Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: +umimgfAyLelRRTjK95YOv+YYWwOmOHTf7zdwgoD/k4=
Subject key identifier: 29:0C:8C:75:7C:F2:03:7D:F3:67:D8:F5:3B:A4:4B:7C:CB:92:48:EA
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0194BD8556EE366E7CED35CF893CB19FBE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 06B6
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: igsG6zwF5PRMefq50dGCmgRJOAB/hx6TFNr9VxsOKVI=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:ee:36:6e:7c:ed:35:cf:89:3c:b1:9f:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=290c8c757cf2037df367d8f53ba44b7ccb9248ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:ec:34:64:f6:ef:09:1f:fd:b2:70:72:e2:
ed:72:2c:7e:9f:58:96:ec:7e:35:7e:4c:47:7e:88:
aa:af:cb:bf:a6:19:37:1d:a3:83:0e:10:8d:a8:38:
b6:ca:83:ef:38:4f:79:73:4c:8c:a9:01:e1:ad:10:
ab:7d:47:36:b0:1c:fc:c6:ec:0e:d3:ac:20:64:d0:
7c:b2:4f:95:53:3c:07:88:6a:25:f7:a3:71:49:ed:
d9:da:55:79:4c:1d:52:1f:37:e1:41:95:8a:45:5e:
67:5c:0e:93:5b:7b:9a:93:4d:59:cc:5e:86:ed:d3:
73:c1:f5:0c:3b:6e:f7:7f:f7:11:4c:a7:b4:1c:75:
82:9e:d5:2a:e7:37:f4:74:9e:e6:6c:f2:cd:4b:68:
5f:dc:cb:bf:e6:6e:73:9e:4d:2b:0c:b3:d1:3d:13:
a4:10:c0:de:1e:24:f0:cb:2b:23:95:f9:e3:97:4e:
dd:87:ca:85:ae:c7:9c:74:d6:7c:c7:12:a8:ef:98:
8f:9f:59:7d:16:dd:6a:03:23:c2:cf:de:5a:e6:80:
b0:c8:3f:35:d3:1b:00:ce:04:a4:2e:5d:ef:f1:17:
50:67:1f:8c:c1:72:ce:5a:85:82:83:5c:3c:f2:e0:
bf:6f:9e:4f:3a:1b:1e:e0:7a:a6:f2:a6:d7:91:d3:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:8C:75:7C:F2:03:7D:F3:67:D8:F5:3B:A4:4B:7C:CB:92:48:EA
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:13:fa:4e:a5:5e:9b:79:bb:bd:51:11:cb:06:85:ca:a8:37:
ba:4d:4b:72:b6:ff:78:5f:7c:af:fb:0b:8f:07:a8:21:e1:6f:
e7:01:9d:2c:2d:cc:09:bc:ec:ae:6a:04:b4:0d:67:64:83:62:
3a:b7:b1:9c:88:f8:cb:50:07:fe:7a:a9:86:a1:5c:0b:2b:fd:
55:1d:02:67:0a:60:7f:a8:6f:20:0a:dc:93:93:4f:be:e0:39:
64:31:34:0e:18:db:7c:33:5a:02:f2:6b:e2:03:09:65:29:25:
d7:f0:7d:35:09:9b:77:a2:44:99:5c:d8:25:33:4d:7d:1a:ff:
fa:2b:b0:92:c0:68:f0:65:e1:f2:60:ca:c7:3e:a2:73:0e:82:
e0:b3:07:cc:6b:5f:62:a9:c3:28:0f:31:89:f3:42:d1:65:34:
ac:0d:2b:99:86:8c:0b:bd:7b:a4:30:c6:9c:3f:25:37:ab:9b:
d8:b2:bd:7d:f5:eb:dc:91:99:ca:be:e9:06:83:c2:bc:af:e0:
69:04:2b:df:84:2f:3c:57:74:f1:e7:37:ca:2f:a5:ef:bd:d1:
d6:51:56:74:45:47:56:8a:25:c4:74:d2:0c:bc:7c:fc:41:28:
04:4a:61:d6:0b:84:b4:6e:42:8d:fc:67:94:55:6d:fc:ef:02:
1a:da:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:39 2025 by rpki-client