Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: 82cCgrh9To86CyoyAKE/t33cc01Y7pY45IYUMCfSjlc=
Subject key identifier: D5:FC:EB:77:10:45:3E:EB:36:5C:CB:40:85:A3:95:13:DC:57:B5:3B
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 0194BCAA1EA233C70E5B7A2E1E01A8B57CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0AE9
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: k6+v4I73H5WAd8utOshwjlOpMXBc1Sbo7o4JknlvUFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:a2:33:c7:0e:5b:7a:2e:1e:01:a8:b5:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=d5fceb7710453eeb365ccb4085a39513dc57b53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:88:40:a9:f6:ba:d8:66:c2:fc:4a:fc:c2:
f5:b7:d3:56:48:b2:2c:1d:d6:73:01:f1:99:69:9a:
37:ad:77:27:5b:0d:c6:3e:32:ca:2b:05:22:f9:9b:
1a:15:5c:c6:dd:cb:18:76:f9:cc:c4:74:4a:c3:ef:
5b:a1:31:4a:c6:8d:d6:fb:7e:1a:88:3b:c4:f1:b2:
4d:21:13:a3:e1:c1:f5:ed:b9:6e:48:e1:72:dd:33:
36:e3:b3:d2:4c:71:29:63:a4:86:7c:4a:39:ff:c0:
8d:46:1d:29:0b:e5:74:1c:7e:f2:68:ee:b3:1d:04:
90:d5:dd:20:98:e8:cd:af:fc:e3:4b:05:28:d1:56:
6c:19:7a:1c:ee:2a:16:19:37:a8:60:30:01:d9:2a:
c7:4e:fb:5a:56:b1:8e:8a:3e:14:3e:ac:6a:d1:f3:
98:9c:5a:f7:f8:d4:c0:bf:33:57:9a:e1:ca:2b:c7:
20:ea:cb:87:fd:dd:ea:b0:80:98:cb:1b:8d:31:d5:
9a:01:ed:82:8d:a2:aa:16:7c:5a:01:d5:f3:6a:3a:
e2:14:07:43:8b:e0:48:a8:39:8e:b7:d5:c8:24:63:
a5:65:03:3c:69:d2:8e:90:8e:1a:c1:24:0e:6e:51:
fd:42:75:58:d4:e3:6a:16:13:bc:aa:57:af:c9:21:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:EB:77:10:45:3E:EB:36:5C:CB:40:85:A3:95:13:DC:57:B5:3B
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:17:bc:22:fa:5a:5c:82:1d:ff:a0:5e:42:c4:ef:c0:0d:
8b:02:51:be:5a:6b:48:e6:8c:eb:c5:93:c1:66:54:78:96:91:
aa:34:19:ed:c4:76:61:fd:29:bd:5c:4f:cb:e9:69:ab:92:ae:
18:1f:3d:ea:d8:b3:95:04:61:d7:46:51:8f:8d:0e:8a:82:e2:
92:76:0f:8a:14:0e:6a:0a:32:1f:9e:33:03:33:2d:c0:76:90:
2c:1e:bc:ef:18:02:3f:84:f7:2e:fe:47:2f:5c:75:1e:ac:b4:
bd:cf:b5:a8:a1:6f:ae:2c:c3:e6:8e:d7:00:95:3f:27:7b:fa:
1b:89:a0:ad:81:3f:a8:7e:78:e5:29:62:b2:ac:60:f8:32:28:
4f:15:13:4b:71:44:12:19:a3:af:ca:3d:12:64:5c:5d:17:35:
db:55:04:53:b6:a4:c0:61:f4:68:46:81:ae:ae:35:83:82:c0:
c9:83:09:ed:e0:1c:e3:67:98:59:2b:f1:47:54:0b:4a:5d:ec:
47:9c:9c:4a:a7:02:2a:13:76:81:36:66:9d:a1:c0:50:dd:ae:
1d:88:7e:66:b3:12:48:d4:02:eb:65:f3:99:53:ba:32:dd:d9:
00:32:65:22:00:77:cf:a3:8a:2e:50:7c:fa:90:f9:91:ad:85:
59:7d:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:16 2025 by rpki-client