Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: gMfe6mtFOULAEk4bgiVrNs60oT6YrL3YQtmaEXFML8s=
Subject key identifier: D2:CA:6C:54:C3:B4:37:C5:B7:C1:9A:21:6D:D3:67:DF:E3:72:FB:EF
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 0194BCA9BAEFB653DC9D2FFB515B29F3687B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: 8y/nVIT6Nd4862Vf/2MS1kjzpLyyv1WMTBLOu38rQAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:ef:b6:53:dc:9d:2f:fb:51:5b:29:f3:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=d2ca6c54c3b437c5b7c19a216dd367dfe372fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:0c:6d:ac:cc:e6:f7:23:6c:91:5b:69:47:
b2:83:df:ea:cf:86:ba:29:e7:35:a0:46:12:e0:83:
54:88:33:dc:96:fe:f0:78:4a:d8:71:78:8f:f2:de:
44:11:91:38:b9:b0:ad:4d:d7:20:18:06:b0:6a:49:
27:67:3c:2e:cf:fc:52:a9:3a:74:60:e4:0a:0f:98:
2d:40:73:e4:a8:ac:01:03:68:75:1e:38:8e:fc:4b:
35:60:35:48:6a:78:1d:f1:d8:ff:a4:13:b2:fe:76:
d9:b8:ea:b4:ee:2a:c4:aa:50:58:da:f6:9e:96:2b:
0d:14:0a:e3:82:c9:11:f8:8d:b7:20:fe:0c:c5:21:
9f:49:f5:be:68:53:dd:8d:07:00:1b:a9:d5:e1:3d:
7a:0f:56:67:4d:46:b4:d6:17:09:9f:e1:f7:af:16:
6f:dc:41:e1:7c:19:57:25:02:85:1b:06:e8:7f:85:
10:84:9e:22:3d:fd:44:be:dd:1d:18:f3:fb:df:db:
d4:0d:8f:1b:fd:6f:29:31:7e:f6:a0:34:df:ec:01:
9e:c4:27:e6:e5:aa:66:7f:59:99:6b:ba:a1:fd:2d:
ec:93:b8:7e:f9:42:79:77:29:bc:0f:cb:0e:93:62:
c0:01:92:27:20:5a:73:3f:87:01:00:e6:b7:56:c1:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:6C:54:C3:B4:37:C5:B7:C1:9A:21:6D:D3:67:DF:E3:72:FB:EF
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:be:b9:24:78:4f:d7:f6:3d:0f:a6:9f:75:31:8e:c6:a4:9d:
63:65:80:50:ce:a5:ec:70:72:73:55:99:73:7a:52:93:cb:41:
10:09:05:37:d0:fb:22:ac:5b:7f:cd:3d:f1:f8:09:fe:65:56:
64:55:6a:34:5f:af:0b:59:a0:5f:15:10:18:19:5a:4b:a0:c0:
ab:81:78:2b:61:dc:21:5c:e1:f5:00:b0:7c:41:b0:c4:7b:d2:
9e:88:95:18:34:ed:e5:f9:26:ed:09:86:c0:66:58:cc:4f:6d:
26:1b:4a:93:1b:59:a9:44:51:65:77:e5:3a:c3:2e:1a:6f:2f:
01:6d:28:a5:8d:1f:5a:0c:9b:af:e9:69:bd:2c:a8:a9:0a:f9:
99:2c:b3:69:c2:87:9f:6f:3a:d3:60:88:32:bf:b8:40:72:25:
66:06:d9:01:64:af:53:6e:6b:f4:3d:f1:58:86:e6:c5:92:52:
64:8e:e4:70:fe:61:ac:08:e9:ee:9b:7c:34:5f:26:89:4c:59:
d0:7a:c7:37:f2:81:e9:ef:8c:ef:9f:66:f8:59:0f:ef:d4:7b:
3b:00:1d:a3:dd:ae:75:c3:ad:de:98:54:f1:75:7b:61:c2:40:
eb:13:63:d8:80:11:8b:68:18:a5:c8:08:97:f3:32:f1:7e:5e:
d0:d1:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:41 2025 by rpki-client