Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: 8zTMMSV4n+X6/0cRhCfIeWrYXm6ZtsRS4Rvv5+GiX7s=
Subject key identifier: BA:E9:EC:FE:45:3D:FA:81:E6:5E:D2:59:B5:FA:02:62:4B:08:F0:5E
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 0194BD858066A9D7F024F5DAF6BF0DDFFDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: G9ZE7eAyr9dm1UpsiMBlORYgqF8.roa (hash: DUNTtHQq08Gs+Evq8uiJDfHkuc3/b3Ha6zCK06L0e5I=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: V2FEWw8tCLKzhpNt9kh7Xfh24gg1WzS+exysMNJMfeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:80:66:a9:d7:f0:24:f5:da:f6:bf:0d:df:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=bae9ecfe453dfa81e65ed259b5fa02624b08f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:54:80:49:09:05:04:78:4b:dd:99:3e:72:
30:a7:57:bc:f5:ff:33:ab:ef:df:4b:b8:38:82:d1:
e7:4d:db:70:74:4a:c1:24:41:df:9f:6d:f4:25:80:
91:c0:93:d2:13:66:14:4f:5b:7f:34:35:16:ab:fd:
71:98:a7:09:07:be:75:c6:8f:78:e4:06:17:c1:d1:
32:1c:58:72:ec:dc:85:29:c4:30:9e:33:4d:c1:03:
bb:21:99:db:e5:6b:61:9e:cb:ba:17:bd:8f:73:5c:
b6:b8:ae:7f:ef:25:97:db:f2:96:77:23:71:b9:d4:
9f:a2:b5:92:75:69:e6:c0:34:ea:48:b6:13:d5:60:
ce:15:44:70:2d:30:01:72:85:9a:d9:03:3f:97:a3:
f6:5a:73:e2:43:58:44:b2:21:29:9e:2a:a7:a9:ff:
5c:98:96:13:19:93:1e:7c:5d:1f:c7:55:2f:2a:16:
81:3a:86:9f:33:a4:d9:e5:a4:e4:08:e5:91:e1:cb:
ee:93:96:7f:a8:72:ee:20:b0:f6:24:02:44:5d:93:
64:be:7e:d5:74:0d:a0:e2:b1:0f:58:05:35:aa:19:
c9:63:38:c2:f8:3c:de:d3:22:5b:41:f9:10:7d:09:
3d:57:0b:f9:92:b4:3b:0f:a8:b5:3f:06:b8:6f:66:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:EC:FE:45:3D:FA:81:E6:5E:D2:59:B5:FA:02:62:4B:08:F0:5E
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:e5:5a:9a:15:54:44:05:6d:ae:ab:42:aa:52:51:f7:d4:
73:f7:3a:74:9c:6d:fd:71:b7:31:61:50:19:fb:06:da:87:6c:
f6:6f:91:b4:7e:4c:9d:3a:b6:45:6a:35:7d:45:8b:61:f0:01:
44:d1:7c:7d:63:7b:ef:91:80:36:59:b3:3b:9a:0b:00:3b:97:
56:61:e5:ce:d5:77:03:7b:0a:e3:48:73:b6:75:e6:1d:35:09:
26:5c:10:97:b0:14:2c:16:7f:2c:e3:71:25:8b:94:79:36:9c:
4c:4f:68:95:f2:b0:13:98:99:dc:ca:30:99:ba:68:0a:13:fa:
f0:de:dd:aa:6a:ad:ca:6d:b1:b1:67:a5:89:56:db:1d:88:70:
e5:8b:a5:20:50:57:e3:7e:5b:55:42:c8:f5:e4:90:f7:29:6a:
4e:14:89:51:72:e5:5d:63:ca:34:f2:30:4f:1b:76:26:ab:18:
75:3b:ff:ee:bc:ff:0b:ee:a4:fe:59:43:c0:40:d8:2d:30:2c:
61:b2:61:d1:ff:c4:a5:12:e7:ae:51:89:b1:68:77:2e:31:43:
09:d7:61:68:39:3f:5a:e6:dd:20:54:db:47:be:6e:9b:bc:1a:
54:ab:fe:97:ca:e8:47:11:a0:a6:25:87:7b:d9:82:ce:4e:84:
f1:5a:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:13 2025 by rpki-client