Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: zMCggh9uPLTbMKiSBO+vEMRXpbJ3ylBeeMJ0lzgbFNQ=
Subject key identifier: F5:DD:02:4F:2D:20:EC:3E:3B:FE:E1:08:90:B3:3B:25:FD:F5:33:0A
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 0194BC728DE72E5AB1160571BF27F9EB668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: PnUuf9FQ7YAX6gRVGh8cTDwWtCVp0BTJGoh/ysjPjaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:e7:2e:5a:b1:16:05:71:bf:27:f9:eb:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=f5dd024f2d20ec3e3bfee10890b33b25fdf5330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:70:bf:21:5e:8d:d2:09:c8:be:54:85:02:
70:ca:cb:0c:a1:8b:6d:ea:a7:3d:3b:95:8c:8d:f8:
6d:46:dc:8b:e1:a4:24:34:e6:c0:4c:49:1b:55:20:
5a:34:69:fe:ba:8f:b8:90:6b:0d:e6:fe:ba:71:32:
d5:f1:26:16:68:e5:03:75:3b:9e:41:ab:58:33:7f:
37:27:3d:ea:f5:a1:b6:7e:b0:a5:77:bb:42:61:a5:
b0:05:67:7f:d2:b6:a8:28:6b:f1:f3:9a:67:61:63:
e6:51:57:6e:46:6e:53:d9:8c:52:b7:a2:90:96:93:
a4:85:e9:f2:78:36:d3:88:ee:b0:d0:93:e8:eb:3c:
0c:e6:fd:c5:37:53:25:d1:d9:5e:07:c5:11:f4:9d:
c5:eb:23:fe:2b:d1:73:02:9a:bb:1e:12:84:c3:85:
95:2c:73:a4:e5:8f:c2:5f:d6:af:77:40:39:1b:ad:
0a:9c:18:49:46:13:a0:7f:ec:44:ad:9d:bc:03:94:
28:8c:6e:ed:17:2f:fb:e8:07:aa:cd:3b:6d:8b:1d:
23:2e:f7:d9:7c:20:94:a0:84:72:24:7d:16:3c:6e:
f7:33:0e:ed:bb:2f:cf:b1:16:9b:9a:9f:95:57:15:
b9:65:63:48:b5:ca:91:be:7e:de:e4:2d:ae:65:84:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:02:4F:2D:20:EC:3E:3B:FE:E1:08:90:B3:3B:25:FD:F5:33:0A
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c0:e0:03:7e:ea:14:ad:68:7f:ca:33:51:45:85:42:ce:fa:
40:36:66:e8:cb:f6:aa:09:91:d3:da:af:14:a1:54:d6:f8:1d:
03:e5:ee:ca:f8:ba:a6:4d:68:01:b9:8e:22:84:8d:71:22:9e:
26:28:8a:6d:f3:1a:f4:a0:ae:ef:8e:7a:d2:45:f5:53:4d:1c:
fc:70:9c:91:7d:bc:01:e1:ac:d8:8f:e4:d9:ba:d4:c6:d6:3c:
b6:f0:30:02:ad:bb:90:81:80:da:99:38:fa:49:b7:3e:2c:e6:
4d:c6:9b:4b:e9:2a:fd:42:1d:e6:fe:46:20:c2:ea:92:0b:fb:
b7:bf:80:1f:b8:a6:8e:a7:e2:ca:54:e4:7e:43:06:9f:d8:7e:
2f:79:58:ea:2d:30:1a:b5:82:69:3d:ad:ba:65:cd:3b:e6:a5:
9d:fd:59:e4:dd:f1:db:2d:71:77:a9:cb:78:e6:fb:ce:af:ee:
ca:60:39:c1:44:96:04:f2:9a:3d:d3:46:cd:89:69:b5:9b:6a:
9a:a0:d1:f9:8e:cf:b4:aa:9c:fe:fd:e2:6b:26:ce:38:8d:42:
04:81:bb:fe:59:7f:20:3c:a8:e3:3c:fa:35:ed:7c:ca:9c:f6:
dd:00:24:ca:a6:81:22:0e:ca:79:06:54:fc:92:2d:04:a5:6c:
59:e0:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client