Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: K2Z3itxB2lT0cLMKcEjf6k/MrLT/JyWlsZh300tXhFU=
Subject key identifier: FD:62:C0:B9:83:26:3B:D6:2B:39:80:33:87:B5:1F:4E:07:C0:E6:EB
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 0194BCE0A894A0A9A5D3CC70421695873DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: D1cyWB3RqRxxztpAmhWm3EIFFDODsgsDihN9B0URyt8=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:94:a0:a9:a5:d3:cc:70:42:16:95:87:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=fd62c0b983263bd62b39803387b51f4e07c0e6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:8a:ff:fd:b8:ad:30:d3:51:2b:0e:cc:ca:
c9:c2:93:04:bc:49:f5:4a:e8:22:7a:70:71:f0:0b:
17:36:e1:1b:20:6e:1f:d3:94:a9:2a:7c:a5:9b:3e:
93:d7:59:42:03:f2:d8:04:58:0c:b1:c9:11:2b:58:
b3:01:23:01:70:44:50:1c:f5:1e:bf:27:d0:6d:b4:
7b:07:75:05:80:fb:e8:d6:c5:57:70:b1:65:c3:71:
1c:5d:c8:b9:cb:03:74:5d:98:5c:a9:71:35:08:8a:
c0:d8:11:25:17:cd:35:12:6a:cd:42:2d:a2:3a:30:
55:5c:fb:c7:07:d2:ae:c8:7c:1a:33:08:59:43:c9:
4b:9d:b2:5c:ef:24:1f:d4:72:ed:e9:ef:ef:d9:16:
ff:74:9f:a2:ce:e0:51:e3:47:5e:f9:09:e7:9f:25:
69:23:35:24:7b:c7:07:c9:d4:c2:8b:29:18:6c:ef:
34:c8:66:66:6e:d9:b6:13:42:86:c5:9e:73:18:67:
02:83:4f:79:04:1e:7a:f3:9d:e9:a6:e1:c9:48:68:
b0:b0:43:73:c6:28:8a:74:5d:84:53:6b:8b:9e:a7:
4b:80:cf:4c:4f:a3:51:7c:88:94:c6:c3:30:4e:1c:
30:ae:4f:0a:b7:2e:30:d4:d9:75:3c:ad:29:df:24:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:62:C0:B9:83:26:3B:D6:2B:39:80:33:87:B5:1F:4E:07:C0:E6:EB
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:9e:da:89:49:c6:5a:d7:13:f9:f9:a0:37:a9:05:4a:8d:
89:41:c8:64:c4:3a:9a:3b:fe:8d:2a:9d:ed:75:17:7e:0f:3b:
03:a3:48:c0:7e:ea:ff:ec:f3:ee:cb:c8:00:d3:dc:59:ad:41:
38:dc:37:64:fb:20:7f:df:45:c8:a8:f9:33:86:24:2f:e8:9c:
f8:f0:d9:a0:7e:e8:7d:c5:56:1a:7d:dc:fd:11:dc:d3:d6:80:
0e:d8:d0:13:1c:5e:ef:57:68:a8:5c:94:ad:98:f4:72:32:58:
b3:75:78:11:0f:b0:a5:52:f7:6c:64:92:2d:ed:4c:64:78:34:
c3:a5:6c:44:2b:23:f7:e1:8a:9d:fe:0c:f2:e1:81:83:c3:38:
3d:31:73:f6:dd:b1:98:db:a3:36:a8:c3:2f:a8:fe:20:9c:d1:
f3:4b:4c:df:b8:b4:38:11:94:5d:0f:29:db:b7:ac:ee:f3:49:
b0:69:50:96:96:ec:63:10:56:5a:f6:55:b8:75:93:30:65:50:
7f:25:86:d7:2e:9f:ba:49:81:b5:57:ed:af:00:c0:0e:ec:26:
4c:1e:f1:3e:f3:ac:4a:3b:b8:c4:9f:a0:aa:9e:2c:f7:d1:51:
2c:9d:80:c0:d5:f0:6b:62:91:06:71:c8:df:5e:2d:82:c0:00:
fe:65:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:34 2025 by rpki-client