Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: ejxwL7RaLdo4Jdsuzm9f9UTsdu9ikfu12eA1dZ3OdBA=
Subject key identifier: 00:00:24:28:A5:02:6B:9C:05:0D:C0:E8:8B:2B:B9:DB:CC:B1:C3:74
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0194BBCDEE826E0E7DA3D7EE314C037EEFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 3E
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: 6lJOEvN6U9MeWDVTgT61qlzgjjCiSsJ59tTCy9JefSk=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:82:6e:0e:7d:a3:d7:ee:31:4c:03:7e:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=00002428a5026b9c050dc0e88b2bb9dbccb1c374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:a7:c1:f7:76:81:9e:6c:13:03:06:a7:00:
1b:96:ae:ba:75:2e:a2:72:9d:e1:66:9a:9b:80:5b:
8a:c1:80:d9:82:70:95:36:b1:b7:0b:0e:67:b7:cf:
1b:fc:12:5b:cd:06:af:ae:de:22:1e:b4:77:b1:77:
04:71:5f:9f:00:50:56:39:0b:ed:6b:58:5e:47:88:
51:7a:c7:d7:b9:cb:42:de:63:98:80:b6:5e:49:8d:
12:9b:9f:00:e5:ad:e8:7b:f0:25:08:0e:f0:99:57:
22:e6:08:c6:25:00:14:2a:dc:32:eb:4c:9a:97:dc:
a5:b3:1f:e8:c7:6d:27:1e:32:f0:f8:3a:63:7a:85:
09:0d:80:d3:a8:d0:52:58:12:13:74:a7:11:f1:0c:
bf:76:33:f3:5f:49:ed:3a:3f:8f:43:71:25:8d:0b:
76:aa:bd:bd:13:ac:da:7b:82:26:c5:7e:8a:dc:b2:
0c:b5:9d:93:da:91:44:4c:c1:22:0d:de:af:9d:dd:
e5:f4:03:8b:69:c7:59:da:12:f9:75:a1:24:43:81:
3e:f9:dc:50:48:e7:72:e4:2c:49:36:a1:44:17:2c:
13:7f:32:64:b1:fb:3b:d0:8f:b9:03:ae:18:9b:4b:
4b:a6:28:ab:7f:3e:9e:24:8c:2e:e4:77:82:48:59:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:24:28:A5:02:6B:9C:05:0D:C0:E8:8B:2B:B9:DB:CC:B1:C3:74
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f7:2b:3a:a6:0d:8d:66:39:10:7e:81:fe:65:d3:e3:7a:b4:
aa:01:e1:dc:21:f7:f2:37:23:16:0f:c5:7a:84:6a:42:2b:f6:
ca:80:8e:95:3c:ad:f7:94:1e:a8:77:7c:e3:d8:61:03:79:07:
c1:c4:62:08:2f:1e:5f:7a:11:01:81:c0:ee:ea:6b:b0:e8:50:
71:31:e8:83:d9:0f:2b:ee:eb:69:c8:81:c6:e3:ea:31:73:19:
07:05:16:f6:00:ba:50:23:b2:20:a5:01:12:9f:d4:cd:0e:76:
92:84:00:66:da:a7:94:05:ac:ef:56:8e:38:dc:e0:38:75:a6:
49:31:74:ee:02:1a:95:89:ce:e1:89:65:8c:4b:59:11:d5:28:
21:e1:8e:51:6e:8b:8e:44:9c:8a:16:cb:5f:88:95:9f:e9:40:
65:d9:1f:b8:2b:ba:0d:08:0a:2f:d6:6a:52:4d:a8:cd:48:16:
34:34:31:a2:0f:20:06:8a:20:4c:a8:4a:7e:02:e1:e8:42:dc:
04:bb:2b:39:6a:48:62:31:e7:a2:a3:fe:16:1c:42:66:5e:50:
85:3f:66:2e:15:59:d9:e8:64:40:7b:f0:dc:95:51:e8:20:af:
2f:05:9a:83:05:e6:6d:9e:0b:8a:8a:9e:43:97:df:35:ac:48:
d1:fc:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client