Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: vEdkyNjmhBrmaxc5nQFeV2i8SvI7c8kFx0uh9RFz5TI=
Subject key identifier: 77:EA:7E:DE:44:11:58:A0:56:08:68:3C:6C:76:8B:DC:25:F7:22:89
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0194BD859CC3F2E82D61DA2F7DB887FF365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0CAD
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: af1YdKyfqxAqVxFAyJm+ANI7QL96kXxCQu6Jd2i29KU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:c3:f2:e8:2d:61:da:2f:7d:b8:87:ff:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=77ea7ede441158a05608683c6c768bdc25f72289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:9d:8c:c1:e3:1f:c9:4c:01:d0:71:a5:8d:
bc:e2:46:dd:43:fc:fe:5e:08:ea:bd:13:2a:29:49:
02:58:3b:5f:c1:c1:1f:8c:dd:ac:da:5f:5b:c0:00:
2d:92:ac:b7:3a:84:8b:dc:de:f0:ff:ec:06:95:5b:
ea:c5:9c:b5:44:1a:f8:01:31:9b:28:95:f2:99:c1:
bb:82:8a:59:94:ec:83:80:ac:6b:c6:10:82:d3:b4:
26:02:82:a1:92:62:80:6a:27:ed:42:44:14:c3:6c:
6a:cf:f4:44:79:ed:75:f0:04:e5:e6:49:3e:3c:6e:
5a:3c:68:b6:ec:a8:72:26:dc:c2:94:f7:cc:3e:5e:
a2:ac:e8:9c:e0:e6:bb:a1:43:04:54:5d:17:04:62:
e7:85:2e:b8:e1:82:94:d3:17:49:fe:ec:14:51:d9:
99:b5:72:e2:d6:eb:81:b0:92:2a:01:7b:e9:48:b5:
bd:77:45:21:12:cc:16:47:48:63:0f:75:a2:55:44:
ff:97:02:1d:30:34:ab:96:b0:72:c4:1a:e5:0f:fb:
07:2c:84:dc:e0:83:24:7a:c0:ce:b1:f4:a5:d3:36:
07:59:cb:11:b4:6c:0c:42:95:7f:f1:25:63:18:58:
f9:1b:e5:02:c9:b2:a9:04:b2:2c:6e:c2:35:f0:7e:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:7E:DE:44:11:58:A0:56:08:68:3C:6C:76:8B:DC:25:F7:22:89
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:33:6e:fa:73:79:a4:e9:e4:3a:1d:da:e1:4d:6e:47:12:0c:
31:55:6a:28:95:11:51:6d:8f:06:27:17:12:3e:71:d9:49:1f:
96:c1:cf:a2:05:f6:2f:cd:aa:6f:f5:64:e0:87:0d:e6:7c:f3:
da:a6:aa:c1:67:26:22:92:4f:ce:5e:3b:b8:3b:e2:57:e8:e7:
f0:d9:e3:fc:5b:25:7f:2c:de:41:94:52:e2:85:65:6c:9c:a6:
50:f5:f2:a7:56:5e:1c:4e:6e:94:80:31:87:e3:87:91:9f:37:
38:19:26:b2:78:ea:71:c6:a4:6f:ff:db:d2:ee:f1:bd:59:e4:
03:5e:24:90:ca:ee:f5:e8:ab:39:e0:28:4a:9f:b0:76:34:1c:
1d:d0:5b:1c:e1:64:22:d8:18:20:9b:5d:b1:85:d5:c1:3e:81:
ac:64:ec:d3:f9:35:bb:a9:70:46:b4:c1:7d:8f:61:ec:67:8d:
d9:53:e9:57:13:80:9b:73:89:ff:02:fb:46:06:10:a3:c8:be:
03:30:54:18:b1:8e:10:e6:85:66:0d:cf:13:1b:a6:cb:61:00:
b1:62:2c:57:79:d3:a6:44:b9:a7:6b:a9:b1:4a:a1:4e:83:4b:
cd:10:72:bb:3f:9e:4f:87:fc:26:52:35:97:ba:1d:c7:8e:b1:
00:fb:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:10 2025 by rpki-client