Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: F0f4e9G/TSeJncl72mTOgD1YpZtzM5XCUqf7PkccOl8=
Subject key identifier: 13:74:DE:93:05:E2:60:DA:30:2E:3D:A0:60:E2:34:DE:4D:FF:AD:00
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 0194BC3BDB0A438A6940CC8972EE63ECF998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 0159
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: MgJV82zKrdKYKEZ0WQ+dHQNoPurkdRLPTtC7NLdDEjs=)
2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:0a:43:8a:69:40:cc:89:72:ee:63:ec:f9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=1374de9305e260da302e3da060e234de4dffad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:68:8d:f9:8a:75:7f:5b:d9:8e:72:ff:f7:
6f:68:2f:b5:e4:e2:c8:ac:89:48:83:cc:09:48:ba:
97:6a:0d:a1:70:05:58:de:9b:a6:8f:db:cf:b2:57:
dd:1e:e5:7e:f7:cc:a2:e1:67:fb:9b:52:d3:bd:6d:
16:61:4a:86:0b:49:df:cb:e4:6d:35:ca:8c:6c:78:
d7:10:8c:99:9a:38:66:75:12:85:c1:f0:df:6e:6d:
53:5f:d0:c8:1b:81:5b:dd:f9:1c:65:5d:92:6e:43:
86:fb:a7:59:3c:57:35:6f:e8:d8:50:cb:be:50:2b:
ce:2f:30:91:e6:33:51:1d:72:1f:84:f8:e5:a7:b7:
c3:7f:22:6a:5d:0b:1c:c0:a0:5d:f0:45:f0:e9:47:
de:a2:63:61:37:6e:39:0d:79:d0:9c:ed:7b:1d:84:
ca:67:90:1e:4d:41:16:62:3f:9d:43:56:5e:a9:ef:
c7:28:3a:5b:3a:79:53:12:a4:c9:72:82:4f:73:3d:
6d:86:5c:4d:b4:bb:f0:98:1a:92:a0:a5:63:48:20:
78:ad:c1:bd:41:27:58:fd:53:e6:4d:4b:4e:bd:5d:
f5:d3:fd:42:35:95:29:b7:4b:cb:44:7d:b2:7d:d7:
41:4c:5b:8f:0a:c4:27:44:f8:55:3c:0c:7e:6a:7b:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:DE:93:05:E2:60:DA:30:2E:3D:A0:60:E2:34:DE:4D:FF:AD:00
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9e:81:f1:f1:55:3f:5d:86:79:24:8a:a1:20:9d:9f:97:6c:
1d:0d:a3:aa:e8:25:03:56:76:4d:41:04:69:20:62:93:bc:18:
d0:42:5d:4e:e5:dc:b8:68:e6:79:71:3a:29:2f:20:1f:b2:5f:
4a:a1:82:5c:0e:b8:b1:ab:cc:8f:29:d5:5e:63:ec:8e:bf:bd:
bc:e4:91:89:8b:13:5e:88:2c:c2:fa:0c:e4:2a:6a:04:2c:48:
1b:c7:e4:a1:18:78:c7:f1:0a:9a:d1:75:d6:f0:ec:cc:75:22:
0b:ff:55:f8:b9:fc:de:50:1f:7b:b1:82:ed:23:0e:9f:bc:c8:
9c:b2:bd:2e:82:a0:35:dd:90:e7:d6:8e:03:24:29:08:0b:56:
7d:28:c2:00:58:b1:d8:0d:90:69:a3:22:57:3d:73:fc:15:63:
43:5e:4e:8f:7e:f3:b6:a8:bb:f0:1e:5a:e8:87:d1:a1:e0:5d:
2a:f0:63:93:10:61:60:0b:ec:f6:ac:7c:81:6b:ca:79:bd:77:
0b:91:6e:5d:86:6b:a6:49:f7:d1:c2:34:95:ac:9d:ab:39:d1:
52:57:76:d3:11:ca:d0:d5:fc:1a:25:30:39:8f:be:b4:a6:22:
59:69:ce:30:7d:26:99:72:f5:69:c7:71:fd:78:b6:26:51:e9:
66:09:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:57:18 2025 by rpki-client