Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
File: jNFQ_x-81CqT603fQ8pxx748cog.mft (raw, json)
Hash identifier: V6f0nAaNg/GxiJf1AcNqyvo2XLWJQ9xyBfy0X+a/mKo=
Subject key identifier: 6F:66:23:DB:3B:4B:E4:E5:C3:BC:9A:66:E9:14:65:48:51:AA:38:F0
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Certificate issuer: /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial: 0194BD4E6692EEDDCC706940CB89551C0C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
Manifest number: 0434
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa (hash: TxbKQ6YqJPrLysV+NWU+TpSYoKbOqzVVz5RnT6KXSRE=)
2: jNFQ_x-81CqT603fQ8pxx748cog.crl (hash: eorybrqnF4+gHFMdsXRXXDOhQfXohPvN/xsTsJ3ovxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:92:ee:dd:cc:70:69:40:cb:89:55:1c:0c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=6f6623db3b4be4e5c3bc9a66e914654851aa38f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:80:86:73:85:e3:39:fc:f3:ff:62:87:2f:
9f:ee:10:7b:78:f0:44:e1:43:fb:8e:22:1b:ca:35:
3f:58:5f:3a:de:29:22:2b:9f:dc:d5:ec:6f:48:1e:
54:f1:31:f1:29:a5:68:af:50:62:b2:3e:42:0c:2c:
0d:53:d8:a7:1a:76:30:f4:32:b5:05:72:82:fb:2f:
24:3f:72:48:6e:46:ec:3b:05:61:39:79:ff:d6:fe:
ad:b1:89:be:16:f1:77:28:72:a5:28:ed:aa:16:7f:
13:bd:81:e4:a4:61:a7:4a:b0:62:94:b9:01:90:62:
5c:60:86:ef:07:76:70:df:51:cc:62:19:6e:9d:58:
dc:b0:09:1d:10:b0:43:e8:f8:71:ca:24:cc:f8:39:
fa:ca:77:45:c1:67:f1:f0:07:3d:a9:e8:61:8f:7a:
ac:d8:5d:29:a4:81:25:ac:79:ff:8b:2d:9f:68:8a:
6b:14:4a:4e:64:ac:03:97:89:13:ab:dd:80:e7:d5:
fc:4d:7b:3b:c8:42:e0:03:a6:a4:ca:f4:58:81:b1:
16:d2:b4:e7:81:20:ba:5e:13:ec:87:2a:ff:8c:fc:
d4:ef:8b:fe:47:ec:e4:ff:84:f8:b2:20:f4:c2:5c:
ab:70:fe:1a:8c:ae:4f:87:8b:62:12:58:23:95:33:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:23:DB:3B:4B:E4:E5:C3:BC:9A:66:E9:14:65:48:51:AA:38:F0
X509v3 Authority Key Identifier:
keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9a:29:03:a3:97:c6:fd:10:ef:39:80:f7:c3:44:70:5b:de:
e9:ab:e2:77:af:82:2e:f1:5e:8a:7e:57:39:d5:39:04:02:13:
73:3f:77:09:b1:f1:59:6b:a8:0f:b2:9f:db:13:0c:f8:db:7e:
0e:b3:a3:7a:0c:50:59:ba:77:46:fd:e0:f3:97:3c:25:20:07:
3e:c3:ee:ad:c6:5c:66:d0:0f:67:1e:7b:73:a7:cb:f8:c7:a3:
81:03:f8:95:74:12:b9:d4:20:89:6a:15:9a:27:79:ef:68:bc:
1c:b2:f9:be:68:00:64:1e:24:80:92:e6:33:e6:41:74:fe:bb:
94:9f:4d:22:48:3b:df:95:ef:02:80:45:d4:17:d5:53:c0:c3:
89:a5:f0:ea:b8:53:5e:ce:1a:1f:8b:b5:bd:fb:46:16:1d:eb:
3b:a5:64:ff:16:53:49:5c:4c:21:89:e9:0e:01:0a:29:a4:66:
e3:bc:25:29:d2:7c:8a:cd:f6:54:d3:1e:91:7c:d2:6d:44:5e:
a6:ad:db:40:8e:36:9f:40:26:39:15:d8:99:66:cf:e3:a7:77:
2e:9f:78:97:fb:96:f0:78:67:d4:7a:26:6f:81:f8:32:58:b6:
ae:45:07:f6:15:99:fe:a8:93:82:f7:b0:98:df:4f:71:a2:44:
9b:c2:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:06 2025 by rpki-client