Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: pd35LnI3vLxtnPmsYMwlruS1qqI1vZkeyFAWAesiOw0=
Subject key identifier: 50:86:EC:B2:3F:43:6C:86:62:17:8B:22:53:9D:09:47:C4:6E:D1:AC
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 0194BC730CB6376B9709F408E38A63BF2DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0A49
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: 7woqGDKOFwP0aMmcSZj7SDpjcYNUoeHseK5G7T/hH6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0c:b6:37:6b:97:09:f4:08:e3:8a:63:bf:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=5086ecb23f436c8662178b22539d0947c46ed1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:cc:a3:61:ee:ca:33:ff:86:44:96:5c:ba:
19:55:1a:1a:f3:d4:5d:fe:d2:0c:cc:8e:2e:20:b8:
6a:7c:d3:5b:24:8e:5e:77:39:5c:25:c1:68:b3:e1:
43:87:1d:4b:62:5f:6a:80:2a:1d:1d:b8:c0:00:c8:
3c:62:8e:3a:00:40:4f:cf:72:be:31:9d:85:02:44:
b3:ff:33:67:d9:22:6d:59:83:04:9c:bf:21:30:b9:
d2:4a:ef:62:bc:ab:f5:4f:be:5c:71:aa:62:59:b8:
08:69:3a:30:7a:92:4c:05:35:88:51:f1:0c:7b:98:
03:d1:11:0e:8c:4f:3a:18:b9:bf:35:2f:6d:d1:6d:
ec:04:ee:a0:5a:ae:ff:6b:1b:3d:cf:e1:ae:ac:99:
c1:a2:57:c4:ba:c0:d3:5a:57:5f:d3:fd:ac:eb:16:
69:46:ec:a4:f9:df:b1:40:d4:a4:18:fc:0d:df:7b:
89:c9:76:8e:e6:52:24:20:b8:96:80:ca:58:3a:a1:
fd:69:77:35:5f:bf:b3:b9:48:2f:13:57:4f:79:44:
34:ab:17:40:1d:ca:50:4f:04:78:57:b5:39:bb:f1:
7e:c8:0d:4e:7e:62:61:4f:df:de:49:b8:54:43:0f:
84:e0:74:f9:d5:9d:f0:57:77:b1:cd:91:21:4c:03:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:EC:B2:3F:43:6C:86:62:17:8B:22:53:9D:09:47:C4:6E:D1:AC
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:8b:81:39:19:38:a5:ff:a7:62:d5:7f:ba:96:c1:30:99:
38:ab:64:63:3a:b2:d0:24:40:f0:45:bd:cb:3e:2e:e8:01:30:
72:cf:84:4a:29:d9:75:de:c1:c7:f8:e6:11:51:de:99:4e:14:
35:69:4e:36:10:82:68:bb:cb:83:aa:c3:b1:7f:ef:ce:ad:bf:
72:fe:85:8d:c3:ed:57:74:6f:59:4a:61:86:5d:d3:89:c0:46:
ee:d0:62:de:07:b1:1a:97:08:43:a9:2e:10:6c:f7:2b:67:e8:
99:29:26:92:68:ca:5a:9b:3c:a8:74:51:b1:88:3c:25:e2:ac:
79:7a:67:f0:54:1a:61:32:1c:82:da:dd:fd:b6:13:7a:20:d0:
30:43:f4:75:89:03:af:05:e1:f3:1e:80:8d:4b:b9:73:91:15:
4b:14:fc:00:52:fb:4a:61:7d:73:af:bb:1a:6b:7f:1e:c3:ee:
c4:42:a5:68:49:64:7d:b1:b8:03:2d:b7:9e:ce:b7:b3:b6:a5:
2f:15:99:fc:ca:3f:0e:75:b3:8c:86:60:d1:e9:0e:d6:f2:ee:
58:f6:85:a4:34:39:de:12:c9:65:b8:1b:2c:87:16:70:32:0f:
7a:2e:f5:04:80:d7:35:58:1f:38:8d:d6:6f:24:dd:5c:76:54:
b7:31:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:19 2025 by rpki-client