Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 3yLnuBAzaMhV/w+rOeCxqqAkgUZt1ev/fnr3KC0fMnQ=
Subject key identifier: 92:F0:6F:78:38:7A:F1:4A:EB:6E:F6:23:8A:C8:BD:46:5F:7B:B9:A4
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 0194BD4E8D2FE0B90549A89FC7348B879EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0C55
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: Yit4l5iiLlEymAQrD4EHLfqTNZkjE/wcaetZWDqtgNw=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:2f:e0:b9:05:49:a8:9f:c7:34:8b:87:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=92f06f78387af14aeb6ef6238ac8bd465f7bb9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:ea:7c:11:a4:71:b5:f5:b2:1e:89:46:b4:
fe:6b:f3:d3:67:83:4f:2a:e4:81:94:ea:bf:e7:19:
00:c7:1f:78:b8:02:d6:b2:26:a7:98:18:2a:cb:7b:
1a:62:d3:56:a5:8a:85:c2:50:dd:61:37:56:7b:9a:
fb:de:44:65:52:73:2c:0f:22:1c:1e:82:a8:93:07:
0c:4c:67:c3:b8:36:24:30:2d:51:80:24:64:39:14:
6d:26:26:58:60:1a:8b:9f:49:b6:25:85:e4:47:fc:
d1:9c:60:23:55:dc:4b:53:51:4d:4e:e0:e2:7c:7f:
ea:bb:cb:d5:10:fb:4c:60:de:9e:14:0b:0e:9a:a8:
b9:60:d5:53:69:cb:66:e0:47:f7:cc:7a:53:e8:b3:
7d:15:d5:cb:70:a2:3a:c9:31:9b:57:a1:43:d9:b8:
74:b6:9d:e7:b2:de:7d:ca:da:fa:bd:13:42:10:79:
be:a6:60:c1:05:f9:2d:cb:4f:a2:b5:8e:60:47:02:
65:2a:b3:e1:e9:c6:84:4f:ea:6a:36:ff:3a:d5:9d:
f4:b3:13:17:a0:4d:ab:eb:70:15:93:cf:a8:c6:a3:
fc:5a:4c:a0:b1:37:f8:10:5f:e1:64:be:14:e3:61:
3c:36:68:db:c7:d5:c4:7f:b9:26:05:bc:5c:ee:9d:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:6F:78:38:7A:F1:4A:EB:6E:F6:23:8A:C8:BD:46:5F:7B:B9:A4
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bb:1b:ae:8a:4f:73:c6:3a:c4:2d:f3:07:16:b5:89:92:79:
84:e4:ff:0e:ab:ce:ec:31:49:21:75:16:99:7b:0f:b1:87:8b:
b4:58:8b:69:a8:61:fa:fa:cc:b7:6c:71:c9:b3:26:37:bd:7a:
03:82:98:f1:d4:06:21:37:98:40:02:93:08:09:92:2d:92:3d:
00:84:cd:35:f0:d4:2d:e4:47:e4:35:47:20:96:ed:7d:29:89:
07:1c:2a:5a:6f:7c:3c:8d:01:45:45:e4:25:57:30:e7:cc:47:
6e:28:01:2e:d8:43:01:3d:c9:93:60:1d:50:30:fe:9d:fb:bd:
4b:0f:78:0c:6b:82:5f:0d:a8:38:07:84:9c:ea:19:49:a7:8c:
94:64:67:54:67:18:42:e3:58:7c:86:cb:59:63:ec:75:83:45:
8d:b7:c8:7e:1f:c5:03:94:bf:4d:46:39:0a:66:00:c1:3d:9b:
cc:a7:6e:1a:8e:1b:0a:9c:27:ed:4e:2f:27:e9:c0:7d:50:eb:
15:c6:2e:e3:90:65:7d:07:5b:3e:18:2d:4c:f6:10:b1:3d:3f:
18:01:3a:d3:7d:14:e6:7b:0f:76:6f:2e:8a:58:f0:9c:0d:cd:
98:1b:c5:0a:fe:c2:b9:67:23:71:98:ce:b0:a9:93:a7:0b:91:
75:1b:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:22 2025 by rpki-client