Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: aTwIzQk5m1/BwcpAxKtGicA+ZbR9yjKAQtcyI0ddRWs=
Subject key identifier: 55:69:64:CA:41:F5:23:C0:EC:D1:A0:6D:A4:3B:F2:66:A7:29:A3:48
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 0194BD4EAA01782FCF33753A372A7AF858FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0597
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: WMuarmhZ+wKH83FRRdvTxzOX4gMuRLFKbwCY/z0CeVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:01:78:2f:cf:33:75:3a:37:2a:7a:f8:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=556964ca41f523c0ecd1a06da43bf266a729a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:48:fa:66:94:ac:08:21:55:16:26:89:20:
2d:f4:7b:c9:e2:6e:73:71:aa:8a:63:f9:92:3d:a3:
20:87:ea:dc:fc:08:25:f3:2b:be:13:1f:8e:71:0c:
aa:0b:3e:ac:0e:c3:67:76:96:bf:40:ee:1b:37:3e:
17:7a:4d:6f:c1:1a:3c:15:b7:77:42:95:f9:8b:4f:
7e:07:e7:eb:c0:82:62:7b:e0:9d:61:ed:db:a5:10:
1b:61:80:39:fb:82:41:1b:12:28:38:58:d8:d4:2f:
c1:d5:df:66:6d:58:a9:ec:97:32:0d:d1:3f:6c:78:
7f:8e:41:78:2e:1b:60:c9:93:42:e0:b6:be:4c:20:
2b:c0:29:e7:2b:d4:fd:69:42:f1:b6:44:a3:b0:96:
15:ae:63:3a:14:50:7e:cb:14:1d:9b:f3:ee:34:1c:
89:8b:fe:2d:c1:53:86:4c:62:93:1d:bf:bf:17:40:
87:f7:73:44:90:7f:a6:5a:d5:bb:60:eb:47:57:99:
d1:59:f4:40:ab:20:5d:ea:b9:01:a6:a4:28:fd:77:
e0:8e:f4:48:4c:4b:1c:77:61:18:17:5d:b5:0a:96:
7d:96:b3:77:a2:f8:fb:37:7d:12:d3:12:23:f9:8f:
3c:2e:a6:c1:8a:77:81:84:52:86:03:ad:72:2e:21:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:64:CA:41:F5:23:C0:EC:D1:A0:6D:A4:3B:F2:66:A7:29:A3:48
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:51:4f:2a:03:ba:30:46:67:dc:c2:da:c2:8e:47:b2:22:
81:c1:fb:a2:72:42:98:4d:7a:c5:d5:70:40:db:c2:15:8d:a2:
a3:a7:d6:65:5d:de:33:9d:6d:65:6d:ee:3e:ac:f5:f0:86:07:
00:cc:71:59:09:5b:bd:08:76:19:5f:6c:e4:12:92:27:ff:9e:
84:fd:64:b3:a5:bc:43:f7:af:0a:d9:95:ef:4e:c4:07:b2:24:
ea:e9:da:fa:41:70:fe:1b:04:f0:a1:c5:c0:29:f6:11:8c:b7:
72:0f:64:3e:50:8e:70:47:e3:0b:c8:1a:b4:a3:21:6a:79:36:
a6:2b:c0:21:e5:80:48:8d:aa:14:82:63:84:cc:37:34:7f:5c:
7f:ff:cf:c2:56:97:b4:c1:4f:72:3b:33:bb:43:5a:ab:0f:e0:
ca:4d:c6:c2:26:5d:b5:3c:3d:8f:04:c2:ec:78:98:e8:b0:ec:
ae:fe:a6:2d:46:ba:6e:0a:b5:92:6c:6d:99:92:7b:3a:3b:81:
11:a4:e1:5f:08:04:2a:b8:1f:56:0d:7e:01:00:20:98:f0:30:
51:38:30:6d:24:2a:78:d9:0b:41:f1:55:5f:c7:b7:8c:df:19:
22:99:cb:a0:52:a5:04:71:20:95:31:fd:dc:90:e4:27:6f:f3:
b4:6d:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:46 2025 by rpki-client