Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: zjAkw1BVJwJIItrcXoUK71YoshkzRz64PdyqUZsOzl4=
Subject key identifier: 8A:18:F6:E6:8C:F2:91:33:D7:A7:2A:EE:29:9D:9A:96:90:66:7E:E2
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0194BCA9E3FCE275D51ED18ACEDE0A62CE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 0FE5
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: HM+Q2V73noZEUIoG6/HimcmeetB1RIIH7ozIhjMXX/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:fc:e2:75:d5:1e:d1:8a:ce:de:0a:62:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=8a18f6e68cf29133d7a72aee299d9a9690667ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:6c:8e:06:37:6b:05:44:ff:c1:63:23:2e:
1c:1e:49:ea:f2:4d:93:ce:47:20:ca:13:62:99:fe:
b8:0e:61:4e:43:c9:d4:17:7e:ee:72:45:1f:50:37:
7d:4d:07:a6:7e:1f:a2:c1:d9:e4:d4:0a:fa:32:97:
6b:78:f7:76:7d:6c:dc:2e:37:d0:0c:75:16:87:39:
d3:89:32:0c:49:58:93:b2:ec:b4:4f:48:e8:af:14:
71:ab:33:db:ab:9b:a8:b8:27:8a:1e:bf:4e:eb:e8:
c6:2a:4e:de:3e:4e:0a:74:e8:55:57:98:8d:dd:73:
b9:0c:f3:8c:ba:14:5f:50:7b:93:b1:68:55:a7:d4:
d4:c7:27:93:56:51:5f:d7:86:45:c6:fa:fc:fa:6d:
fa:ce:0e:84:2a:d1:5a:cf:8d:44:2e:85:89:0d:bf:
d3:cf:7b:29:f3:a6:8b:5d:f2:2e:a5:52:bf:14:64:
99:d2:9d:18:e4:21:e7:0c:78:31:bd:98:38:61:42:
77:5e:6f:e3:b6:7d:77:cb:54:b9:d6:9a:38:76:49:
a3:68:38:2c:ae:cc:cd:cc:93:bd:f1:30:d8:97:04:
d9:01:0f:0b:ba:ed:1b:4b:40:9b:ff:a7:a4:44:9c:
2e:24:b9:14:74:33:07:98:ff:fa:dc:99:8a:65:d2:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:18:F6:E6:8C:F2:91:33:D7:A7:2A:EE:29:9D:9A:96:90:66:7E:E2
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:3f:82:8f:9e:c4:4f:a8:6e:68:69:a3:9a:8d:9a:5b:36:
d0:0c:b5:6a:56:51:32:b2:01:da:fa:b7:79:df:70:f9:23:43:
7d:2b:0d:57:ce:01:19:c4:ae:d2:79:73:57:f2:45:e5:b0:05:
6f:79:0f:ea:e8:cc:8b:ac:ef:6f:0c:e1:66:57:99:3c:03:a3:
9c:33:78:3a:25:b7:aa:85:25:0a:7a:a6:86:50:d3:f0:21:f8:
7d:1f:ac:15:3e:e6:ee:6e:b7:f2:b8:d4:69:23:b6:af:5d:0f:
a6:31:6c:93:9c:11:6a:98:64:d3:d8:b2:d2:50:7c:2d:c8:cb:
00:41:de:f5:d0:e3:68:9e:13:07:cb:af:9f:be:2c:81:1a:81:
fc:a4:56:0a:5a:cd:6c:dd:1d:de:d6:69:fd:54:51:6c:44:8f:
47:37:bb:c1:37:46:ee:8f:7c:5b:bb:5d:a1:97:2a:b6:95:1e:
0b:42:e2:97:a5:c8:78:d4:1f:48:20:16:78:a1:db:bf:14:18:
e1:a3:fc:15:2b:f4:d0:17:1d:0e:ab:7d:74:9e:62:fb:83:5f:
01:f0:86:c3:4d:be:e9:a8:d8:32:e3:53:7d:94:d7:ae:12:26:
da:8b:c5:7d:05:90:01:c7:62:b1:6b:1a:45:77:d6:e4:ae:5b:
88:0a:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:38 2025 by rpki-client