Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier: DeONFVeqFp0rzx1tr1lkrk/apM63omhCQLYXzV8m9YM=
Subject key identifier: B6:10:D9:EB:6B:43:E1:2A:AC:5F:D0:DD:BE:88:1E:6F:8F:15:D8:22
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial: 0194BC04AF505D2DC28CAEBB9031673FBB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number: 043C
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: MG/YvPuonoWSSWaN53sOIQxVTgZW2iUhimqNiovSK+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:af:50:5d:2d:c2:8c:ae:bb:90:31:67:3f:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=b610d9eb6b43e12aac5fd0ddbe881e6f8f15d822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:7a:ff:dc:c3:37:58:59:9c:0f:09:8d:d2:
d3:ca:85:b7:0b:c4:88:23:05:0f:c1:fe:f6:87:fe:
c5:87:9b:7c:b2:cd:6f:cd:a8:b8:cf:4d:50:0e:c3:
a6:57:12:0b:00:3b:8e:65:03:7b:46:2e:46:7e:39:
29:50:8f:62:96:a8:0a:c6:7c:ef:1c:45:43:91:18:
84:1d:7a:98:10:c8:93:fe:5c:e7:a9:f5:c2:d1:4e:
ca:21:56:55:78:c6:62:32:31:3c:ae:04:3c:80:32:
71:26:a5:c2:a5:6f:fb:af:f8:2e:f4:af:ce:76:dc:
0c:b3:6b:e3:65:96:a3:ff:aa:1a:84:2e:29:e8:ad:
bc:a7:73:44:0d:31:e6:f2:83:15:79:d4:06:0a:1c:
56:a3:11:b7:29:3d:05:98:5b:90:9e:74:98:9f:8e:
fb:49:6c:f7:21:19:a7:88:8c:60:4f:b2:51:ed:7c:
b0:05:35:8a:02:20:43:69:16:7e:ca:87:b9:a8:be:
7d:01:36:c4:a9:00:38:fa:82:84:a8:a6:ec:79:64:
e2:29:aa:42:0d:43:17:78:b4:c7:72:24:de:8b:25:
2c:e1:6f:8e:82:88:dc:c7:c5:c2:16:54:cb:09:ef:
d0:fc:3e:67:53:8b:6e:e5:ac:c3:f0:04:1f:bd:8c:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:D9:EB:6B:43:E1:2A:AC:5F:D0:DD:BE:88:1E:6F:8F:15:D8:22
X509v3 Authority Key Identifier:
keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:ec:7c:45:70:ef:c9:de:8d:cf:5a:9e:cf:c4:2c:48:7b:
1b:77:97:d4:8b:08:d9:76:2f:67:a8:a4:c8:dd:39:8d:6a:e1:
5d:20:85:7f:a7:5a:1b:cb:f4:6a:83:d6:dd:e3:54:a3:25:db:
68:74:75:fe:78:a2:1e:ac:3b:f1:a5:ff:82:2e:17:20:b2:5e:
e1:98:c7:c4:f5:73:88:bd:8b:9d:8f:d9:3c:08:2c:f2:a8:3e:
d9:c1:bc:cd:63:85:74:c5:c6:4d:c2:b1:e0:31:c7:8a:41:3d:
05:ce:d4:50:2e:e3:ee:c2:e8:10:7d:f6:5b:63:f0:30:e5:1c:
a2:79:7c:b2:5d:d6:37:dc:91:1e:c4:2f:07:4c:51:b2:ba:e8:
a0:48:33:b9:b0:6b:8e:58:76:ba:7d:b8:cd:b0:58:b6:bc:d6:
06:78:f7:99:5b:bd:06:b6:01:11:37:3a:a0:e8:1b:96:ff:7d:
61:3d:54:b2:bd:4e:a7:e8:fd:f6:86:95:81:e4:c7:51:e8:a5:
96:3e:6e:cd:ce:24:6c:66:9c:78:e6:d7:d5:59:1f:e3:33:37:
de:08:ab:38:fe:98:b8:38:71:21:36:b5:4f:7c:23:73:14:4d:
2d:85:1f:a4:a1:cf:d4:12:44:f0:92:4b:e9:cf:cd:77:b0:99:
0d:99:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:11 2025 by rpki-client