Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: Xd0AKSH5wKf+QcsUjX6aqeloTVHOAO+ZJmBHIuc5Cjc=
Subject key identifier: 41:19:5F:B0:42:C8:A7:2A:58:C0:F8:BC:FE:71:F7:AA:2B:D4:30:9A
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 0194BC050055C6CE7137DE24EA6BE1C391D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: S2Ptyfr20Lur2XhuPITgfVw0jmk04TKiszh7tPtx0DU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:00:55:c6:ce:71:37:de:24:ea:6b:e1:c3:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=41195fb042c8a72a58c0f8bcfe71f7aa2bd4309a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:79:3c:bc:09:e2:9c:ab:f4:3b:35:7d:82:
d6:e8:91:5e:f0:64:65:ba:aa:4d:3d:95:ff:28:23:
7b:72:7c:42:f1:b0:b3:ee:4e:5c:61:4a:51:70:7f:
71:b9:f2:37:80:7c:c4:a7:d5:26:5b:93:85:19:ce:
a1:d2:80:90:e1:46:b4:3f:b6:7a:e3:27:bb:6a:a0:
c5:be:80:25:55:2c:f8:b8:65:16:54:58:a4:a3:28:
21:50:1b:d0:6c:ba:78:a0:fa:c4:bc:d8:7d:e3:0b:
ca:d7:2a:09:80:df:d8:1b:ac:39:d7:3a:6b:46:9f:
8d:08:fc:85:4d:09:0c:2e:17:7f:4b:c3:31:48:09:
bf:23:7e:89:04:83:b7:a7:e6:5a:03:a6:eb:73:ad:
b2:dd:32:2a:48:a1:46:31:1c:99:8a:e7:42:82:58:
aa:49:c6:4f:2a:9f:0a:31:47:ed:cc:d7:5f:8b:df:
0f:86:27:fe:61:cc:85:c8:2b:e5:ab:e0:67:1e:92:
45:7d:85:83:3e:49:1b:62:75:38:c3:92:62:41:84:
9a:aa:ef:e0:69:f7:8e:02:6b:3f:98:1d:8f:4f:29:
45:ec:d7:cd:cf:2a:c3:30:98:a7:6f:f8:8b:46:84:
ab:8b:09:a6:54:fb:0b:17:e0:50:d8:46:66:25:a8:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:5F:B0:42:C8:A7:2A:58:C0:F8:BC:FE:71:F7:AA:2B:D4:30:9A
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ca:52:12:e2:bc:2f:13:2e:24:2e:4e:a3:b7:21:60:40:f9:
61:b6:11:fc:2f:e6:f2:62:76:a7:4b:c6:46:97:d8:b7:7e:63:
8d:f1:f3:f4:a7:5a:a6:b7:46:a0:ca:19:69:0a:21:82:47:dd:
63:f5:9d:41:18:b3:c1:b3:6c:43:f2:e2:c1:6b:0d:0e:c3:3f:
b9:3e:e7:5b:05:2d:68:5e:2b:12:ac:94:79:ff:cb:95:13:a2:
92:2a:9d:65:12:a0:5a:25:82:b2:29:53:9a:cf:1b:68:d2:45:
49:d9:69:b8:ed:ff:e2:e0:43:35:75:bf:84:75:91:82:0a:cb:
0e:78:e3:2d:39:71:70:98:c3:55:b5:f0:a0:ae:d8:af:ef:b0:
55:15:a1:b8:4a:ed:42:8e:c6:c1:a2:72:c5:d4:22:60:c6:69:
38:56:d6:f8:b0:d5:35:de:e7:ca:fb:c8:86:a7:a9:29:47:b2:
d4:ca:0e:ca:c9:24:31:18:cd:da:68:21:9c:15:2e:5d:f9:51:
2d:1a:43:9b:e6:9c:3e:18:a2:c3:9a:31:b9:da:b0:20:a1:bf:
45:2a:34:13:93:64:4c:11:ba:6b:68:44:ea:ba:7e:9f:6c:cf:
91:fe:d3:15:10:83:77:0f:43:f7:2d:82:1e:09:9b:e7:a2:ce:
40:68:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:27 2025 by rpki-client