Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: TGNtEDa6au5D16Xwjgivw000hmT74ZpfDoJy7vRdE4Y=
Subject key identifier: A8:4E:45:4C:C2:91:1F:4B:73:58:68:E8:A4:20:0C:DA:03:07:11:7C
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 0194BC3C18BFD6CDDBCE4336F00725C3BD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 0347
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: UZ5JFy6P/eOKteVPkDuP9P8/PUQkGcT6C1M/v/06aWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:bf:d6:cd:db:ce:43:36:f0:07:25:c3:bd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=a84e454cc2911f4b735868e8a4200cda0307117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:1f:8f:61:52:0e:fe:60:6a:02:a6:35:03:
57:7a:5e:33:bb:66:88:30:76:41:02:65:87:b7:c3:
f1:18:31:5f:32:3a:3f:91:af:ad:6c:ae:95:02:26:
1a:b7:95:93:f8:a8:ae:28:af:10:c4:80:10:37:cb:
38:4b:48:2c:79:ae:68:f4:4c:d7:2f:68:eb:ca:d6:
56:73:8f:61:7f:07:cb:05:5c:5d:3c:7b:e3:e3:2e:
99:55:6d:7c:88:d5:d6:8b:2a:25:ac:d5:14:f6:08:
96:68:89:70:04:ff:49:a5:1b:cf:7c:77:3a:07:fb:
ef:7b:ca:67:75:cb:b1:c4:08:9c:e3:92:c3:70:49:
5b:bd:b4:b2:9f:3e:eb:2c:2c:ad:c7:68:96:bb:5a:
79:17:28:1e:d3:3f:55:6e:ac:c8:50:92:90:5c:40:
84:e9:0d:ee:e1:73:a2:30:5c:e8:6c:c6:ac:4e:72:
2d:fd:51:80:54:8e:6a:0a:9e:63:74:59:59:b1:2b:
7e:03:d8:66:6c:64:95:ad:85:4b:9d:6e:e5:c8:da:
ae:b1:6c:c2:40:48:b7:2c:67:63:44:26:e1:35:6b:
67:31:cc:4f:c5:22:f0:70:1a:18:48:1b:3e:65:28:
d2:d1:77:92:7c:3a:36:07:b8:0a:cd:05:44:0e:cb:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:45:4C:C2:91:1F:4B:73:58:68:E8:A4:20:0C:DA:03:07:11:7C
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:f2:b7:b6:33:30:5a:0d:98:d5:14:a9:ff:8d:39:37:44:
37:39:c5:88:3d:75:b3:82:eb:f8:5f:1d:07:1a:ad:c6:8a:d5:
82:d2:60:7f:c7:86:5b:ff:9f:e8:84:4f:4c:35:ee:a4:af:6b:
d3:db:77:ac:7d:d1:cc:8a:c7:2a:33:ca:8d:42:cb:de:a3:34:
14:7b:31:48:9c:42:8f:4d:9b:5b:16:7c:27:31:bf:7a:1e:de:
93:2f:fa:69:23:a5:ad:93:ee:61:e5:76:d9:4c:4c:c4:70:af:
33:d2:82:a4:05:73:c6:81:52:0f:7d:ab:8e:2d:22:e9:72:67:
c6:09:a3:1b:ca:98:10:61:4a:69:34:cf:9a:46:1e:ba:f9:7b:
a6:be:43:13:1b:d6:99:c6:a0:f7:dd:0b:12:af:f5:ca:ea:19:
99:0c:06:98:20:8b:1f:d9:b5:c7:4e:93:bb:09:be:bb:9d:61:
ed:e7:d9:ae:66:2b:4a:6e:e2:5d:9b:46:f7:a9:d3:9a:0a:25:
70:62:2d:d3:23:ba:b1:a8:65:de:cc:e0:82:cd:fb:6a:14:a1:
52:f0:48:9a:f4:c8:37:c6:da:41:75:e6:fe:9e:d7:34:4c:72:
5b:0f:09:6d:81:de:39:c8:06:55:78:81:45:4e:11:d6:b7:3f:
b4:67:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:16 2025 by rpki-client