Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: BQt1XFybXVR9DrdLLNWbDnQwYI0tYTArfNEA3/4Q0Z0=
Subject key identifier: 1B:AD:00:CE:CA:4D:0F:D3:8D:B1:D0:56:18:72:9E:79:36:2D:C2:B9
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 0194BC730A10FC5F4C7009C4C26CB1FE7057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 0F74
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: Oe91h9xagODVf1fOraPdamEKzw/FAOisCDRxrfBB46c=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:10:fc:5f:4c:70:09:c4:c2:6c:b1:fe:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=1bad00ceca4d0fd38db1d05618729e79362dc2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:28:e5:9f:83:cf:8a:96:ae:e9:ee:f9:f2:
a8:4b:cd:4e:1c:f7:f0:b5:b5:73:23:dc:23:d7:59:
a7:fb:31:c5:5f:0c:cc:21:11:fb:b1:a3:bf:13:24:
ec:7b:8e:66:5c:de:88:f3:43:3b:22:87:fd:e9:db:
a6:0c:7a:af:c3:1a:97:35:f6:1a:a2:05:c8:d6:44:
b6:99:27:68:69:97:89:9d:6b:29:34:22:4c:02:d7:
d4:80:18:b8:99:74:b6:99:db:7b:b3:81:53:26:4d:
bf:7d:f1:b3:04:51:a5:46:7c:f0:dc:81:ee:57:2f:
7e:06:4f:21:72:6c:ba:88:63:e6:b8:76:91:26:af:
2c:c2:73:ba:09:a5:bb:a9:c2:43:6e:6f:f0:f5:15:
11:64:ba:c7:48:b5:7d:64:42:80:8b:46:c6:07:f3:
d9:b5:86:c5:d0:e5:39:d8:09:9d:04:42:bc:8e:cc:
fb:04:5c:f7:6e:33:d9:c3:46:5b:5a:fe:37:d8:3a:
05:d5:33:e6:3a:2a:eb:78:b9:52:4a:ad:2b:21:31:
60:c6:96:04:34:dd:ca:fe:07:2f:d5:81:af:89:24:
81:85:13:98:3b:86:41:74:17:10:f0:33:7b:6a:43:
9c:7d:0a:d8:db:83:4e:43:de:b1:31:e6:61:ef:10:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:00:CE:CA:4D:0F:D3:8D:B1:D0:56:18:72:9E:79:36:2D:C2:B9
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:75:29:47:8b:1a:ca:46:be:ea:a2:b2:9f:c0:89:9d:a8:
1b:38:09:0e:97:03:98:55:b3:ce:65:6e:05:05:f7:8d:d6:7a:
95:f6:46:cd:5e:5c:34:3a:f7:1b:89:8e:6f:85:56:cd:58:a1:
c5:39:28:ac:9b:22:82:6b:9c:d5:19:eb:e0:57:ac:19:58:79:
82:f8:86:33:8e:4d:c5:b7:15:cf:2e:2f:e7:d4:62:ff:be:1f:
9a:48:d6:2d:09:29:23:1d:85:a7:34:b4:f0:9d:7c:fe:18:e4:
72:37:25:28:6b:e6:bd:cf:94:39:d7:28:73:be:93:f3:8f:33:
3e:e5:cc:f5:71:0a:a5:f7:8e:8d:e1:ec:5b:aa:eb:28:c3:aa:
55:91:d0:55:90:d2:0a:8a:87:22:c9:4d:ae:ee:7d:1c:4a:f9:
8e:d1:93:47:a9:1b:07:6a:5f:b6:74:f7:a3:79:00:e1:46:55:
2d:c9:2f:4f:4d:69:a4:84:73:11:c9:4b:6f:94:28:d7:8f:2a:
01:a5:62:d1:ec:80:6c:b7:b7:8d:29:20:98:50:ae:cc:52:25:
ea:eb:f0:36:32:10:90:76:97:1a:3b:b7:f6:8b:3d:cc:cc:c9:
7f:99:50:c4:49:27:38:ad:a4:04:1a:51:7a:01:5c:2a:31:d6:
ad:d7:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client