Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: moKEgZo2muVwNtQwGIib90NuGnNZK7f61AwV2A7vhd8=
Subject key identifier: FE:9F:3E:2F:F3:A2:D8:DD:94:92:C2:4D:4B:A9:F2:2D:ED:4E:3F:AC
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 0194BC732CD45F914B0E57D2308BB200D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:52 +0000
Manifest this update: Fri 31 Jan 2025 13:00:52 +0000
Manifest next update: Sat 01 Feb 2025 13:00:52 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: QiJDfqc+gXymU2RNjthgM6mibinZranq+c5lh/pXnCA=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2c:d4:5f:91:4b:0e:57:d2:30:8b:b2:00:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 31 13:00:52 2025 GMT
Not After : Feb 1 13:00:52 2025 GMT
Subject: CN=fe9f3e2ff3a2d8dd9492c24d4ba9f22ded4e3fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:a3:a0:d7:9f:71:db:2c:1d:2b:38:02:0a:
b2:0e:34:30:e6:70:69:21:60:06:b8:d5:9a:9d:9a:
fb:99:c0:76:9e:a1:f1:2c:8e:82:d9:d6:fd:73:2f:
14:55:12:29:b1:bb:ce:56:33:b7:72:16:1f:97:6e:
e0:64:e6:98:bd:4f:23:1f:d8:4c:7c:c9:27:12:8a:
d7:3a:d2:c0:8f:b3:08:c4:2b:86:7e:d9:18:ab:51:
5e:eb:b1:60:e3:1f:68:86:35:a9:cd:21:d5:7a:80:
1c:91:fb:b0:3c:81:31:47:ee:cc:11:32:b4:4f:6a:
ff:e4:bf:11:22:a7:fa:dd:c4:92:2e:f1:35:ab:26:
4a:3d:a1:8c:b8:87:c4:96:ca:46:33:9d:e6:28:4e:
f5:a7:72:34:e3:b2:e0:fd:70:1b:ab:f3:7c:e7:14:
50:04:9a:3b:6b:a9:19:b0:99:4e:3a:17:8b:17:b5:
bf:bd:ba:9b:89:f5:b9:57:a7:24:59:74:6d:13:b3:
e1:ed:fa:a2:c0:86:fb:b7:aa:a1:17:4d:57:9d:5a:
d3:14:47:71:7e:8b:00:62:6e:7f:dd:42:aa:53:3a:
c2:90:db:c8:16:73:bb:59:7a:9c:4c:66:aa:d1:9d:
53:8a:c1:48:ee:95:d0:21:41:26:5e:14:76:1c:7c:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:3E:2F:F3:A2:D8:DD:94:92:C2:4D:4B:A9:F2:2D:ED:4E:3F:AC
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:94:e9:e5:72:3c:fb:54:41:8f:44:86:67:d3:46:11:da:54:
67:a5:24:7c:bc:83:75:1e:bc:85:4b:43:03:90:db:1d:01:33:
7b:d1:ee:05:ce:a0:18:11:a6:95:7f:82:e3:62:10:4d:3b:91:
6b:3c:dd:6e:68:6f:a0:3e:35:9a:d0:5e:a8:f1:02:c4:29:e2:
9b:17:46:3d:50:e6:00:72:3b:4c:39:99:0d:6f:c9:49:04:26:
24:f4:28:82:96:09:3d:fe:45:47:c1:6b:14:a1:7f:31:c6:9b:
33:b6:ea:25:b0:43:68:29:63:75:5a:db:4a:27:f4:83:90:ab:
46:39:3a:68:80:34:34:a9:ef:de:c0:49:b9:09:8b:90:af:11:
e1:19:ee:6a:7e:c9:a5:5d:dd:7e:e2:53:64:33:42:1c:bb:97:
0c:4a:c5:80:da:af:5b:82:9a:df:05:e7:1e:7f:b1:56:33:01:
88:77:d2:28:93:40:37:bb:0f:56:c9:ed:9b:5b:9c:15:1a:27:
7e:dc:d3:07:93:80:50:5b:76:de:37:61:c9:51:c2:98:c1:f1:
ba:4e:47:bf:83:9d:6d:50:96:cb:89:8f:45:c0:a0:c7:ed:a5:
e3:74:1a:60:4f:0f:c5:70:d3:7d:b9:ac:cf:e9:99:44:02:9a:
48:0e:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:53:58 2025 by rpki-client