Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: HqhsEdlBcBWfnHd1Jxt22acudQ8XqAzxKHHDo1dRGzQ=
Subject key identifier: 98:58:2E:3B:17:88:BA:1D:85:3C:1E:5F:AE:76:D1:BB:12:A3:AE:DB
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0194BD4E92FDB85F8D2C2E2C2EA7108BE665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: wdgFhMdCOnIrf2uZS8lTFC4V9kh8Cj9TLmgWIVzyBzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:fd:b8:5f:8d:2c:2e:2c:2e:a7:10:8b:e6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=98582e3b1788ba1d853c1e5fae76d1bb12a3aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:23:b6:8e:3d:a2:76:74:96:d5:c5:09:7c:
6c:6d:ec:d9:ee:b3:96:fb:fb:ea:9d:1d:8c:05:63:
04:35:1f:5a:bb:b3:e9:73:cf:3d:ab:fe:49:b1:e9:
57:01:67:ca:24:67:41:14:51:06:4a:e2:4f:b3:10:
55:aa:b4:50:45:a3:51:89:9c:0d:51:60:d0:bf:c1:
b1:21:2c:33:a5:38:00:1b:87:c4:fc:a3:05:61:11:
d3:35:a6:83:b8:fb:1e:80:cb:e2:ed:02:24:37:3d:
35:82:17:fe:c7:ad:be:54:3d:91:9e:21:9b:73:77:
0c:9d:86:ad:a5:37:e2:4d:12:96:5c:27:97:b9:f7:
8e:44:75:e5:c3:f9:7c:80:c4:bd:0c:04:1b:31:5a:
5b:46:a5:23:8d:65:ab:32:a9:dd:41:d5:dc:af:80:
fe:17:9f:82:f6:a2:27:d1:9e:a8:48:2d:90:28:37:
6e:62:73:19:82:60:7c:50:7e:ac:de:52:de:9b:b8:
8e:d5:c7:57:5c:ad:b9:9d:09:ea:af:07:37:c1:c1:
cf:be:b5:a5:c0:34:8d:50:93:2a:16:84:0b:31:b7:
74:ec:72:2e:66:36:e1:06:53:7f:2e:a5:37:df:b2:
7d:b7:6b:dd:01:72:b5:1d:d2:38:8d:19:c8:dd:df:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:2E:3B:17:88:BA:1D:85:3C:1E:5F:AE:76:D1:BB:12:A3:AE:DB
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:4b:a1:dd:23:9a:17:96:18:f5:ce:14:61:b0:33:86:5f:
3a:a7:bb:78:35:4a:01:99:db:ad:b6:fd:93:60:28:cd:d2:ce:
45:58:c0:f9:54:1d:b0:ce:3c:29:41:16:09:0b:25:b2:97:fc:
33:2b:58:ca:c5:97:5b:af:cf:38:fd:e9:2e:20:9f:76:e3:de:
8d:63:da:41:85:32:ae:b6:1c:1d:e3:64:fd:36:65:07:fd:8c:
4e:89:66:91:91:a6:9d:95:be:11:86:b7:9f:27:4d:3c:f5:87:
04:e4:7a:2c:f0:6a:5e:1c:d9:dd:30:df:74:49:6e:14:0e:39:
38:47:9c:7c:29:9e:6f:60:db:e4:13:33:bb:b1:4f:28:ff:52:
27:75:14:7e:b2:1f:45:2c:39:71:eb:b9:f4:e9:70:b1:40:b3:
69:4e:58:75:8a:6f:dd:d5:5f:b1:2d:ef:72:6e:39:20:de:e6:
a5:e0:0b:5c:9e:93:b1:c0:e3:15:b3:d9:e6:3d:da:0d:d8:65:
a4:a7:36:aa:2a:07:b1:fa:08:97:0c:60:08:c8:45:4d:7f:79:
52:a3:03:33:ca:97:c9:26:34:a1:b0:d0:8a:e4:14:5e:56:72:
a4:ab:51:3a:57:93:c1:92:f1:c2:8d:a2:b3:3f:b9:45:90:57:
3d:f0:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:08 2025 by rpki-client