Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier: CZINxzseIhFLtD07NOnhhU6+WElNUk7gJQN5MUe4F8Q=
Subject key identifier: A2:2D:E9:7E:33:0D:59:FA:FE:B9:7C:2A:10:4E:2F:77:F5:00:F3:DA
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial: 0194BD858ED85562B22F31644902C723D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: YFrqFwk8eFBo9XcKdK241bRgPty/qEDFaw5Zj/5Wny0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:d8:55:62:b2:2f:31:64:49:02:c7:23:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=a22de97e330d59fafeb97c2a104e2f77f500f3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:80:fe:20:bb:c0:7c:18:e2:02:6c:24:55:
f2:66:08:9f:57:e9:d1:16:9e:72:29:66:b9:68:2e:
ba:c8:3f:cc:60:5a:be:04:0f:4f:eb:92:e8:3b:9b:
a9:dd:08:19:7e:14:48:06:21:60:d1:69:d2:be:43:
f9:7b:bb:1f:6a:ba:96:5d:b1:15:d6:09:63:df:3f:
16:2b:c7:aa:42:1f:1b:0a:18:ec:c6:6e:0c:45:4e:
26:0a:ef:64:96:41:d8:0b:7a:6a:fe:6b:59:dc:54:
ad:50:e2:0b:7d:60:e2:64:8d:b9:34:89:8d:c5:27:
74:dd:5b:75:75:f3:3d:7a:3b:6f:04:c8:de:1c:33:
46:a7:7a:07:4f:9d:87:77:16:b1:31:4e:bb:b2:16:
76:0c:86:48:67:98:21:bc:69:99:e6:8b:aa:8d:0b:
89:96:93:10:cb:89:52:e5:88:ac:6e:b0:8b:51:fe:
18:e1:c6:3f:be:15:20:10:35:62:51:ec:f0:14:ad:
f5:43:d4:4d:f7:d2:dc:36:e2:36:d4:b4:f7:4d:84:
a6:66:e2:75:73:da:e7:cf:5d:97:82:1c:1e:ec:3c:
d2:8e:ac:f1:1e:8c:0e:5b:3f:6d:67:f0:f0:1f:18:
4c:ac:16:e1:7c:4a:03:bf:e1:ef:de:12:dd:ee:49:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2D:E9:7E:33:0D:59:FA:FE:B9:7C:2A:10:4E:2F:77:F5:00:F3:DA
X509v3 Authority Key Identifier:
keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:d4:73:90:51:20:32:09:06:a5:d1:5c:41:8b:ec:d2:c4:
4b:00:4b:d9:2d:24:15:57:09:87:5c:66:42:e5:ff:d3:87:6d:
17:31:b4:af:3a:a2:78:80:28:99:81:36:71:cf:66:28:ae:5a:
ef:3a:1d:8b:89:cc:09:38:6d:5e:5e:25:a7:78:dc:21:b6:38:
d6:f5:c2:c9:d6:54:9b:6a:95:00:99:23:92:c6:4e:91:1c:7b:
02:1f:d8:ae:ae:6d:28:94:95:18:ca:01:7d:38:b5:10:5f:c0:
a5:f7:ce:93:f6:0d:9d:9c:85:5c:24:40:a5:fe:4c:a9:bf:78:
bf:e0:bb:7c:3f:3e:58:3a:61:62:74:58:22:a8:eb:67:27:db:
ba:d1:ae:44:51:cb:2c:23:9f:76:5f:9f:44:a6:0b:e6:05:d0:
1c:24:45:fc:d8:25:b9:44:7b:0b:4a:5f:4f:17:95:e1:9b:98:
88:e2:3d:ca:21:0b:49:f8:21:13:97:8a:49:cd:df:36:86:59:
71:81:8c:d9:e1:3a:57:cd:3b:f8:eb:dc:b4:1e:b1:90:ee:d1:
40:48:fd:ca:79:ca:06:27:64:5a:a5:98:e0:f8:91:1d:d6:54:
d5:0b:b8:95:74:bd:7c:6c:fc:08:bf:51:b3:d0:3d:f3:38:91:
c4:a2:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:50 2025 by rpki-client