Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: w+nXgepgV1H6EAQe+7fhPRrE/FOgTjboHF1x4Jiu0hM=
Subject key identifier: 8E:1B:09:75:F9:0B:C1:6E:B9:CC:D4:A8:06:71:9F:0C:62:66:04:E3
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0194BD4EC714035E4F94A7246B4FC722E084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 10C1
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: /p1cgx1riixVBwANA1ivPg5URgb+ufEG+QKH5SqR6IY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c7:14:03:5e:4f:94:a7:24:6b:4f:c7:22:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=8e1b0975f90bc16eb9ccd4a806719f0c626604e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:c2:10:23:fd:d4:ec:3b:fb:ad:1d:04:be:
16:75:99:ae:95:cc:71:ca:34:94:0b:0d:e6:ad:12:
8c:5c:35:b3:67:07:1c:c2:17:90:59:cc:4a:20:40:
9d:d7:e2:48:27:dd:80:b5:28:8e:52:88:ad:0e:bd:
43:0f:80:d2:7b:ec:de:13:06:9c:9f:da:d8:91:95:
6c:04:55:85:6d:40:03:a4:37:ca:23:3b:7b:d2:8d:
24:01:ec:c5:7c:f2:c3:13:d9:eb:42:6b:dd:5b:46:
6c:1d:f3:f1:d8:dd:40:cb:4f:0c:47:9a:6f:fe:21:
62:25:50:6b:9a:5a:7c:02:95:67:62:1b:37:ac:bc:
9b:21:82:dd:9e:63:09:c0:bb:7d:12:34:32:b7:4d:
ae:25:12:a3:95:8b:ca:8d:4c:f5:34:e8:37:b1:10:
fb:76:89:b7:4e:f4:88:c7:69:94:8c:b6:2f:89:0a:
29:01:9b:d4:75:9b:4e:4c:3a:56:35:7c:48:9a:49:
81:5e:ed:1a:e9:56:d4:08:b5:b7:77:2f:d7:34:e5:
62:94:62:ec:4f:80:55:64:ad:21:da:09:c7:ac:d1:
fa:90:e5:93:74:7c:b2:a5:03:32:a4:1e:e2:60:11:
a1:f5:8f:83:34:5c:1e:b6:e0:5a:6c:ab:28:98:63:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:09:75:F9:0B:C1:6E:B9:CC:D4:A8:06:71:9F:0C:62:66:04:E3
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:b8:d5:dc:df:04:23:6b:c9:f9:b6:bf:76:0c:af:d0:a9:
0e:6d:81:85:8d:34:64:37:3a:e8:61:fa:ba:2f:17:0c:e4:bc:
70:51:16:5e:1c:79:f4:25:58:a5:03:1e:76:3a:76:f0:d0:f7:
63:5f:a2:a4:db:b8:94:9e:7a:b0:62:06:c3:c9:38:f6:67:8a:
a3:d3:61:4e:3c:da:40:3b:0b:0a:24:d3:a6:81:d7:0b:4d:66:
57:d2:62:99:7d:8e:3c:6b:6d:35:b9:2c:82:ca:c7:e9:27:0e:
c8:71:7c:ca:07:21:6d:e3:4f:b2:8c:b4:db:ce:0e:b1:2d:9b:
52:e9:35:3f:8f:f3:31:c1:18:87:2b:e6:e0:13:05:9a:90:0a:
77:ff:2b:e9:f3:df:ee:19:fc:0f:e0:ae:99:1b:d0:27:8a:5f:
87:a3:65:79:8c:09:e2:ca:cc:59:a6:2d:af:3f:54:96:5b:e5:
a6:92:2c:ae:21:cd:7f:ef:eb:d6:49:70:42:ff:0b:55:35:45:
16:b5:80:98:2a:00:fa:95:19:5a:13:47:00:aa:99:36:ef:06:
27:f2:dc:ce:af:62:6b:8b:33:1d:61:1c:1b:76:7d:bd:f8:15:
b3:b9:d3:ef:c4:e1:86:b4:d6:64:87:72:53:aa:3a:36:ab:23:
a8:e9:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client