Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: SlpFK6vQalPAiSLXeG9Azyo7Z7CiP3RYcb31OnGszTQ=
Subject key identifier: E9:2D:F7:D0:38:31:41:53:50:CD:9F:38:5F:9F:29:F1:F2:5E:2A:74
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 0194BC04E22FD5EEBAB0A5C320008B6E4F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 07D4
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: VPKbhcCDtBKgHbOBIlZ0H0Am4unQNIAmQ+69egjSqkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e2:2f:d5:ee:ba:b0:a5:c3:20:00:8b:6e:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=e92df7d03831415350cd9f385f9f29f1f25e2a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:c5:b8:66:7f:0d:48:12:97:0d:b3:bd:c6:
35:08:a9:56:4c:fd:16:b8:22:4c:b4:52:f8:97:1a:
de:f6:8f:2c:13:e9:15:2e:64:ab:fd:25:c8:d7:87:
0a:47:4d:35:0f:31:a4:f4:f7:56:29:e9:37:4c:57:
45:f1:50:0b:9c:2d:a3:14:f5:cb:fd:79:af:96:55:
b9:49:cf:0c:91:57:cb:78:e7:dc:2f:14:00:ee:64:
20:e6:f8:c1:31:61:67:d0:fe:39:09:13:f3:de:56:
7e:93:25:41:10:54:64:d2:f2:e4:1d:f4:a0:f6:4a:
7f:38:9c:29:bd:d7:57:5a:99:f3:07:b0:45:83:96:
cc:b0:65:73:46:2a:fd:ed:9a:43:8b:a8:7d:5b:15:
bb:aa:b5:ad:a3:c8:05:f0:74:ac:39:63:12:56:a7:
c5:45:27:5c:b8:53:03:3f:07:a8:77:0e:bc:a1:c3:
c6:dc:b9:8a:7a:a9:2c:03:ed:b9:e4:28:f8:60:a6:
66:51:39:7b:0d:17:64:5a:6d:23:82:c1:01:65:1f:
74:e1:26:7a:2a:3d:69:ca:b5:e9:7a:6c:58:e2:21:
07:3c:bc:8c:fc:33:94:97:fa:e9:6c:f8:04:a7:cf:
66:22:13:fa:f9:c9:74:bd:94:9e:01:59:47:cf:6e:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:F7:D0:38:31:41:53:50:CD:9F:38:5F:9F:29:F1:F2:5E:2A:74
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b2:18:a6:77:55:2d:c7:c8:c6:cb:96:ce:d8:7f:65:30:1a:
d1:69:ba:c2:f6:2d:bd:38:46:8c:bf:e5:0f:e6:e4:45:a2:bd:
dd:fc:56:5b:ef:bf:5d:28:b7:d2:78:a4:d0:0c:dc:15:9c:3d:
98:d6:47:14:4d:9e:1a:29:65:94:47:2e:3b:8f:f0:67:0c:b2:
8b:60:86:70:9e:c4:4c:ed:41:5a:51:4f:68:d8:bd:dc:73:ec:
34:7f:c9:ae:68:dc:50:cb:79:0e:6d:93:a8:99:93:3f:2f:df:
59:4b:d8:10:24:17:9f:aa:7e:aa:6e:0c:71:09:41:8e:05:c9:
65:b8:69:a6:eb:d1:aa:90:16:5c:60:31:64:6d:b8:5f:de:06:
4f:cf:33:a8:e2:b1:b3:f6:40:06:c2:58:e0:20:d6:e8:40:40:
35:a5:47:ae:8b:7d:06:4c:dc:74:98:f9:9f:e2:ff:8b:b6:d5:
d4:97:6e:88:13:65:f8:12:09:36:22:33:5d:f5:84:ae:69:04:
af:f7:53:c7:4d:5f:ec:f6:c8:e0:93:f5:15:3a:4b:88:eb:54:
1f:63:3f:c9:81:3f:b2:71:da:52:76:6a:49:32:ea:4d:ff:6a:
d5:45:dc:c5:95:cb:01:a4:b6:43:e4:67:a0:d3:32:58:ff:fa:
cb:aa:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:30 2025 by rpki-client