Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: M7HIsqWeCm2XeNUtnx1X61+ZL3rBN1mxBImBc0Oco/A=
Subject key identifier: 4F:41:03:7A:95:43:8A:1E:87:12:01:CB:98:D7:95:B8:BD:FC:F6:C2
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 0194BCAA1BA8334EC3B2B169E2AAC5515F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: +7N8urFIStqx87SLNmhZIXtvVDjaO2AlmXDzh88grdk=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:a8:33:4e:c3:b2:b1:69:e2:aa:c5:51:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=4f41037a95438a1e871201cb98d795b8bdfcf6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:70:a7:73:74:28:b5:84:b4:43:43:ee:c8:
34:83:7d:b1:7e:ba:47:c0:0e:5f:a8:87:68:08:6b:
46:74:6e:cb:40:63:2f:e5:4b:9a:dd:48:a1:9f:70:
d9:8c:7d:94:28:b1:60:60:27:54:4c:e9:1d:96:ec:
fd:9a:d0:78:68:38:06:2b:b9:0e:02:9c:56:d6:b5:
c6:a8:fb:25:07:97:3a:d6:b1:fc:2a:53:0d:5c:a0:
03:7a:81:13:2d:90:35:e5:07:e1:b0:9f:72:ad:6a:
c6:67:23:fe:33:0a:13:ab:0b:88:21:aa:c9:d8:22:
ee:1d:cf:4b:b8:90:b3:e0:54:6c:43:ce:12:42:73:
44:b8:d8:91:93:9d:ea:81:41:7d:26:a4:2c:d0:28:
a9:7f:42:fa:41:6e:43:c1:21:2a:60:47:f2:8c:52:
2f:62:0b:ba:87:c6:80:ba:15:5e:eb:86:34:a0:0a:
56:48:13:04:6c:e0:7a:30:78:c0:50:41:c8:c8:ba:
36:9a:07:98:87:0d:f2:86:8d:85:b0:06:96:21:8a:
c3:f0:98:4f:a4:46:c0:3a:4f:db:cf:e1:a1:ec:6e:
71:31:6d:f1:b7:e8:81:a4:41:f8:cd:11:47:69:e5:
69:24:37:c5:50:2d:aa:2e:3d:6f:ed:76:7a:8b:e3:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:03:7A:95:43:8A:1E:87:12:01:CB:98:D7:95:B8:BD:FC:F6:C2
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fe:01:a8:d2:39:0d:af:ed:21:6b:e8:ff:5c:e2:c3:cb:99:
c5:aa:82:7a:52:c7:09:51:4e:02:59:60:15:a9:7a:b1:39:5a:
c8:c3:44:c4:a6:b4:90:c1:10:7f:42:d0:40:db:bf:13:1e:fb:
c5:06:54:3c:3c:f3:c7:56:e2:1c:f9:fc:de:25:78:2e:cc:15:
05:01:c8:e0:d0:04:7e:e5:76:04:c4:e0:11:a7:8e:a6:6c:39:
c7:0e:fd:de:09:d4:10:4b:95:11:72:91:94:64:d4:95:b8:43:
8e:75:47:cd:f2:e9:d8:87:b0:0c:28:62:91:d6:8c:d9:87:35:
cb:fb:1d:d4:25:51:91:36:70:5a:ad:b9:8d:13:5d:ab:aa:9c:
e7:db:50:9b:4b:be:3d:53:bd:22:2b:74:13:dc:c5:69:45:6b:
62:af:f5:73:ed:df:9e:25:4e:1b:e1:38:43:20:32:97:e9:0a:
ad:d2:74:82:2e:9c:44:80:1b:91:26:38:4a:04:ce:0d:b8:de:
47:8f:1d:b6:c9:75:48:14:25:c8:af:59:a2:0e:e3:50:f6:21:
94:2a:9b:5e:56:bb:57:02:15:6d:20:c4:75:cf:d7:f8:d6:b4:
df:36:87:0b:81:c4:70:cd:f9:11:f9:45:16:80:5d:03:84:a4:
d9:e9:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:05 2025 by rpki-client