Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: kPT4m3Clezq0kCZmBZsj6H1C3evt6G9dD6+HoD9dHl8=
Subject key identifier: CE:FC:76:8A:29:C5:FC:A4:4A:63:58:75:4B:B6:BD:86:5E:A2:CF:C4
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 0194BC04AD157FF30F8F7AC5AF63CA7349F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 02ED
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: ZQAyFws7DTZX8u1fY_j_CXtWmSw.roa (hash: rqxW0DHYx0WB4ZZV6XWEMvjksg8LNQ4dfFaekkzMvBk=)
2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: v9+FRgVnm5/vprTg8run5bNAdb6Wx70rKpm2Pnq9AsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:15:7f:f3:0f:8f:7a:c5:af:63:ca:73:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=cefc768a29c5fca44a6358754bb6bd865ea2cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:1b:ba:dd:e4:3a:38:05:29:72:fb:55:43:
42:55:ba:1f:b1:b3:6c:97:4b:92:13:7d:34:13:24:
8b:e6:88:0d:f4:8a:2c:82:71:83:de:fa:2d:95:b9:
6f:c4:a5:8f:a2:5b:bc:37:b6:38:e4:b7:f5:1e:5d:
b1:cb:e2:54:57:0c:2d:7f:d4:e3:3f:60:d8:03:86:
0d:f3:33:58:04:6e:93:2b:35:23:e5:25:8a:c9:02:
8c:52:a5:25:eb:d9:86:4f:94:2b:39:13:ca:d1:68:
cb:ee:af:92:11:90:e5:cb:8a:15:d8:a5:a7:67:f0:
89:4e:35:61:4a:33:be:2f:a3:7e:9f:1c:03:86:fa:
db:57:d5:6b:be:1b:87:0d:00:9e:62:7b:b8:fd:3e:
5d:8e:fe:30:71:b3:49:67:56:37:3d:36:1b:cf:a1:
11:57:76:fa:13:c7:c3:01:9e:67:ff:ad:10:b2:f0:
02:c0:22:4e:95:94:ec:ab:f9:ca:a8:3c:c5:62:65:
5f:e1:0f:2b:05:10:9f:46:d4:93:f2:83:c1:d0:5f:
b6:81:24:ed:bd:ed:34:81:df:6c:d1:32:2c:f5:53:
8c:f8:6e:60:17:c8:e7:28:9f:75:e0:dc:1d:a8:d0:
8c:13:a0:5a:c8:76:4e:08:d8:f8:45:07:97:7e:eb:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:76:8A:29:C5:FC:A4:4A:63:58:75:4B:B6:BD:86:5E:A2:CF:C4
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:c8:3a:9c:65:61:57:fa:3a:df:6e:ba:2d:6e:03:ac:fe:
b7:30:95:bf:f5:e2:4e:c5:a3:ed:36:aa:41:be:89:37:e7:be:
a1:0d:f4:58:12:7b:63:3a:7f:86:17:77:e6:03:fa:28:24:53:
12:09:4b:8e:e0:a5:99:29:65:94:55:0e:0a:87:fe:f3:f2:0d:
5d:e6:01:9a:b8:af:0f:18:a3:d2:cb:8e:e2:25:c0:c3:43:0a:
ed:51:fc:d1:9f:47:64:b9:3c:c7:59:96:6c:a7:3b:8e:e2:1d:
ba:55:db:aa:8a:16:0c:51:d3:e8:1b:5a:c1:d6:b4:81:17:83:
67:e2:da:c3:6b:66:f9:e2:1b:6b:a2:8b:e7:a7:c7:48:55:58:
14:ac:66:ec:2c:2e:2d:a2:ea:33:0a:c8:c7:2d:7b:09:6a:19:
37:02:dd:d0:2a:f9:88:0f:1e:9a:ee:9b:4a:88:e8:a3:ac:bf:
d1:fd:7d:fc:9c:7b:87:49:94:5a:51:ef:98:88:d4:71:49:ab:
5b:fb:03:50:7b:cd:f5:02:9d:66:66:6a:22:55:a3:22:11:fe:
6f:cc:2c:d2:73:ef:43:d9:e6:e3:3e:cf:69:7c:f2:59:db:ea:
20:fa:05:55:dc:05:16:74:da:cc:15:81:47:e8:90:4c:7e:88:
ec:cf:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:50 2025 by rpki-client