Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: IqYEyzGktOmUfDxycLOgaB3Iv1sUNN9refX58It/38g=
Subject key identifier: 30:FE:73:55:09:26:D9:0B:6F:9A:A4:D0:65:0B:DF:02:EF:B8:EC:74
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 0194BC04D67A28F9CFE5CB6F389953B69263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: oC+wJtHrQVj0NikdTstKN80AVts6D3gB5ZwHcc+0uWU=)
2: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:7a:28:f9:cf:e5:cb:6f:38:99:53:b6:92:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=30fe73550926d90b6f9aa4d0650bdf02efb8ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:53:8f:e2:32:41:86:61:e6:4b:1b:d5:e9:
b1:bf:96:87:92:33:65:f1:69:35:24:70:ce:19:37:
11:33:ea:9c:25:ec:54:77:db:78:50:9a:5a:dc:0a:
c8:23:29:1f:85:9b:89:64:d2:91:cb:90:c4:ee:ff:
39:14:b9:92:b4:7c:99:18:8e:da:2b:9b:bb:47:2d:
45:61:e9:b3:8e:82:f3:9e:4c:74:c0:a4:b0:81:cd:
ec:da:62:81:2f:f1:52:70:f0:d5:d6:c9:d1:63:6d:
6a:14:31:46:a0:a4:19:5c:b2:af:b5:34:28:3c:30:
ba:87:50:88:0d:d9:9c:31:b1:dc:79:b1:00:ea:44:
df:ee:4d:e0:17:ab:37:3f:ee:18:88:8c:b7:41:f4:
64:57:6e:bd:44:4d:78:61:29:ca:e5:6a:31:84:0b:
56:c8:e1:3e:cd:97:04:e0:fd:9d:85:c2:de:1a:27:
96:ed:31:7c:0a:de:39:88:de:c6:30:86:db:d1:57:
d4:68:94:13:b3:5f:0f:3c:4c:15:d4:91:b8:9b:4a:
69:f7:59:60:d8:d8:7c:d8:33:51:26:2d:e3:ec:9c:
8f:50:a3:0a:52:30:c7:df:0e:03:30:43:9e:38:fe:
7e:c9:ef:5b:3a:54:b0:44:4c:5a:3a:65:80:bd:f0:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:73:55:09:26:D9:0B:6F:9A:A4:D0:65:0B:DF:02:EF:B8:EC:74
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8c:4f:35:1c:dd:85:db:d2:70:33:50:71:fe:33:99:d8:af:
4f:86:6f:39:b0:70:64:93:e0:f1:fd:46:e0:f0:e6:8e:64:b4:
9b:37:5d:09:49:d9:e6:c8:10:aa:36:8b:9a:b4:59:8f:45:3f:
73:e9:4b:bc:1f:41:32:76:de:a9:4c:81:67:2d:29:46:1c:43:
b7:0c:44:15:74:9d:03:79:54:a1:22:91:d7:48:a5:ae:6d:df:
e6:4e:ae:1e:f5:31:9f:82:e9:3d:54:a0:72:15:45:c9:49:d4:
37:12:c2:4a:aa:4c:88:bd:c3:2d:96:ba:3b:c6:72:26:71:d4:
a9:0f:31:23:e6:ca:65:08:3f:fe:2c:a7:54:b6:65:2e:e0:48:
65:ee:8e:39:1f:3d:7f:a8:38:91:cb:b0:66:88:a1:eb:ab:48:
c7:a9:07:35:8b:e4:ae:c4:56:78:cc:d0:d9:a1:55:3d:38:7d:
a3:b0:40:29:4d:ab:9d:33:ea:b7:a7:91:12:c5:17:ac:13:1f:
fd:7f:23:c9:65:5f:16:9e:56:96:da:fe:5c:bb:11:4b:b2:6e:
df:11:ea:ef:9f:bb:5b:75:eb:69:9d:a4:33:4d:84:36:c2:41:
8e:d0:78:b0:45:f3:cd:36:4a:f5:88:3f:d4:f1:37:c0:5f:6f:
09:7b:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:47 2025 by rpki-client