Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: H80IU+rIWrWJZORFSCyiYpnFL9Ebfc8ktjl5aukgPLk=
Subject key identifier: A1:E6:D3:58:38:F0:62:7D:36:8D:24:EB:09:25:40:46:6B:02:4B:EE
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0194BCA9A234110288597B46A9AB14983355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: jB/+6j6kI23MCNkmr+1X62cgqsgbb8s9OEmQ9fClzkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:34:11:02:88:59:7b:46:a9:ab:14:98:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=a1e6d35838f0627d368d24eb092540466b024bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:79:61:3d:ce:19:89:bd:9b:1f:bd:48:d5:
fd:37:b3:8c:33:32:29:e5:3a:3c:68:46:3c:a8:08:
1d:a5:6d:ea:0c:ca:27:08:2b:6d:66:f9:8b:c6:11:
ad:c6:6c:17:cf:f1:d6:70:30:25:ba:3a:ce:c9:45:
b9:39:ed:38:6d:af:0a:1f:9d:ad:0a:fb:f4:56:f1:
67:5a:c3:fc:e6:27:13:6e:bf:cc:15:22:74:94:c1:
e3:b2:1d:5b:93:26:8d:2a:05:b7:90:3e:7f:e7:1c:
a0:88:79:37:7b:7b:bc:1b:38:14:68:98:6e:29:79:
17:1d:da:10:fb:a3:f3:ba:b7:b2:0e:40:7b:8c:9d:
58:11:c9:de:e8:76:c7:41:4b:cf:cd:96:14:60:81:
48:d9:db:47:b3:bd:8b:83:aa:39:ce:cc:a2:6b:60:
f2:77:01:d2:6a:7d:5c:44:37:cf:57:03:80:69:c4:
e3:86:e1:86:1e:e5:db:bc:53:b7:b6:c6:eb:cf:11:
82:e9:6a:e1:59:04:8e:74:19:e8:e8:02:7a:62:83:
0b:78:a8:8c:83:a1:ee:47:c6:96:45:e8:e0:2a:f7:
f0:81:ca:a0:b2:71:f3:1e:02:a8:0f:cf:f7:0a:05:
74:af:54:96:77:05:f6:4f:ba:9e:97:e5:7d:15:ec:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:D3:58:38:F0:62:7D:36:8D:24:EB:09:25:40:46:6B:02:4B:EE
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:20:12:bf:70:49:9a:87:83:02:16:99:34:34:4c:29:2f:
c0:10:c2:c4:16:15:bf:f7:63:34:7d:5c:2c:d1:63:1e:bd:f5:
6f:28:a2:55:33:8e:86:14:f6:e4:0d:81:1f:91:bd:3f:61:92:
33:f7:77:91:c0:ad:90:b9:7a:9c:54:74:0d:91:63:d3:9e:bd:
da:b9:f9:04:2a:cb:8e:2b:89:55:bd:04:44:c8:47:af:28:51:
8e:0d:44:1c:3f:b2:55:22:55:73:8c:6f:ec:0c:37:13:a9:97:
7d:f7:55:ee:55:d4:0a:f7:cb:e7:1e:02:6c:81:82:80:2a:a5:
aa:12:e5:a5:8a:db:bb:63:e0:31:f3:9f:9f:69:d1:3d:7c:4f:
cb:73:f3:ae:11:10:81:f5:11:48:d3:75:8d:6f:30:a7:c9:fa:
25:88:45:1b:7e:05:ff:91:ba:35:5f:a4:a8:ef:dc:de:8b:a3:
4e:cb:36:ca:1b:2c:76:a3:0e:53:47:c9:e8:c0:71:a4:f9:5f:
29:52:e1:20:ac:27:6f:b3:77:2d:35:c6:0b:59:cb:11:d2:a1:
11:d0:03:15:38:00:5f:60:c0:94:42:c6:a7:c2:91:b9:96:77:
eb:3c:ac:9a:fd:58:31:1d:fa:52:47:bf:61:b9:4d:8a:13:c5:
e2:61:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:51:20 2025 by rpki-client