Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: fH24Lxg6GBplU9XdBIzTacuopwkeSbc/5V2AR+qmJd4=
Subject key identifier: 5B:C7:6C:8E:75:6B:AD:B6:C1:DB:B2:2C:79:63:23:50:20:FC:16:B8
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 0194BCE06DAAB5357047A900929A95ABF988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: bE/28OEkobDMiO04jhwJz9mY7X8TlxzWw0Un4KFO2sQ=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:aa:b5:35:70:47:a9:00:92:9a:95:ab:f9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=5bc76c8e756badb6c1dbb22c7963235020fc16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b0:82:ef:03:5d:d5:69:72:44:44:fc:07:72:
0e:71:86:ae:9f:4e:b8:c2:57:11:0c:ef:30:3d:92:
f9:59:cf:a1:0c:a7:db:25:94:20:93:5a:39:44:f6:
3a:b5:cd:80:f8:0a:05:ce:0d:36:f1:9f:52:1d:c1:
d6:27:5d:ab:ad:bc:01:0c:78:47:c8:96:ce:71:44:
04:64:6e:db:8e:8d:e0:1a:26:b1:28:18:66:84:0e:
95:16:35:72:3c:c6:49:18:ea:79:f2:5f:c1:ae:ad:
7b:9f:0b:6b:25:15:71:3f:4a:0d:3d:74:65:a9:4f:
0e:c2:7b:16:35:14:66:07:e7:dc:d5:b3:58:f3:52:
b4:48:b9:4b:06:f2:06:13:0d:6a:c9:6f:44:2a:fd:
4d:2e:e0:05:35:26:9f:2a:1a:e9:a6:dd:0f:3d:40:
08:c5:97:f7:54:f5:d3:e7:a8:50:6c:99:20:68:fa:
e9:21:6e:c6:26:6b:cb:07:a9:49:29:16:72:63:67:
87:09:59:9f:94:12:98:89:dd:ca:04:a1:88:e0:5e:
fd:eb:b3:5e:18:7d:86:b7:56:89:2a:19:ee:ae:b4:
80:29:e2:f5:ad:7e:d6:73:1d:79:91:a7:bd:34:bf:
fa:f9:3a:1d:d0:ef:0b:e0:4b:2f:ad:db:f0:cc:4e:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:6C:8E:75:6B:AD:B6:C1:DB:B2:2C:79:63:23:50:20:FC:16:B8
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:91:e1:4b:50:c5:e5:79:02:6d:41:75:e6:11:4c:1f:64:
d6:59:b8:3d:9f:a3:2f:28:e0:90:8d:2e:46:c7:1c:12:59:65:
41:3c:de:ac:11:d7:e6:98:f7:18:51:d6:a4:c1:21:09:8b:91:
c5:6f:09:b7:ac:99:96:23:c9:31:44:bd:1f:c1:43:6e:08:a6:
d9:e8:40:2f:a2:91:2c:06:33:58:4a:49:83:2d:59:83:a0:51:
ea:7c:41:df:ee:eb:bc:92:db:88:e8:47:69:be:f8:85:a7:82:
fb:98:f0:36:fe:c1:98:fe:c6:5b:5e:f2:d7:75:66:0f:89:9d:
22:9d:28:4e:08:73:c9:0c:e4:b5:4c:a5:79:3b:ac:83:7b:df:
66:20:d5:4b:84:62:4a:64:26:b5:72:2b:0b:55:ce:b4:32:d4:
35:26:bc:f7:63:8d:d2:05:fa:bd:7a:3e:8c:72:aa:f2:1f:5e:
df:8d:7e:d3:82:5d:f6:2f:61:40:08:4e:8f:83:9a:d3:47:6a:
58:43:6c:0b:c2:36:5c:5a:00:18:f8:74:2d:8d:75:a0:0f:69:
83:2d:69:8b:87:76:a2:3e:9f:2b:63:40:e1:12:02:6f:96:d1:
ed:e1:4e:18:f0:9f:99:85:c6:96:07:de:6b:4d:89:5f:dd:77:
2b:fc:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:06 2025 by rpki-client