Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: d3GJE/4Sxo3LtjP760gZb5T6TUKtR2V6LNM0MqcsrxI=
Subject key identifier: 3C:5D:08:7D:7E:4F:CA:FC:94:98:46:48:E0:A3:E6:24:E7:E2:55:B4
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 0194BBCE736680A21FDF696C44C9C3E34557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: UgkUyX9cOySysfmfMk9yvYYkBC53GOj8plDXCXWvcLI=)
4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:66:80:a2:1f:df:69:6c:44:c9:c3:e3:45:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=3c5d087d7e4fcafc94984648e0a3e624e7e255b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:fd:73:88:8d:93:02:1d:cb:1a:8c:e4:4c:
17:78:56:02:65:39:d1:97:ab:15:d0:0d:f7:6c:4e:
6a:69:7e:b4:0d:64:a2:75:8c:e7:38:69:79:2b:71:
a7:a1:41:0f:61:1f:1e:95:6f:20:88:23:ba:b1:fd:
4f:45:2f:39:b8:cf:f7:54:da:41:dd:a6:80:3f:3a:
82:16:36:ba:1d:f2:f4:f8:98:0e:3f:08:94:b1:01:
e3:79:7f:1a:fc:39:41:72:4b:e5:1f:84:68:2a:81:
17:c6:4a:b5:fe:71:d3:f5:b9:1e:c5:21:de:95:20:
08:38:01:7b:ee:aa:3a:62:90:35:14:bb:92:5e:33:
f1:0c:54:6f:fa:86:f0:69:30:52:7b:63:6c:d8:d7:
9d:7a:a4:c9:08:3e:f5:f0:22:6a:3f:b9:de:93:27:
7f:f6:dd:2f:5a:aa:5c:31:9d:1d:82:c9:d7:c6:b9:
10:a6:75:e2:5d:9c:2c:5c:46:f8:a5:0a:95:ea:64:
dd:da:1f:dd:85:2f:0a:6b:64:e7:0e:bb:5f:f3:cd:
5a:de:1d:89:47:cd:f9:0c:b1:95:6e:de:86:66:d6:
6b:d2:df:2d:b2:56:c2:70:07:8a:04:ac:f0:3d:ae:
4a:55:6c:a6:fd:60:92:65:33:35:6f:6d:c8:93:e8:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:08:7D:7E:4F:CA:FC:94:98:46:48:E0:A3:E6:24:E7:E2:55:B4
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:be:a5:9c:34:10:97:2d:d1:f9:fa:34:8d:8b:d5:3a:4f:48:
db:32:56:3c:e2:06:1b:ce:67:84:6c:ba:ec:1d:1a:1c:c3:4e:
36:8c:e1:5f:c3:5e:44:67:06:0d:49:f1:4a:c5:e9:53:49:68:
a0:bd:2c:c4:4f:60:0f:ae:2e:67:90:f1:e2:51:52:61:7f:db:
f6:f8:1d:30:8e:91:59:c4:f9:7b:13:55:18:dd:a7:bd:25:9d:
74:5b:45:84:1b:dd:62:14:19:66:12:0d:02:61:d0:1c:ab:51:
29:44:f1:0f:a9:47:3e:d9:b4:1f:4e:54:ce:00:79:00:3b:ed:
0a:96:5a:66:41:a4:da:77:0a:72:20:75:c5:ef:05:ea:90:be:
b6:86:b3:ad:89:56:04:6c:c8:a2:84:1c:e7:12:2f:29:37:83:
a6:47:65:7e:f9:52:88:72:ca:70:5c:28:93:6d:e5:49:71:20:
28:95:03:27:35:bb:00:20:9f:a7:34:d2:8f:ad:a4:16:1c:9e:
5f:29:9e:ed:ec:80:7d:2e:a5:a4:db:53:80:be:06:c3:14:f3:
41:db:fc:e8:04:ec:a5:3a:86:27:e2:04:cc:11:1c:57:a8:58:
e6:9f:5e:93:cf:3e:9a:f1:99:92:e5:dc:5a:83:4c:2e:5a:91:
ed:98:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:42 2025 by rpki-client