Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: Xpq7tj4m0Oj1qu8hUCrTInXhKn0W8FJqMzs40LZkoN4=
Subject key identifier: 47:10:29:CF:6B:15:06:71:00:55:FA:E1:D2:41:89:FE:5B:A4:FB:82
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 0194BCAA1F709F2D1C07D89AA021066BE45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: 9+6w7bTRM85a8l8WPvYVQswhAEz4tsht2uwh2B2m72A=)
2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:70:9f:2d:1c:07:d8:9a:a0:21:06:6b:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=471029cf6b1506710055fae1d24189fe5ba4fb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:db:bd:89:e9:34:14:6e:c4:ff:f0:d9:9e:
12:19:36:b4:b4:1d:a7:b1:f1:9d:3c:3e:ce:17:cc:
37:f6:33:0d:39:b5:6c:da:4f:d6:9e:8a:a5:45:37:
98:f4:9a:a2:9a:a9:1e:ec:ae:2f:f5:30:52:5f:1d:
d8:fb:53:8d:c7:d5:91:51:cf:66:ae:f8:a6:58:ad:
c1:93:54:b4:99:d8:25:d8:b6:cb:ff:94:23:27:e4:
c4:25:c9:25:76:dd:4a:94:73:ca:46:32:f4:67:5c:
f1:3b:00:24:30:fb:92:d2:82:7e:7e:85:56:b2:5b:
23:a5:8e:8f:f5:b1:a7:9b:b4:db:6e:ff:ec:9e:75:
54:ae:db:a0:dd:98:0c:3c:3a:ea:65:95:14:4f:95:
be:c7:f8:aa:f5:94:e5:4b:3f:41:04:35:ca:51:f7:
62:3e:9d:4e:3b:fb:b8:b4:62:d1:9c:93:dc:a7:45:
67:05:be:37:85:50:0b:65:3f:15:42:99:7b:93:86:
1a:2f:7d:3b:d9:4e:5d:16:99:c6:e8:94:bb:1d:c0:
79:33:b2:12:31:f1:40:2b:1b:31:59:c0:e0:fe:ec:
5d:22:43:41:b8:b4:95:ff:7a:c8:0f:b1:66:e1:ff:
50:e6:7a:cd:f7:9d:02:23:94:84:46:d9:5a:15:30:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:29:CF:6B:15:06:71:00:55:FA:E1:D2:41:89:FE:5B:A4:FB:82
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:51:24:d6:30:60:ff:3a:ca:5b:62:56:56:ac:8c:8e:67:
11:eb:d0:3d:f8:75:ff:e8:b7:2e:04:3e:bc:84:67:b5:10:bd:
1a:ec:43:44:88:6c:b8:34:b4:af:70:3c:c3:df:cb:ad:48:98:
46:eb:ec:4d:73:83:e7:07:77:ac:b9:6e:c0:4d:f4:40:5b:cf:
28:e6:83:2b:8a:90:fe:96:43:5e:ad:b5:98:31:de:93:9a:01:
e6:fd:17:90:9e:e3:e4:72:ee:b7:28:1e:c1:c1:1b:34:aa:7e:
37:22:96:5b:52:78:a0:15:ce:86:24:5b:5e:17:a9:d5:00:3a:
bd:8b:be:19:47:f7:6c:29:92:17:bc:37:05:55:3d:b2:8f:9b:
43:70:25:11:fd:db:23:50:6c:69:c9:50:ca:e8:a2:75:b4:75:
cc:4b:b7:4c:81:70:72:58:5f:0d:77:60:06:3f:c0:f1:64:8b:
7c:36:7b:9e:d5:32:f4:f5:d4:21:1e:be:c6:dc:9b:d6:eb:93:
0b:1f:ac:d4:3e:93:55:6b:41:b4:aa:5f:3d:0a:8f:2f:13:48:
d4:3f:e7:fe:c1:93:d2:99:50:9d:55:3c:2e:bd:fc:66:a5:5d:
a4:8e:c6:ba:b5:e0:19:89:5b:54:fc:d5:f1:a4:36:f8:c9:73:
82:f6:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:39 2025 by rpki-client