Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: ryZYpA0bs1urnC71fy0LrwbQyQeZ7rGVB83VMoDZ7KY=
Subject key identifier: 59:E4:01:5D:53:AA:4D:68:0B:AB:97:F9:88:27:24:A1:53:F7:59:A1
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 0194BCA9DDB85845F19BCC94CEB37254A9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 0173
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: Yj8i/Bhp/nFLt5H/xC8zQ8UgHCpQoG7mvHQ9NRNCgPs=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dd:b8:58:45:f1:9b:cc:94:ce:b3:72:54:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=59e4015d53aa4d680bab97f9882724a153f759a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:e6:77:92:9c:08:87:cf:aa:9b:f6:1f:57:
b7:9d:fe:f7:19:ca:54:4c:b0:4d:c0:05:06:06:35:
67:b5:45:77:45:9e:6d:bd:7d:1b:3e:38:ae:94:1b:
d4:0a:f0:8d:4c:d8:91:20:03:04:df:16:c8:0a:2d:
1d:07:95:7f:31:ed:69:be:02:74:f9:08:d9:c3:48:
ef:54:38:ba:3f:cd:1c:69:fd:5c:87:a6:a1:f2:81:
ed:b7:0c:21:52:dc:0f:66:38:47:50:92:e2:fa:7b:
77:4f:64:c5:d1:5e:b3:c9:f0:56:30:14:37:56:e5:
47:35:0a:d5:4e:a7:7a:f1:8e:2b:83:ce:21:e5:c4:
59:86:f9:9e:84:0a:6b:1a:ad:99:c8:ec:f3:ba:c2:
8e:12:a7:6b:38:c9:b3:f9:17:50:65:ad:71:e6:60:
9c:a3:1c:2c:bf:da:3a:2d:4f:60:11:4f:cb:2e:71:
bc:38:d7:13:c4:6d:b3:bb:b5:fa:de:9f:9b:6d:a1:
df:a0:d4:6d:16:5a:1a:50:be:37:6e:c6:a7:21:7a:
f1:eb:8d:e4:36:6d:69:11:56:46:3e:34:c0:e8:61:
b6:6c:1e:59:4e:e2:0a:a5:d7:d5:61:6a:11:fc:0f:
cc:c4:50:a9:11:62:13:ff:c7:ab:1a:08:57:21:dd:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:01:5D:53:AA:4D:68:0B:AB:97:F9:88:27:24:A1:53:F7:59:A1
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4b:8b:0c:66:61:7b:42:d8:32:94:ef:a7:19:ef:29:d9:f4:
42:2a:29:8b:14:0a:49:66:66:63:c9:6c:b4:4d:2f:52:30:ff:
91:13:18:e9:62:f5:1e:79:ea:b7:41:b0:c9:8d:dd:92:32:7c:
d7:5f:d5:8b:c2:c5:1d:47:83:41:07:a5:99:1c:56:e5:09:1e:
83:5a:f2:0e:b0:eb:9e:c4:50:bc:23:23:a8:3d:dd:6a:fc:28:
f5:4a:13:65:8e:7e:7a:18:0c:28:a5:f5:f9:b3:6b:bd:78:5c:
cd:5c:7c:d3:45:1b:35:ff:d7:10:fa:db:f6:b4:53:bd:d3:59:
7c:f8:a0:da:05:2f:cc:8f:8b:74:9c:37:c7:a3:69:75:95:05:
98:c1:aa:26:03:a8:b3:23:ba:30:6c:b1:fb:c8:11:75:83:73:
52:c9:54:15:2d:ef:0f:84:d2:d7:9b:ff:d2:9c:93:99:a4:67:
62:f8:fa:a8:9c:71:50:1f:b1:93:e7:3b:98:40:b6:9f:a4:44:
e6:63:94:5d:66:13:6b:00:74:79:22:8e:9b:11:4e:00:82:c1:
ce:3f:7f:c2:1b:34:1d:e9:93:52:47:5c:9f:42:88:d6:72:fe:
58:82:31:fb:d4:1e:79:d8:c7:04:65:b7:a3:be:d9:b9:6c:13:
a0:38:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:27 2025 by rpki-client