Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: Lgp6l8OI0i/153ZDfkG6s6XhH0ziLADXsetRALhrG/4=
Subject key identifier: F6:7B:21:57:29:4B:A6:B7:95:C4:66:6D:C7:DD:BC:7C:FD:3E:3B:B4
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0194BD176B5B8CF16128BDD728B24E3399A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 140F
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: UNUa4oFxwFdm00m5r-G61s8Ikh4.roa (hash: k9276a/1X0ewFXRF6cwjGjRo8BKQKSRBiWAxipeCeXc=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: uMKelps7kUW1NQPAVnkSX/Km4dJzeaxBM3bMVDYtjXA=)
3: nFwSDt7zXXCk1k3rMZvJ-zj3Fu0.roa (hash: g/i/k3s/MVqnbweAQkw4FIePeqK2H7kiTAvv/06+PxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:5b:8c:f1:61:28:bd:d7:28:b2:4e:33:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f67b2157294ba6b795c4666dc7ddbc7cfd3e3bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:41:ee:7e:9d:5d:9e:5e:02:97:c0:0d:05:
65:3c:4d:d4:ed:32:56:88:b6:44:2f:1b:cc:0b:b9:
e2:31:a6:99:d0:7d:57:26:ea:6e:1c:63:62:c4:9e:
68:c9:06:42:47:41:44:54:06:62:9f:88:7a:9c:cb:
0a:f9:4c:e7:01:29:95:45:61:04:a2:d8:2a:6c:ce:
2c:c1:bc:94:5a:b1:ec:88:b1:be:c8:d2:36:68:99:
33:3d:5b:91:a3:28:5c:14:69:7a:43:d8:86:8e:58:
37:a3:8a:ce:55:fe:97:2c:35:c6:8e:92:16:8c:43:
a6:b2:a0:f0:f4:1e:8c:6b:a1:29:72:91:1c:ba:8d:
bb:ae:9f:a9:4a:65:47:94:5f:e3:b1:1d:1b:b6:5b:
1e:52:a1:aa:41:d8:bc:dc:33:3b:84:ac:13:9b:a3:
01:25:6b:e4:62:82:d3:41:5e:df:31:dc:4c:e2:74:
99:fb:dc:fc:68:9e:2a:37:6c:87:11:64:37:47:6f:
23:c5:34:b4:f1:a5:6d:41:f6:5b:67:a6:2e:4a:d0:
40:a6:79:85:6d:0e:92:99:67:a5:69:34:8b:70:2a:
f7:25:90:5b:92:8d:fb:c2:66:d8:23:18:06:46:d2:
e9:be:c7:ae:61:06:5d:cc:5f:d6:c9:82:32:90:8e:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:21:57:29:4B:A6:B7:95:C4:66:6D:C7:DD:BC:7C:FD:3E:3B:B4
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:8f:17:1b:8a:70:51:a6:07:f3:40:a0:fa:73:c2:f6:a7:
de:5a:b3:92:e5:ef:38:31:64:23:b4:5c:de:f0:7d:fe:b5:46:
21:78:b4:f0:e5:f1:e2:de:17:55:6d:17:8a:2d:92:c0:72:cf:
d4:a8:12:7f:95:9d:73:6c:21:e2:5c:17:b7:19:53:9c:e4:44:
69:ae:5f:53:96:53:5c:72:ac:ec:0c:13:03:81:61:8a:a0:53:
50:c7:a8:ab:a4:e8:5f:a1:d6:a6:e2:fe:3f:29:0b:13:f9:02:
4e:27:26:a8:34:c6:de:db:62:06:a1:fa:46:ee:61:5e:9a:e5:
38:01:82:f8:12:17:9e:4d:5e:7e:67:5e:1a:a3:49:83:1f:d5:
b2:5e:40:f0:b2:f0:4e:bc:9c:41:cf:1e:97:ee:c5:29:c0:e3:
a7:3d:76:37:6c:b0:dd:72:8f:63:70:1a:97:7e:00:9b:41:7c:
fd:d1:d9:2a:f0:c5:30:6b:62:92:02:78:c0:96:3b:ea:c4:a7:
00:f4:de:19:15:f6:65:a4:80:59:a8:7c:65:36:27:95:4f:49:
68:9e:51:36:91:e1:47:49:bf:70:2f:7b:2f:ec:5a:01:c1:e0:
88:68:c9:d1:4d:84:18:2f:d3:7a:bb:cd:48:17:53:e7:9a:80:
b6:8a:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:56 2025 by rpki-client