Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: LDl9AS4IzqEaeto6hey2GGWIKdcjpVPjC9xc+FYyEzA=
Subject key identifier: 9E:0D:3B:B7:96:84:DF:3D:9A:64:D4:1A:67:0F:CF:2D:65:94:EC:31
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0194BC3BD47E84D718436C926DD1508F2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0927
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: Fx44TSpj/ERdHJHPZooMMI4DD6Kfy4BQiKDappqQ9j4=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:7e:84:d7:18:43:6c:92:6d:d1:50:8f:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=9e0d3bb79684df3d9a64d41a670fcf2d6594ec31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f7:68:13:7f:31:2a:a7:18:40:d5:fe:5c:
a7:d6:5e:da:1a:cd:0d:c1:9f:50:32:ea:2a:ce:24:
2f:4d:0b:27:5d:a0:f5:72:a4:c6:b1:93:ad:e7:6c:
45:28:14:41:14:a3:c1:55:77:2a:33:41:24:63:1a:
98:84:bd:f4:66:07:b2:dd:3a:b6:2b:ed:e2:aa:a7:
52:cd:18:ea:8d:7f:b3:3e:f3:a1:69:46:98:48:34:
06:bf:8b:c9:7c:62:c0:64:3c:68:fd:c2:76:e3:99:
8a:0d:01:e7:86:9c:5b:8b:0f:5f:b8:0b:4f:f4:23:
5b:8c:b8:7d:b6:77:ce:f3:4f:f5:84:1d:ff:14:c1:
ec:67:f1:78:ab:86:09:fd:16:87:02:34:1d:ce:bc:
ef:d1:b7:fe:ab:9a:be:b4:08:55:bf:54:08:09:9b:
2a:3e:97:98:92:f4:f7:00:2b:8a:a4:da:04:d3:c7:
d6:57:4d:80:45:c3:4e:dd:c4:e1:0b:a8:f0:6c:ab:
f1:34:ee:b0:12:f4:fb:4b:ec:e2:f9:96:a6:77:af:
0e:e4:10:b8:64:dc:f1:41:12:51:68:8a:ad:61:b4:
53:26:38:ab:bc:2d:fa:1f:43:3c:32:39:48:40:cb:
41:8b:1f:df:37:16:a6:c5:a2:e9:d8:ee:94:de:14:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:3B:B7:96:84:DF:3D:9A:64:D4:1A:67:0F:CF:2D:65:94:EC:31
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:97:3d:a2:20:f8:46:f6:53:95:a2:3b:b3:0e:34:e7:e6:b6:
f9:f3:65:e9:e1:f8:a0:fe:d4:98:be:68:09:44:f1:56:ab:88:
54:cd:24:83:b9:fe:39:8c:4b:07:c9:5f:fc:1f:12:2f:19:d6:
12:48:d4:a0:be:5b:fe:75:83:06:e0:c9:d3:05:e4:5b:42:35:
51:66:7a:90:d5:ec:f0:1d:a4:00:05:15:87:0c:56:3e:46:5b:
ff:69:30:34:0a:2b:4d:3d:99:72:36:fe:c8:a0:98:1d:ac:fb:
80:14:be:e4:73:78:0b:a1:ae:56:2f:90:51:f5:13:49:87:cf:
b5:f9:94:8c:af:f7:7c:a3:b5:66:71:75:13:87:be:55:65:40:
11:97:81:3e:d9:c3:7d:5c:ba:33:74:92:8a:16:6f:7a:5c:60:
c9:a6:91:cb:36:38:f1:35:c6:17:65:75:76:aa:87:e8:c4:2f:
c8:98:b1:b0:91:f2:8a:82:5f:6b:6c:da:f6:29:20:a4:cb:3d:
e2:bf:89:2e:f2:42:41:70:40:e9:7a:20:94:46:35:64:05:2c:
e0:35:01:92:82:a8:1f:80:d8:07:7b:dd:a9:c9:61:d6:e6:2c:
c9:b7:cb:cb:aa:8d:54:bb:f3:76:11:4f:40:a8:0e:b3:9e:80:
79:30:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:52 2025 by rpki-client