Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: XTKNvmMmkJQFwN+LHJvWwSdUICxvBX58MCueJJFbrBU=
Subject key identifier: 15:92:0E:55:BB:A2:A2:2E:C0:FC:64:5E:51:30:E5:36:01:4F:D2:68
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 0194BD85A56E48CDD5BD431AD43F161CC72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: aOJ6BC6Z574q8XVq0lNRPDlKHIwoKxbmPUmVgpVO1Iw=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:6e:48:cd:d5:bd:43:1a:d4:3f:16:1c:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=15920e55bba2a22ec0fc645e5130e536014fd268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:ae:e5:62:ec:6b:54:c8:1f:cd:a1:4a:a9:
81:7c:8f:9b:f0:ce:48:af:2f:22:d6:a0:89:4b:4c:
75:88:34:41:4a:e6:e2:2b:9f:d2:70:45:f3:0b:b8:
85:3e:00:13:be:eb:52:0b:7b:47:b5:ff:dd:44:04:
38:c0:4a:48:49:43:0d:7f:db:46:75:d3:57:43:cb:
67:13:a1:1e:d7:84:48:66:ba:1b:14:98:d2:a5:01:
77:82:c3:bd:99:3a:8b:d1:b1:49:65:58:d6:6d:d2:
63:5e:42:04:3d:cd:d9:dd:d1:83:e3:f6:52:b0:f8:
94:b2:75:bb:f4:ed:04:1b:77:03:21:6d:ae:dc:4b:
38:42:a5:6f:e2:a7:67:5e:4f:15:20:99:eb:91:7f:
5a:b3:1e:48:82:2d:18:23:08:83:3e:30:ac:1f:31:
40:dc:5d:79:c5:14:aa:dd:fc:85:8a:19:08:a9:5e:
ae:4d:48:61:70:3f:d6:34:95:d1:d7:21:b0:ec:03:
3a:ee:b2:21:6e:b9:4f:63:d0:13:67:ab:ba:7c:62:
2a:f1:da:0d:75:a5:a4:2a:14:fb:98:e4:49:c6:18:
d3:8b:3e:08:02:76:b5:e0:5a:be:45:6d:f3:30:14:
22:d9:74:ce:e3:c4:80:29:be:3f:84:bb:f5:69:af:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:0E:55:BB:A2:A2:2E:C0:FC:64:5E:51:30:E5:36:01:4F:D2:68
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:94:10:89:9a:4c:26:1b:6f:89:cc:63:1b:4f:3e:2f:64:
ef:41:d9:36:93:fe:cd:1a:a8:5b:0d:a8:2a:66:e0:50:8e:61:
35:8b:43:67:8d:4f:27:74:15:b2:9b:c7:49:1f:e6:66:30:d1:
2c:43:52:47:36:58:93:12:c8:71:a3:7c:ac:ea:de:75:99:73:
45:9f:2e:8a:0f:81:ea:b6:b9:dc:bb:e0:f9:3c:8a:6d:e0:32:
79:47:f0:48:6c:29:f0:38:c5:39:27:fe:5f:18:3f:30:80:99:
f6:43:31:60:61:98:ff:94:9a:bc:de:91:36:2a:37:51:2b:43:
22:7b:28:63:2f:4a:0a:3e:c8:e6:8f:40:ec:b4:0c:58:4f:c2:
56:d0:ee:68:38:b9:ca:11:69:b4:95:8d:04:26:22:e5:2f:b9:
33:5c:79:d1:78:0b:98:9c:07:50:29:ca:61:29:51:4a:da:66:
90:1d:7c:be:bd:7c:f0:5e:0b:fd:85:bf:29:57:f5:28:79:dd:
b3:d3:68:3d:79:fd:99:1b:8d:fa:9d:fe:0d:dd:b1:47:0f:2b:
80:59:cd:4d:7b:d2:81:f2:c5:7c:63:5e:aa:d1:4b:73:16:70:
13:43:b6:5e:3e:30:c1:15:92:a0:54:f8:bf:d1:d5:c2:7f:72:
65:87:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:42 2025 by rpki-client