Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: 19REpLXjt3kGPkSyVJNslDYtVYtuxYt9qwrHNcwU58A=
Subject key identifier: 28:5A:68:B6:47:47:D8:60:73:C7:95:A6:C1:45:6D:F8:1D:95:87:F1
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 0194BC04AFA0CD300C531C1A79AD1306E6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 1198
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: n1/jFADvMmYJr5Q939gxx1pI4nzGfYRIOi6dGYACfE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:af:a0:cd:30:0c:53:1c:1a:79:ad:13:06:e6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=285a68b64747d86073c795a6c1456df81d9587f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:c2:d3:3b:65:f0:ad:7e:67:c0:d8:27:cc:
17:de:1c:20:da:03:11:5c:e5:51:77:37:49:a9:48:
5e:d8:68:9d:f8:6a:99:30:57:32:a4:48:37:68:35:
fa:64:cd:12:f8:c5:bb:5a:04:ed:7d:74:8d:02:23:
15:6c:76:48:22:e2:b3:0d:db:8e:c6:97:d4:32:f8:
2b:fb:88:81:16:13:6c:91:d5:42:38:9f:b0:5b:5d:
f5:e6:d7:d2:e3:a5:7b:99:93:78:01:1f:ec:0c:06:
1b:bf:c3:cb:eb:df:f5:b7:d5:10:05:c1:02:85:40:
2b:f0:e1:d3:4b:d8:29:15:53:cd:87:24:c4:07:47:
d9:c1:0a:41:13:69:73:b9:86:ac:70:df:18:17:5d:
89:cd:ae:fb:fd:ae:6d:61:f6:f0:1f:9c:c5:c2:49:
09:a6:9a:44:6c:aa:39:34:73:89:fe:9c:29:07:a5:
33:2f:e8:95:cb:30:72:10:07:86:52:ef:b7:aa:7f:
f1:ba:03:cd:3c:5d:87:68:11:6e:db:4b:f3:f0:32:
d5:8a:b2:33:83:02:35:98:c1:68:06:1b:d4:32:87:
46:bd:01:f3:8e:0f:d9:43:7a:e5:4c:d6:bb:9d:ed:
2c:00:14:f8:a5:9d:a8:e6:89:f2:a0:78:e1:44:23:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:68:B6:47:47:D8:60:73:C7:95:A6:C1:45:6D:F8:1D:95:87:F1
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:9f:88:3a:5d:b2:eb:eb:b1:e6:a7:75:6d:f0:85:e5:13:
1e:69:5e:82:d5:76:22:f5:94:a4:2a:82:74:95:ff:71:4d:45:
ee:54:9f:6a:18:f4:28:58:97:5a:66:6b:b0:a5:49:2b:6d:33:
b2:24:cc:4d:12:e9:97:76:7e:8e:80:38:64:e0:3d:4f:bb:fc:
96:93:6a:ce:dd:7b:6f:58:b4:10:d5:92:ec:b3:8f:23:49:75:
21:e6:04:91:1d:70:dd:74:6f:79:2a:98:ee:f1:dc:c6:5a:80:
0e:1c:c8:e6:6a:b2:a2:f3:ee:01:b3:bc:03:b5:dd:8a:57:b6:
03:ba:90:97:18:cc:16:25:b5:bd:4e:72:42:98:e6:ae:1e:a9:
3d:bc:93:c0:ff:93:f6:4b:7f:f6:9c:fe:bf:67:4f:7f:3f:81:
b1:44:82:72:55:d2:f7:95:f7:09:0e:dc:31:db:a9:0b:81:ce:
ed:09:fa:53:ea:8c:5d:62:fe:92:2a:57:38:f6:c8:27:e8:21:
14:b8:aa:ab:7d:ce:58:c7:61:69:77:4a:8f:1f:95:33:8e:b7:
f0:8d:04:b0:b5:72:a7:49:ca:d5:15:da:23:b7:07:af:5a:3d:
9b:d2:df:c7:81:4b:78:ec:29:9d:83:e3:2b:33:4d:9f:6d:26:
f7:d2:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:21 2025 by rpki-client