Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
File: jsGCA8JVodC_FYdULHYm8mc41sE.mft (raw, json)
Hash identifier: 9F7FoXuVWE1bqnvAVZH+ZUOc+LExe1FKR/UJNJWnHhE=
Subject key identifier: 5F:B2:93:F7:BF:E0:EB:3F:1A:D5:92:EA:11:53:CD:BA:B2:DE:5C:B3
Authority key identifier: 8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
Certificate issuer: /CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Certificate serial: 0194BBCEADD9C516F90CA4EEA27B212FA307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: 1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa (hash: ZhrTMhUV4sHhyoVsR9aF9HG/oIRN8p5N/Yf6Wavtxpk=)
2: jsGCA8JVodC_FYdULHYm8mc41sE.crl (hash: Ph5OUqaM/cXU5bsdmz/X8mXheQQ1JWtOU2D/qshFWsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:d9:c5:16:f9:0c:a4:ee:a2:7b:21:2f:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=5fb293f7bfe0eb3f1ad592ea1153cdbab2de5cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:df:dd:83:93:9f:10:32:3d:37:60:4f:48:
29:cc:0f:03:6d:48:f5:26:45:a6:c5:12:cc:ab:27:
9f:c3:05:9a:80:e8:9c:9a:d7:e4:fb:7e:59:ad:e6:
b7:97:b6:60:50:df:39:23:e3:50:bf:c6:9f:8f:a3:
89:f6:01:db:bc:67:50:fd:c9:40:77:db:92:95:a6:
de:48:a4:d1:f7:56:11:b5:8e:01:ee:db:3a:5d:a2:
88:6b:ac:04:27:c0:df:7c:84:db:a9:b2:73:f2:68:
27:a6:39:7d:d6:08:01:2f:ca:d7:22:3c:49:4b:40:
5a:a0:27:c1:ff:f6:5a:bd:c2:93:81:4e:dc:e0:7d:
76:bb:33:8f:94:07:45:fe:84:d7:7b:ae:16:3b:a1:
6b:a7:5b:03:00:19:c0:38:61:94:d8:b6:f3:29:a7:
83:7f:20:1e:39:98:29:35:90:69:f4:bb:d7:d6:6a:
c9:34:03:8b:2b:27:f2:38:27:e6:59:56:ff:f2:bb:
7f:73:2c:41:fc:bf:89:fd:81:a0:7a:b3:6f:d4:a4:
03:a7:39:8a:90:fb:3d:7a:18:e8:5b:60:9c:bb:33:
95:26:98:8b:04:51:62:65:52:b5:ae:d8:b1:64:d7:
69:d2:7d:82:ce:85:60:81:ec:29:97:51:7e:18:15:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:93:F7:BF:E0:EB:3F:1A:D5:92:EA:11:53:CD:BA:B2:DE:5C:B3
X509v3 Authority Key Identifier:
keyid:8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:14:de:de:d4:0f:37:78:36:4a:45:4e:97:e5:99:ca:73:c2:
24:29:8d:e9:a7:c3:ea:8a:6d:a9:39:ad:f6:6d:0e:47:7d:23:
4c:99:43:ff:14:ba:5d:20:3b:94:9b:19:0c:73:44:6b:7f:f0:
71:c9:9a:59:a7:10:07:47:7b:ef:72:ea:8e:e1:0c:99:a1:f7:
27:62:31:3f:8f:d1:e4:63:57:35:9b:a4:c2:72:dd:6d:ed:87:
7f:90:a6:ef:1e:22:5c:cf:3c:6b:71:3a:b7:7e:5d:d3:8c:7f:
da:44:90:a2:bc:ea:72:fe:e2:fc:5b:fc:82:cd:b8:7a:50:6c:
62:6c:60:5f:5e:9b:c6:bf:83:fc:1e:58:b5:9b:8c:84:00:01:
54:02:ec:53:13:4e:d8:54:f7:61:ea:1d:13:a9:bf:09:07:50:
28:9e:26:5e:f0:9a:23:36:7a:6b:87:4a:67:1e:80:e4:95:41:
53:ec:8c:a8:71:89:89:9c:49:56:d5:f2:64:d2:c5:08:17:cf:
4a:53:23:60:1d:6b:15:db:a9:08:32:09:8f:d2:d2:bf:1a:8b:
61:33:84:bf:cf:16:b1:9c:cf:c6:a6:07:87:93:c4:57:0b:6f:
c6:e5:0a:bb:4f:2e:5d:5a:bc:f3:bb:26:ea:cd:10:68:77:f5:
1b:b0:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:41 2025 by rpki-client