Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: YeXRWrD6cuQGfKfbtn4WjIJtDa6PvWBQ8XX+6evYVr0=
Subject key identifier: F1:FD:A3:83:5C:6E:6B:CA:EE:05:52:F0:51:37:31:06:5E:48:81:39
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0194BCA9A44BE88CBAB7D87FA07640EC6690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: BFFnYAXl7gqc5YQP6CcoaLbjx2swlyYs4X+yUH5z6cU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a4:4b:e8:8c:ba:b7:d8:7f:a0:76:40:ec:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=f1fda3835c6e6bcaee0552f0513731065e488139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:7e:42:57:29:26:89:e1:30:41:9b:ee:e6:
a2:df:75:8f:0d:ae:57:09:3c:4b:09:4a:f6:2b:33:
29:5e:23:e3:23:61:32:48:41:55:e6:5f:78:37:a5:
5c:75:10:8f:8c:bc:68:c9:1f:5d:44:0c:5f:90:54:
cd:cf:14:23:7e:51:7e:27:e9:46:ba:40:8c:d2:e8:
3e:32:bf:32:84:69:0a:11:ce:aa:54:c9:b6:c4:6f:
34:55:81:4a:e4:1a:00:af:09:33:d6:7c:e8:44:52:
5c:36:cf:64:8f:0d:a1:cb:36:f2:fe:fb:ab:c7:73:
4a:f1:f5:e2:ce:0b:60:07:e1:f4:c1:f2:e1:21:60:
ea:46:0d:b6:ae:ca:70:cf:fb:ec:f3:a9:2a:9b:73:
63:16:f1:0e:86:95:5e:4d:3e:67:a4:97:17:d7:1a:
3c:4b:62:77:ff:03:80:41:8c:9b:dd:0c:26:06:61:
9e:89:c5:14:e9:89:cc:76:2c:63:a3:ec:74:55:19:
7b:4e:71:04:bf:fd:3d:48:e5:46:f4:be:d4:0d:ef:
53:6a:e3:f5:1a:a8:a9:b8:a6:19:f8:04:b8:43:88:
de:50:b4:ad:b9:82:e2:89:94:93:e5:57:45:de:a6:
da:5d:c7:b5:af:23:7e:eb:a7:ab:a2:19:1e:b5:83:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FD:A3:83:5C:6E:6B:CA:EE:05:52:F0:51:37:31:06:5E:48:81:39
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:54:b6:50:a5:40:34:05:a3:4b:80:76:c5:e4:41:d5:31:
b5:cb:fc:95:b1:41:92:cb:be:0f:18:62:f7:eb:af:36:61:28:
8a:1a:b1:60:ba:2b:bb:de:96:1c:8c:1e:9e:18:32:7a:5f:02:
37:46:3d:94:a3:7d:7d:ef:22:43:20:fb:69:93:74:d1:6d:5d:
31:9f:57:74:ff:3b:3f:f3:d6:17:e3:be:18:c2:07:53:e6:5d:
d7:44:81:72:84:11:6a:81:97:b9:f4:25:f2:56:25:1a:28:93:
91:f8:95:ec:f5:25:43:59:e0:18:36:29:e2:8f:ba:27:4d:89:
aa:f5:35:a5:41:4a:ea:e0:03:24:ce:ce:b8:0a:4c:24:6e:70:
4d:4f:92:bb:44:01:51:21:18:fe:11:9f:d5:e4:1b:e6:4c:7f:
71:3b:39:3f:9c:13:e9:28:32:5c:cc:4a:08:51:17:dc:1b:a9:
1d:82:a6:21:f0:5e:c7:04:cd:d2:51:f4:2a:6b:59:1f:3d:f4:
2f:70:0f:51:ee:62:e7:7f:6b:26:2a:3a:1d:7a:b8:d9:02:dc:
2d:fa:12:21:24:18:4e:db:59:0b:0e:e1:0c:74:75:47:a9:fe:
50:cc:a5:f3:9f:01:42:ce:8b:95:bb:5c:72:b1:0b:fa:a2:ab:
d1:91:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:34 2025 by rpki-client