Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: 9HoQGUZnPcVlpDrwM10jxRXBnvwPnt78ZM0l/wgx+FM=
Subject key identifier: 9B:CE:D3:60:36:D8:A9:9B:90:07:BD:A0:AC:46:55:7D:39:DB:32:5B
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0194BD1767B6C1E034AF8AC91EE58D943F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 1244
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 637FTc-EjTy2CPittOXZDbe6ZIE.roa (hash: UXrydQhxUZeYxfWwxSYgoELX/MNnNsFM3cbVDDIL3xE=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: k3t0Q23Ata9v1znVTrnvBYiPiLBItJe3vBeWXg8fdjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:67:b6:c1:e0:34:af:8a:c9:1e:e5:8d:94:3f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=9bced36036d8a99b9007bda0ac46557d39db325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:85:db:84:e1:7b:3c:51:a0:b4:89:0b:fc:
62:88:a9:75:f0:72:7a:c1:14:7b:4c:e2:75:b3:7e:
54:59:98:16:e0:75:d0:f5:90:aa:76:72:a2:0f:db:
70:16:af:84:6a:d2:0c:5d:1c:5e:1e:d5:3f:48:b6:
f2:28:75:78:62:1d:ad:fa:fd:25:44:04:a0:44:f9:
1e:f2:3a:bb:09:a0:e0:43:bd:cd:28:d1:6f:6e:35:
6e:ce:11:dd:bc:2d:48:a9:d1:72:c7:a1:f7:08:f0:
65:e8:59:a0:fe:85:fa:93:44:41:93:c7:5c:96:0b:
8b:7a:30:13:39:d2:c0:49:89:37:03:22:7c:79:ff:
fd:5e:fd:69:13:62:35:d9:35:fa:ba:38:b4:22:3a:
56:c5:bd:5f:0b:2e:87:f5:3d:06:1a:e2:d1:70:07:
02:d1:f6:b9:00:1b:a5:bf:f6:77:35:0b:3f:1f:d4:
4a:c2:a6:57:4e:17:a5:81:b6:b9:88:93:78:93:34:
ac:cc:f5:94:43:68:04:d6:00:76:db:fb:e3:f8:d7:
e6:06:12:55:31:e4:ba:61:84:15:96:e7:e8:3c:ad:
e3:d1:32:50:4a:27:86:ad:94:9b:91:67:18:c0:22:
b3:a5:3c:e5:d5:81:74:5a:bc:d7:28:c5:a7:98:49:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:D3:60:36:D8:A9:9B:90:07:BD:A0:AC:46:55:7D:39:DB:32:5B
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:56:76:40:3f:a3:48:7f:43:0d:6a:d5:14:80:65:71:d8:
d2:9d:cb:59:f8:07:9a:73:7b:d0:ae:07:9d:1f:ce:1a:4c:70:
94:d6:bf:ae:45:cf:a6:aa:fe:df:7e:29:f0:f3:26:ba:f0:e4:
b2:71:d5:54:26:b7:c7:d9:4c:7e:4b:fc:68:cf:72:5d:7f:3c:
b6:04:e2:b3:a0:a8:cd:44:a0:da:a7:31:fd:17:1b:65:e7:55:
98:19:5e:46:e4:2f:9f:da:6c:43:96:43:8f:df:79:65:18:ad:
6f:94:b6:86:46:aa:b1:36:be:f2:90:c3:ab:25:0b:4e:c5:0e:
9a:c6:61:a1:eb:67:0e:e8:3a:e2:f3:1a:02:13:47:97:82:9a:
6f:59:a8:ad:63:f3:c3:2c:f2:1f:34:73:b7:ee:ef:0f:a2:95:
1f:ee:d9:56:83:e9:3e:78:2a:e8:25:b7:0c:58:e9:fd:6d:35:
3a:08:5a:73:0d:dd:2b:a7:a1:69:eb:da:88:f8:32:37:ea:82:
7a:e5:a0:fe:0c:f0:fe:c4:7d:60:27:60:39:bb:5e:10:cd:1e:
3f:59:84:55:5a:9f:0d:eb:1e:2f:e2:65:6b:ff:59:34:32:6d:
99:5d:ce:97:40:70:76:9b:6f:8c:84:22:3e:f2:a8:03:eb:00:
7a:d5:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:17 2025 by rpki-client