Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: dE7nehkw9FPKlcpemkUT8EKgP/hsfSR3ZblPV28/e4w=
Subject key identifier: 58:54:B9:4D:66:DF:7E:40:42:5F:6E:5C:7E:50:7D:7A:95:D7:9B:C7
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 0194BD85B887715A10D5B5ADF1F0B7924BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 0CC9
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: 8zCVReWDOlMmY7UXrWLy5ld44DT6XI6uPp7Ern85/gE=)
2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:87:71:5a:10:d5:b5:ad:f1:f0:b7:92:4b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=5854b94d66df7e40425f6e5c7e507d7a95d79bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:69:50:86:09:2e:cd:1e:23:61:af:af:35:
37:86:fd:cf:20:aa:d1:0d:12:46:af:68:c4:b8:8e:
b7:b1:cb:ef:0b:d9:84:9a:1d:51:91:c8:3b:10:12:
3b:13:f8:cb:3d:e1:5b:21:47:69:ad:a2:3e:fe:5e:
cb:40:45:35:9b:c9:27:4a:55:7d:8b:f9:44:74:12:
16:b6:90:63:de:43:18:19:da:0b:de:ac:06:4c:38:
4e:b1:14:93:fe:c6:e9:19:66:c8:29:47:e8:62:e9:
00:02:ab:1c:6e:f0:3a:9b:10:47:9c:25:e3:ae:72:
7b:37:54:d0:93:9a:d4:58:81:f7:7e:28:2f:ed:e9:
d1:49:31:ec:98:40:37:8a:97:3e:36:db:c6:d1:96:
06:ab:fb:4f:66:14:a8:aa:4b:1f:e6:a0:68:af:09:
e6:aa:3b:db:7c:48:31:c4:c3:eb:a9:96:d6:94:0f:
fd:1b:70:fb:ac:a3:7d:99:a9:fa:e1:e5:ea:e3:76:
c5:c6:27:33:55:39:7f:2b:93:d0:7f:54:79:37:76:
a4:b5:8d:ab:50:19:c0:10:a7:89:8f:7a:22:8b:a7:
46:bc:1e:97:03:19:eb:04:5d:50:0e:7b:16:d8:6b:
37:e7:06:ab:4b:f6:1d:ce:be:15:c3:8b:57:96:43:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:B9:4D:66:DF:7E:40:42:5F:6E:5C:7E:50:7D:7A:95:D7:9B:C7
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c1:1e:22:66:8d:73:ad:fa:e9:6f:45:34:fc:ae:f0:a4:50:
7b:ae:6e:10:35:6b:1c:f9:32:e0:7d:74:14:92:ab:66:34:d4:
af:ec:b6:48:d9:51:14:aa:1f:64:75:2d:c7:1d:c9:8b:45:7a:
cf:a7:31:9d:57:c4:f3:e3:1a:15:a0:47:3a:45:a7:1b:5c:30:
91:fa:bc:fb:4c:03:91:33:84:60:51:7c:e7:30:62:f1:09:cb:
51:ac:e5:64:18:2c:c2:63:54:8f:6c:8b:0f:75:70:3b:61:9f:
c6:e2:40:44:9b:bf:01:61:af:c7:e2:23:a2:b4:21:77:06:ee:
d7:e9:ec:07:5c:12:b1:d6:30:6f:53:5e:ee:f6:69:a7:9a:80:
3e:98:b2:6f:ce:52:2a:04:90:57:a3:76:20:32:d5:90:59:b7:
96:de:d7:48:66:ef:fb:3d:af:e5:2d:04:5a:59:43:d8:ed:23:
d7:66:82:2f:5f:d3:5c:93:64:8d:9c:dd:a7:68:d9:da:81:a8:
78:6c:24:a0:08:97:cd:57:ae:ba:0d:56:f3:51:76:d3:7b:4a:
21:09:79:17:17:d7:b0:c6:f8:a7:05:2b:c0:5a:cb:f2:07:d7:
4e:59:5a:49:98:c0:b1:17:10:dd:3d:55:6a:cc:72:d5:06:09:
56:7f:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client