Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier: Y0qGAThbNMDAybW5LBM+DKuzg0Y7rvogrBErHIKxjhQ=
Subject key identifier: CA:85:A3:48:F6:7E:CD:F6:06:84:7F:99:56:00:D9:E2:24:92:6F:1B
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial: 0194BBCE7B6D03593F6D7D648B6422548A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number: 1421
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: B8I14QFPuVjdCbb30AEedde36ZACqEezKLFe64jkjmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:6d:03:59:3f:6d:7d:64:8b:64:22:54:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=ca85a348f67ecdf606847f995600d9e224926f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:23:2d:17:d1:ea:e9:bf:75:02:61:fc:0a:
f0:ae:57:c3:be:cc:03:ff:69:8a:23:b8:d3:59:7e:
27:f3:1b:3d:10:39:21:ec:4e:44:3f:c4:ac:10:1f:
8b:81:62:0b:cd:1b:a9:6c:98:57:ed:67:b8:39:d1:
8e:6d:0a:79:bc:28:ff:de:ec:40:26:76:fa:4f:f6:
f4:4a:12:e6:a8:97:85:87:24:da:4c:99:e8:26:34:
52:7e:47:5c:4f:10:4c:5a:9b:8e:26:61:11:a2:67:
23:79:06:ca:79:e8:77:7e:2a:f1:7c:db:7e:9b:9d:
72:4d:9e:6a:8c:4a:32:6e:5e:89:bc:d7:88:9d:35:
ad:92:cf:8a:07:94:6e:58:59:1b:04:cd:a6:c4:1f:
d1:cc:3a:3a:f7:b2:6e:99:07:a6:31:0b:51:d2:58:
75:fc:df:aa:87:0d:2c:94:e1:4a:db:e1:5c:0f:3c:
22:2f:07:c5:a3:30:f8:1c:ff:cc:98:e8:7b:1f:c4:
ee:8a:c7:ae:43:21:9c:83:1b:b2:db:e3:4d:19:fe:
fa:9f:6f:1c:8a:0f:8a:e1:b6:85:6d:e7:11:5d:6f:
66:4c:95:55:49:0e:06:e2:7f:b4:c2:4f:cd:b3:97:
dc:00:ee:2e:31:f3:25:5e:a8:08:8d:43:16:f0:9f:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:A3:48:F6:7E:CD:F6:06:84:7F:99:56:00:D9:E2:24:92:6F:1B
X509v3 Authority Key Identifier:
keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0c:14:19:1e:1d:34:f7:47:46:3a:ae:dd:93:ea:e1:4c:d1:
3e:c1:4e:ba:fc:c5:ac:21:26:ef:c5:2e:fc:4c:53:35:a8:4a:
10:83:f3:47:40:d7:b4:6c:e3:2f:1b:37:65:c4:65:a9:ee:86:
36:99:1a:21:c6:15:fb:41:2e:b9:62:60:1d:b1:5c:e3:91:39:
40:5e:04:d9:e9:31:49:e4:1d:bb:06:61:44:2f:f5:3a:dd:37:
93:6e:4d:16:c3:52:02:0d:60:c6:40:9e:3c:d2:d1:e2:1d:fc:
aa:f1:8a:0e:2b:cd:6e:8a:39:ba:2c:01:a3:56:0e:b9:1d:bf:
2e:24:47:7f:54:87:7c:6b:a5:8f:47:24:c0:75:3d:da:32:f2:
7a:5f:d4:0a:02:b7:2f:11:2f:60:9c:39:95:3f:b4:ef:24:01:
ed:1a:63:87:02:ae:8c:db:7f:f5:38:5c:bd:f2:a5:ac:09:05:
37:ea:db:57:1d:78:f3:1b:8d:83:fe:c7:10:7d:cb:cb:e1:6a:
d7:28:9e:dd:9d:d9:68:8b:f5:61:23:92:ff:a9:42:34:9f:12:
5d:2a:25:a9:62:e0:17:34:07:48:d0:22:be:c7:6c:5e:12:84:
92:56:97:50:b8:72:4e:b8:14:e1:d9:d1:ae:be:8c:3e:57:fc:
f1:0e:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:48 2025 by rpki-client