Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File: J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier: cnPaVq81tb9VwO/nJPqMo5cFJgz0EAmAQaLQNLKqqvo=
Subject key identifier: 11:A6:87:F4:22:A3:97:D9:B1:DB:E5:D6:47:65:ED:7F:0E:4C:F6:A6
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer: /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial: 0194BCAA3D0AA4C74E4ADA9837E517DBA360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: GXgE3cVXB3yh8j8HVvY8fOKb2EqbHw7ayQaL3ieihFQ=)
2: W2Bt5n75RL1yPisK5n22fF2D8bI.roa (hash: paOvg+wgSlBKgewYZP5vibp/Ng8VGrHC/AvIdfss8fE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:0a:a4:c7:4e:4a:da:98:37:e5:17:db:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=11a687f422a397d9b1dbe5d64765ed7f0e4cf6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:75:5e:66:f2:1d:7d:d5:b2:15:8e:27:61:
d3:01:1a:65:e0:27:41:bd:68:a4:0c:02:68:28:56:
95:0d:ac:99:77:47:6c:82:31:12:ce:7b:d5:4a:82:
8c:eb:a6:4e:72:43:eb:cd:75:2b:10:d6:d1:cc:7d:
45:3a:0a:69:a9:7f:79:ad:75:8d:79:ee:47:48:07:
e7:41:63:57:06:72:3d:56:d3:7b:96:44:23:1c:2a:
dd:07:4e:62:22:e6:9d:5d:74:ad:47:32:2f:42:96:
82:e5:b0:7a:3e:44:2c:0d:08:6e:b4:78:00:47:8b:
fc:b4:aa:3c:50:55:4b:6a:10:6b:e0:dc:81:22:ce:
b7:94:7e:7d:09:bc:7c:dc:b0:77:9e:e5:8d:08:6b:
d1:ce:36:1e:ac:99:68:23:d9:8e:07:5d:63:d5:3c:
52:b9:dd:46:25:ca:10:a9:39:45:ea:ab:49:59:01:
2d:81:70:8a:d6:ac:2a:2f:a6:d2:5f:62:d1:8a:a7:
e5:fe:58:00:75:87:57:15:eb:17:b8:85:c8:5a:6e:
0c:47:1c:22:fb:f0:a0:81:96:73:46:29:19:cc:87:
d7:f4:0d:07:91:27:18:1c:d0:be:1d:af:16:2b:ba:
58:d1:e4:0b:2c:d3:f8:f6:b8:7e:dd:ea:62:c9:f9:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:87:F4:22:A3:97:D9:B1:DB:E5:D6:47:65:ED:7F:0E:4C:F6:A6
X509v3 Authority Key Identifier:
keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:8b:fc:63:73:b2:97:56:8d:34:1d:29:50:87:35:a5:ac:
84:89:50:ce:a3:e2:2f:00:50:09:84:bf:97:94:05:98:68:76:
8c:e6:b8:9e:98:bc:20:6d:ee:10:ea:47:a9:21:d0:90:a7:ae:
76:1d:2e:fe:eb:1d:ba:18:45:73:7f:4b:c1:ac:c2:79:ea:4f:
6e:b8:07:ae:3b:ef:8d:59:65:c8:b7:54:b4:7a:76:89:93:41:
08:95:09:45:51:e6:3b:45:44:bd:82:0d:6b:47:4e:45:d7:16:
07:6d:36:82:27:1a:c9:3e:38:49:97:f7:8f:8f:e4:e0:d9:63:
e3:fe:0f:c6:c8:80:51:c9:db:21:e4:b7:9f:92:5f:f5:3c:3c:
84:d5:8c:0a:44:9d:2b:3c:68:aa:0e:2f:67:a0:ab:99:cb:76:
ff:73:4f:fb:bc:b2:55:c3:f4:d1:39:52:b4:0c:5f:94:30:31:
f8:e5:b9:a7:ad:86:7d:a9:c7:c7:ca:d8:e9:d1:e9:a5:ef:f3:
7f:95:90:82:73:48:24:ca:03:2b:1f:5a:f1:9c:b3:02:94:10:
62:8d:a5:51:b6:3a:08:fa:41:91:b3:37:90:20:81:96:ac:fe:
f0:a3:c5:e3:6a:cd:6f:de:d0:60:ac:b0:d0:ac:d5:71:62:24:
55:92:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:26 2025 by rpki-client