Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: sj1+4E9eczF4e30WX2cM5DrtPkY6/yyIb9wZkbahuqw=
Subject key identifier: EF:88:90:81:D1:7D:80:E9:18:5A:FE:6D:A9:46:15:C4:C4:4B:77:A6
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 0194BC04B4815373C01523745D57D3F0C8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: fy084ZrOp66kTVC1C6LX2Dqskm4Cnlm01XHMzMOmziU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:81:53:73:c0:15:23:74:5d:57:d3:f0:c8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=ef889081d17d80e9185afe6da94615c4c44b77a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:28:b6:1f:c5:c6:39:62:da:e2:5d:69:73:
26:97:02:25:68:d1:32:4c:a4:33:98:8b:bf:8d:c9:
a7:09:5d:53:b4:3f:3c:55:9e:47:45:b8:03:19:72:
56:d1:88:05:b8:24:60:ae:51:05:64:ea:d1:5d:04:
c7:72:2d:fd:79:99:ec:24:d7:20:9b:23:08:a2:94:
94:0c:fd:53:db:eb:c4:f2:e4:b2:27:7a:5a:4c:76:
c8:5a:3a:b2:6b:d2:5b:09:3c:63:c7:4e:71:6e:de:
17:1d:c4:b1:8e:91:34:e1:81:be:07:9d:34:da:7d:
09:32:c2:c3:bb:93:28:dd:2a:b6:f2:11:53:57:dd:
1a:00:fb:60:b9:1b:f4:63:8f:c6:59:b4:9e:f7:95:
3b:44:21:9b:e6:3e:eb:e1:a0:bf:53:43:d3:eb:87:
eb:d9:d2:dc:04:c1:30:58:a2:f8:ec:93:fd:81:25:
f2:26:8b:1c:2a:e5:71:98:7f:84:7b:3a:16:1e:54:
d8:23:fb:80:a6:33:09:23:bd:ef:c1:42:20:c1:5c:
c0:79:c8:25:a8:97:03:25:41:31:6c:09:e9:89:37:
4d:69:9d:0f:0c:4d:ac:a7:24:b0:28:6c:e4:f0:5b:
ac:48:71:87:67:73:56:7a:5d:4b:82:2c:95:64:9a:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:90:81:D1:7D:80:E9:18:5A:FE:6D:A9:46:15:C4:C4:4B:77:A6
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a3:ba:d6:f6:fc:0c:82:8c:81:9b:f9:3d:a5:70:ce:3f:6b:
a5:1c:13:04:51:f2:02:85:a4:04:84:96:01:f0:ab:48:90:b1:
19:a0:40:60:15:9d:8a:8e:59:84:6a:0f:24:4f:a8:ed:d3:77:
0b:05:79:86:a5:41:f6:1c:b3:ee:56:b2:e1:53:13:54:c3:11:
bb:fb:a1:9a:da:6d:6b:02:04:88:d9:18:b4:7f:2d:f6:0d:4d:
3a:7a:cc:8f:72:17:f8:55:15:5d:af:8b:57:9d:f9:80:aa:f9:
fc:af:da:ac:ef:3f:98:6f:01:2a:d5:e3:1c:d2:7a:67:1f:1d:
e4:56:da:66:e6:cd:9b:b0:0b:fb:b4:66:5b:7c:b2:d4:91:a7:
6c:3e:aa:87:94:c8:f9:21:ff:bc:b2:a3:78:e6:5c:85:54:04:
5e:fa:40:f5:7a:89:ec:19:e2:f1:24:2f:1f:3d:6b:7a:c0:2d:
15:95:71:e9:87:54:58:e9:31:7e:53:2c:bc:83:9a:52:f7:d1:
6e:6c:fb:c7:83:32:e7:85:c9:0c:5e:20:c5:2a:8b:79:30:05:
d0:63:86:de:b5:02:b8:07:61:a7:89:fc:19:d5:b9:46:e0:a1:
46:95:c9:c9:e6:1b:2d:c0:b3:4d:7c:ba:f0:97:72:2d:fd:e2:
93:ab:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client