Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File: JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier: UKK8vHa53VqEGkVFZzWJ8gBffrgmNmRORVnYa0geVLY=
Subject key identifier: FF:EA:04:B7:BC:9C:7B:94:98:3B:47:A3:71:14:33:04:A3:FD:90:B6
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial: 0194BC72C5905FD88594A08F23FFB5D37B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: 2kh6MI4zJHunzWCwgEk8AZqNsXUonEhRsAvwQ+cP7G8=)
2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:90:5f:d8:85:94:a0:8f:23:ff:b5:d3:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=ffea04b7bc9c7b94983b47a371143304a3fd90b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:2c:51:c2:73:e9:2a:a9:cf:a3:f7:00:f6:
08:80:74:93:b9:1b:44:02:2d:76:8b:df:65:c4:54:
35:bd:86:22:42:f9:30:a4:45:08:9a:3c:17:a3:66:
94:f9:03:a7:a4:fb:4e:2e:2f:03:b6:dc:26:05:23:
51:8b:11:d1:eb:bc:62:7f:c3:5b:0b:ad:2b:76:e4:
d3:0c:5d:cb:32:c4:ab:d0:f8:8c:6b:f2:07:0b:49:
3f:b7:f3:21:4f:f9:35:3e:dd:5a:38:3e:b8:a8:98:
3a:c3:ae:89:c3:a4:bf:df:08:e7:58:e3:f0:07:e1:
a5:7a:6c:21:50:48:b8:18:62:a7:a3:47:01:bf:d7:
a1:79:66:16:b8:a8:32:e9:4f:dc:5d:cc:a7:3f:49:
42:9c:3a:8e:3f:6c:10:81:28:04:35:75:cf:1b:49:
db:e7:c5:26:84:32:12:9d:57:6b:85:d3:01:48:18:
8e:3c:6d:ab:ce:39:8c:49:aa:40:52:46:c7:3a:1e:
3c:cf:74:15:8e:98:22:92:38:6f:ba:42:cd:8d:1a:
f1:01:3e:61:ec:eb:42:d9:e6:72:db:6a:1d:00:a4:
5c:cd:a3:2f:86:4f:ae:0c:ad:b3:28:f8:d7:dc:32:
6a:b7:0d:d1:50:7f:14:26:19:e5:da:a8:0f:11:60:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:04:B7:BC:9C:7B:94:98:3B:47:A3:71:14:33:04:A3:FD:90:B6
X509v3 Authority Key Identifier:
keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:c9:58:fd:59:f3:a0:5d:4c:6f:53:32:29:22:65:ed:ac:
59:7a:0e:e0:0d:e5:5e:8e:80:4b:c7:e5:2f:d8:a9:0e:34:3d:
34:1d:93:4c:1f:30:4d:8d:60:37:3e:71:af:e0:7e:14:20:d0:
0e:3a:cb:3e:64:f0:b7:99:51:7f:ff:06:d6:45:7b:44:1c:9a:
f2:f1:8d:64:d3:d1:05:5b:29:44:15:1a:88:7c:b7:97:0c:f9:
84:15:88:b0:33:e5:b6:31:9a:66:82:fd:4e:83:3f:0a:76:e4:
3d:4f:d4:49:8d:07:12:9a:b7:75:f2:0f:23:99:9b:18:e2:ca:
a7:60:e4:28:b6:2b:ba:9d:c7:4d:c7:68:e5:8a:5b:59:5d:6f:
dd:05:bf:84:70:ed:ec:0c:97:c4:8d:b4:1e:cc:b6:37:ec:45:
84:a2:0b:39:35:0a:ec:1b:f1:c3:c7:b2:7a:a3:04:96:a1:c5:
57:b0:e1:fe:d4:62:90:de:a4:1d:7e:3c:eb:81:e6:ed:21:6a:
e2:d9:3d:16:58:8d:87:1c:2f:46:ea:fb:0b:1a:40:ab:78:27:
16:13:fb:9a:63:69:6c:29:0b:bb:a9:b6:fc:e9:ce:06:b1:6a:
ec:e7:85:49:79:b6:f8:c6:7b:e9:e2:f9:9c:a0:ec:aa:55:b4:
73:29:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client