Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: br3ulOiuD1PQ3wkVIp0Fspes/5b3wgEC+dAsxJZEz2s=
Subject key identifier: 8D:AA:C2:3A:A1:BB:E0:71:7A:BA:3D:55:86:AD:42:17:F6:CC:55:70
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0194BCA995DEEC59EA03EBB1750E8E1F46FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: e4MAw3QhzljlOFbw46y8+wY1V8URrhe6NDovVoWcP3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:de:ec:59:ea:03:eb:b1:75:0e:8e:1f:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=8daac23aa1bbe0717aba3d5586ad4217f6cc5570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:40:6c:af:80:31:a9:63:eb:26:34:dd:49:
52:94:42:ef:f2:d4:4e:0c:3b:18:64:3c:52:b3:49:
fe:e7:58:25:d5:5d:73:f5:b0:85:3a:2c:39:a3:38:
f3:70:9a:67:d7:74:bb:7b:f5:2c:ed:75:c2:6f:ff:
95:e0:9a:61:6b:ff:92:b2:79:da:c4:7a:d3:0b:54:
05:1d:3e:a7:e1:aa:75:66:17:cf:a2:61:8c:14:4f:
70:26:bf:92:3e:fc:ed:15:8e:33:d7:24:6f:8b:ac:
b4:de:b4:c8:92:24:7e:23:f2:71:24:a2:70:be:62:
25:d4:0f:08:08:42:b9:23:7a:9c:7f:d2:fc:b7:ec:
ae:ed:12:ab:a0:42:d4:45:0d:0f:ec:91:71:a8:0b:
f2:f8:2d:93:41:34:79:80:bf:5f:ef:8e:31:ef:8d:
97:2d:8f:b9:df:b8:81:bb:1a:7d:b1:24:7b:c4:2d:
8f:9a:b5:9b:b0:0c:02:b7:83:30:d6:a1:ed:fa:0c:
22:f4:94:65:31:85:f5:ac:40:ae:f3:bc:3d:47:d9:
fe:40:10:c1:b1:4a:d4:ea:cd:57:90:cf:c9:70:74:
79:49:35:c8:23:93:6b:57:a8:87:f1:3c:98:a4:86:
5b:bc:a0:5d:35:37:0c:fc:a7:00:de:69:54:43:78:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:C2:3A:A1:BB:E0:71:7A:BA:3D:55:86:AD:42:17:F6:CC:55:70
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d3:1b:2e:0a:06:ad:78:26:92:d1:a3:ef:9c:bd:d9:87:dc:
bf:dd:3f:2a:dc:c7:6e:67:16:25:db:60:39:cf:cc:1a:99:7d:
5f:02:8a:93:15:5b:9d:79:22:2d:15:57:d6:35:c8:e7:b4:ea:
22:87:a2:22:a1:1d:79:d6:85:36:4f:8c:53:45:53:0a:71:ac:
58:8b:5d:31:4e:75:16:17:2f:c7:14:ed:58:7d:9a:df:5f:66:
00:c1:0f:4e:e6:44:dd:39:7d:97:26:f0:ed:4c:de:f4:17:d9:
34:88:f0:9f:dd:c5:f7:6a:31:2c:01:bc:8e:6e:87:e9:fd:9c:
82:e8:9f:ca:67:8d:a8:32:f6:c3:66:e4:08:5f:90:fe:95:de:
6f:64:9d:be:eb:3b:3b:e0:18:6e:a0:bd:0e:f4:dc:a5:72:26:
f7:d2:9e:03:1e:ef:f3:a4:cd:83:f3:fa:a3:68:e8:05:f8:f0:
ac:43:ab:eb:77:69:3a:a8:f4:c2:3d:70:6b:9a:c6:a3:cf:18:
4c:9e:b7:41:ec:78:1a:ed:61:16:2b:5a:d8:93:5d:87:57:4e:
4d:a3:65:41:e6:0c:e3:82:9d:2e:8e:a8:7e:10:79:a4:62:36:
3b:04:41:95:22:9a:65:67:b9:3c:77:64:8b:84:23:53:96:2c:
47:47:30:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:56 2025 by rpki-client