identifier: 4B:8D:35:41:8E:A5:B1:67:AD:27:C0:57:67:25:71:AC:9E:02:DE:9D
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0194BD4ED51ACBB91C9631229AF6E51F7FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1469
Signing time: Fri 31 Jan 2025 17:00:47 +0000
Manifest this update: Fri 31 Jan 2025 17:00:47 +0000
Manifest next update: Sat 01 Feb 2025 17:00:47 +0000
Files and hashes: 1: 4xDjMGoR5cxZD0TEt45OTNLuzZ4.roa (hash: aWtnbMWrytraTfwmFZQXH9y0uPlTO0CdQ7LWoLXK164=)
2: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=)
3: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: zopdBDMzF/MqcE6ovLNj9O01k4lWFFwifA9Yd+AMCEo=)
4: nFyZh5x08lIz1JqhlP26fbzVfb0.roa (hash: QQhMNmFLQU4RqfQz/4LypnupJTRIGeWGcOivoM9k/tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:d5:1a:cb:b9:1c:96:31:22:9a:f6:e5:1f:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 31 17:00:47 2025 GMT
Not After : Feb 1 17:00:47 2025 GMT
Subject: CN=4b8d35418ea5b167ad27c057672571ac9e02de9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:89:1b:36:64:15:3c:70:83:7d:f5:7b:be:
d8:16:cc:7c:d6:01:00:86:ec:e6:64:75:d7:c1:0c:
7b:bf:78:fd:03:b1:3e:7c:57:de:be:41:db:d6:44:
74:23:d0:fe:a4:38:41:cf:4f:29:eb:76:ad:3d:fd:
5e:53:fd:d9:86:3f:8f:e7:1a:e9:cd:c7:69:ee:25:
50:59:d4:b3:de:41:10:96:bb:44:53:44:ac:6d:76:
7e:42:cb:7c:da:3d:7c:2f:1b:0b:ee:46:34:65:8a:
33:e6:d5:59:e3:04:53:12:c1:3b:2c:8c:99:55:16:
6f:4f:4e:4a:7a:02:eb:2b:f4:27:3b:11:a0:b6:4c:
3a:c1:fd:15:23:c7:a2:03:ce:10:c5:60:be:db:ba:
29:4e:47:6c:84:65:e9:f7:1c:93:eb:b6:5f:30:f5:
22:70:1b:a4:25:e2:67:49:c9:b7:af:6d:56:bd:3e:
4f:6d:72:55:e1:cb:3a:fd:a3:8a:cc:1f:c1:3c:7a:
c6:49:16:9a:8b:95:2a:34:0e:4e:9c:20:8c:4c:e1:
a9:d3:3f:21:9d:81:b0:b6:64:e6:e2:2f:67:23:67:
1f:36:3f:34:3b:38:6a:1b:f1:34:23:6b:20:dd:77:
c8:11:0e:19:6f:67:35:49:87:ff:af:66:e8:20:34:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:35:41:8E:A5:B1:67:AD:27:C0:57:67:25:71:AC:9E:02:DE:9D
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:96:a9:17:92:dc:43:e8:2e:9b:d8:a6:a6:f3:26:02:69:c8:
a7:35:0a:10:71:49:52:2f:7c:bb:88:3e:76:79:a7:06:01:89:
23:6c:74:2d:9a:ca:6f:7f:40:bf:04:e7:b6:4d:70:54:a9:f2:
7c:0e:74:55:f4:c7:3e:b6:48:61:3a:56:c1:c9:90:dc:fa:cb:
a6:f0:b5:9c:03:a6:15:b0:3b:15:ae:ce:7c:e1:cf:cb:f2:d1:
38:a0:7d:99:72:8f:12:f4:4c:50:62:cb:f4:b6:ce:4e:5a:d7:
7b:4b:84:67:35:bd:a4:16:8b:83:00:87:9c:6e:25:62:ba:75:
eb:ee:bb:3d:6a:57:27:f4:aa:48:dc:56:82:4a:9c:a5:44:f1:
f2:01:ba:d5:3c:95:58:6e:64:93:67:a5:b0:35:64:9f:57:11:
74:b0:e0:a1:fe:0b:45:22:6b:4b:94:4c:fa:9b:99:c5:63:be:
59:af:c3:10:b8:25:8e:36:12:d0:ed:f4:02:9d:bf:a7:59:1e:
97:79:27:f7:43:af:12:c8:7e:ab:b4:0c:28:a2:e1:8c:a2:a0:
65:d3:61:85:9d:77:17:cc:f7:56:07:71:6d:4b:af:d3:59:b2:
3f:ea:50:db:61:fa:64:63:10:b6:de:2b:5a:2f:71:7e:56:92:
dd:dc:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:14 2025 by rpki-client