Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: B5t4ZzoIAYysyy5a29KRK7ex4GMhUTkXKrQ/lqwzlE4=
Subject key identifier: 78:68:85:1C:55:67:55:0D:A6:44:BE:F7:2F:D9:1D:84:DD:62:3B:BE
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 0194BC0530DC405BDF91838374758CCE0C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: sE7IBOFu6yQKtgWdCc8P37yQEFJN3hTRg9dciDLU68c=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:30:dc:40:5b:df:91:83:83:74:75:8c:ce:0c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=7868851c5567550da644bef72fd91d84dd623bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:81:24:e5:50:df:59:8d:89:fd:de:bb:ed:
6f:11:22:0c:21:c4:b3:88:25:91:5a:78:f7:11:58:
e0:87:c2:2d:83:e0:28:85:95:ec:4a:26:99:cd:13:
fc:6f:ce:5c:c1:a0:3e:0a:ec:6a:ce:1e:97:89:68:
65:64:5d:6d:3d:17:f2:4b:bb:16:44:b2:f2:9b:8c:
2e:6e:cc:01:fd:40:1e:f9:9a:40:da:a2:f4:28:96:
ee:f5:e3:b8:44:be:28:7c:53:7c:e1:5d:00:97:a0:
86:62:44:eb:7d:0b:3d:17:c3:04:be:77:20:2a:ce:
05:a3:af:fd:be:9b:1e:aa:06:93:2f:f9:d0:5c:0c:
45:1e:18:64:71:f8:9c:d8:53:56:93:cb:4f:9a:1b:
5b:2b:52:7e:d3:d2:f3:8a:96:fd:ad:7e:51:c6:a5:
16:19:42:b1:06:a9:bf:22:41:08:36:b3:36:d4:66:
5b:50:85:bc:a5:9b:5a:f6:b6:73:24:ff:da:ea:da:
2f:87:9e:e0:21:88:a8:5b:d7:6b:73:85:55:1e:d9:
9a:f5:96:69:91:df:fa:e4:9d:18:41:31:fc:83:7c:
a7:f8:b9:32:43:1d:ff:74:39:33:09:d9:31:49:a9:
68:f8:17:55:c7:5e:70:4f:a0:12:52:50:47:7c:96:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:85:1C:55:67:55:0D:A6:44:BE:F7:2F:D9:1D:84:DD:62:3B:BE
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:6b:8a:d7:a9:f6:6c:0d:43:a1:88:dc:db:b2:df:02:4d:
23:cb:e1:2e:22:48:81:b0:70:63:b8:96:2c:60:ff:7c:49:cd:
09:09:d2:c2:cd:0c:92:bc:74:b6:6b:ba:47:1a:ae:6a:04:7c:
b7:7d:85:cb:b3:a4:69:be:74:8e:5d:46:b0:eb:65:3d:20:66:
cf:2d:09:70:41:59:18:aa:c9:7a:d3:ab:49:69:c3:bd:29:5a:
aa:c2:08:6c:ea:3b:4b:de:1a:8b:85:f2:39:be:44:c9:d1:d7:
88:ac:f8:f5:64:4b:35:ef:43:2c:1f:b9:03:55:14:08:ce:f7:
18:17:62:8e:7a:cc:5a:38:b7:35:b8:f9:7d:30:eb:84:7a:cf:
7c:bc:e6:cf:50:c6:e0:70:54:47:3b:f6:25:2f:80:8f:2e:53:
a9:dd:4f:97:da:a8:ea:0f:88:2f:51:0d:6b:d0:4b:05:47:13:
7d:f6:1a:a2:97:77:7c:c5:62:05:a0:13:b5:36:24:d0:6a:87:
14:c0:d4:8d:94:79:9f:ad:58:fb:ed:70:b4:4e:63:22:94:ed:
34:62:5d:bb:79:ae:6d:21:2c:50:f3:61:6e:21:70:7e:9d:be:
89:f5:c8:8e:18:37:6f:9b:b8:f1:a3:13:68:4e:bb:5d:bd:af:
66:db:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:27 2025 by rpki-client