Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: gytFigK/z7V3aRVG7D3N1lQsYiiaG3VrDl65UPXgQNw=
Subject key identifier: 21:5B:15:DF:B6:3E:09:61:FB:FA:E8:D4:D5:C6:34:A1:7E:9F:76:FE
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 0194BBCE6B7CCD505464383DAAE29192F0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: U+p7qzc0gu/GyaYdLpw5BF7FuGwLR42uCmuR5Cj7JB8=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6b:7c:cd:50:54:64:38:3d:aa:e2:91:92:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=215b15dfb63e0961fbfae8d4d5c634a17e9f76fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:82:db:81:ee:fe:ec:a7:e1:1a:6d:51:1d:
01:20:d7:36:da:32:1e:ed:54:fd:7b:53:d1:e0:13:
2a:df:de:a7:2f:a0:e6:bc:57:3f:6c:c9:b6:97:c3:
f2:ae:d6:14:9e:bb:4c:1a:ec:a3:11:98:9f:a6:15:
f4:71:f2:03:78:a2:73:e0:c2:1d:16:0d:82:2c:12:
13:cb:68:c8:5e:4e:4b:04:75:73:17:41:f6:06:cd:
70:a1:83:9f:82:d0:8e:86:18:3e:ec:92:1a:1b:8c:
bd:79:6b:ab:be:da:8c:85:99:cc:4e:f9:00:33:bf:
d8:9c:76:55:9e:31:80:4b:b1:48:d5:6d:a4:7c:9a:
9c:66:8c:1a:81:2d:19:75:e6:da:e1:06:a5:dc:1b:
27:e9:85:40:ce:64:9b:21:c6:79:ea:29:92:1e:0c:
bd:d9:9a:42:f7:c7:4c:aa:8f:28:38:4c:d3:63:f8:
b0:8f:37:83:e3:62:8a:44:de:c3:8a:e0:58:2d:dc:
fd:3d:21:f9:2e:62:2f:16:79:63:ba:40:8c:f2:19:
86:4c:91:ff:c1:70:f8:74:8e:f9:ad:58:01:9a:32:
5a:ab:cd:18:5f:2b:5b:f6:b9:c6:45:eb:7c:04:d5:
41:c4:ae:55:16:51:ff:a2:fc:f4:35:6c:ba:9c:4e:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:15:DF:B6:3E:09:61:FB:FA:E8:D4:D5:C6:34:A1:7E:9F:76:FE
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:f4:65:e2:32:54:fd:9d:e8:bb:7f:fa:ef:63:63:7c:07:
fd:2d:e0:f9:89:8f:6a:61:c3:1e:6f:53:0a:12:2c:55:5a:4a:
d2:33:6f:c2:e2:64:30:27:22:ee:b0:c1:a2:25:6f:2a:7d:44:
84:49:f1:e6:07:84:8f:8a:cb:32:a0:1f:5e:e8:1f:e8:c3:04:
13:ce:67:bc:5e:c3:22:38:b7:54:07:44:56:fc:89:b9:30:05:
5d:d9:ab:16:a4:6c:11:58:a1:40:2b:e7:ea:30:ca:fa:96:48:
92:9e:74:b6:9d:4a:ec:52:77:1d:84:ca:61:b3:14:64:a2:c4:
9d:3f:03:8a:b7:3b:b8:01:d2:ba:4b:ef:b5:a8:5f:b4:cd:5b:
80:d0:cb:64:af:83:e2:70:8e:72:ce:f4:ef:8c:59:40:53:2b:
c1:ab:72:d3:e0:48:a5:d3:cd:94:e0:95:8a:37:32:69:f5:91:
24:f0:d9:5b:4b:48:84:ef:95:83:37:10:6d:95:49:bd:95:a9:
1c:f5:26:b4:0d:2f:69:51:65:55:57:7e:f2:f4:bc:de:1b:b9:
96:4b:b1:1d:61:75:61:3a:18:06:40:6c:d6:b5:21:1d:05:ed:
73:8a:79:4e:98:d8:dc:14:55:fc:e3:40:46:65:c9:27:6b:06:
65:56:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:47 2025 by rpki-client