Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: 4v0p0g7N796WsPqlqV4aSTL8y30T2gxs2B0DHCnkuzU=
Subject key identifier: 3A:C0:56:FA:6C:5A:26:14:C5:62:20:C8:9F:4B:0A:3B:3A:46:F1:52
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 0194BD4E549D09A3C745F0AC966258070DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 06F4
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: nlHjQ5PNswLbTpwcZwVSp646bmAnoIFcKFAIc1zmprg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:9d:09:a3:c7:45:f0:ac:96:62:58:07:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=3ac056fa6c5a2614c56220c89f4b0a3b3a46f152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:fb:c3:c3:d0:63:45:cc:2e:d5:ec:38:c7:
9b:17:02:6c:b1:de:3b:9f:30:a6:03:96:ab:24:bc:
99:d4:fd:ec:88:3f:ad:ee:f6:25:aa:bb:13:2b:af:
20:11:2a:8c:68:50:86:9e:aa:8e:57:17:b0:da:a0:
17:b4:3d:5f:fe:0e:0c:25:ba:4e:6f:ea:15:6f:ee:
dd:81:98:72:39:aa:4d:e5:a1:03:63:f7:82:f0:c7:
9c:78:75:49:aa:43:ac:63:f3:ad:7f:e3:db:0e:6e:
e7:a4:8e:40:ea:b2:1a:48:13:1a:2e:c0:95:a8:5b:
f1:07:6c:46:40:48:22:3d:a0:cb:6e:53:e3:c2:a3:
d4:08:dc:60:8e:30:75:ae:f8:49:48:95:00:dd:20:
2b:53:bb:07:1e:08:8a:72:c6:7b:1d:5c:4e:d0:b8:
99:f2:63:46:e3:f5:94:6c:1e:ac:0e:88:bd:f7:c5:
99:e5:b5:ae:cb:26:13:2f:35:7c:84:7d:ed:d3:1a:
a7:bf:1f:13:74:ea:0e:0b:58:84:d5:c1:cd:0d:31:
d4:a3:cf:2e:17:ef:2d:3e:a2:61:b4:bb:47:4a:ce:
38:8c:25:a2:f8:39:75:b4:aa:3a:4d:50:dd:84:e5:
18:50:3d:84:a5:af:71:27:3a:cb:34:04:e1:48:b8:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:56:FA:6C:5A:26:14:C5:62:20:C8:9F:4B:0A:3B:3A:46:F1:52
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fc:c8:4e:05:85:38:b8:a2:9f:41:e5:87:c6:9c:03:eb:7f:
dd:65:2c:4e:48:a0:c8:34:a7:43:45:b2:b5:5a:92:1b:55:f0:
97:ed:f9:76:16:49:d1:8e:d0:c1:1d:5c:1e:02:6d:f1:87:cf:
66:64:ca:3e:ec:e6:39:df:64:66:c8:01:3e:04:5e:c6:29:c8:
f6:40:c4:ac:1a:a2:4c:e9:c9:a2:90:7c:c9:c5:ce:3a:a2:c8:
53:e4:9f:60:50:48:b4:ce:20:77:16:56:e4:57:fe:48:a1:50:
92:29:a5:8b:8b:6f:b8:9a:0e:93:49:78:1c:f0:fe:fe:d6:ec:
fe:ed:68:61:8a:8c:6c:ee:1f:bb:a5:11:56:63:25:8d:da:a5:
1f:01:05:4b:e3:53:d4:bf:c3:ad:5f:f5:61:42:fe:00:32:48:
67:09:30:92:81:9d:1f:ae:a1:d4:6b:66:8f:9c:bf:27:c7:c0:
dc:b2:c2:03:92:c9:89:0d:ef:c2:4d:7d:8d:69:e2:b9:c2:b6:
b5:f7:a1:a6:84:56:cb:45:43:42:2d:03:25:03:24:57:db:06:
88:c4:25:74:af:d0:b9:05:6e:2c:1c:f2:8a:b5:23:c0:68:eb:
d3:53:33:91:49:f5:a5:86:52:e8:04:18:49:b1:4c:5a:e0:cd:
17:35:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:18 2025 by rpki-client