Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: WIN27M0UQygmpbshyTQBR6y9KpQSwJ5Dg9WozPkdD/o=
Subject key identifier: FA:84:3D:6B:C7:DC:6C:02:BA:9C:7C:F1:83:0A:AF:E4:C0:D6:64:0E
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 0194BC0508663F1A8C93B5DADBD33B2373CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: dE4ibgrAgEmbPo38aWaTviMYpjKxVha7In1pbJL08fA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:66:3f:1a:8c:93:b5:da:db:d3:3b:23:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=fa843d6bc7dc6c02ba9c7cf1830aafe4c0d6640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:83:c5:b4:ed:a3:57:f3:a0:7e:34:8a:81:
64:4c:b9:58:8a:c7:7b:90:eb:5c:6e:9b:a7:00:9a:
f3:ff:45:c6:b5:dd:93:68:cc:7a:a9:69:3d:cb:f0:
5c:96:0b:d0:0f:9d:49:b0:12:99:1b:b0:b4:6b:df:
6f:53:c6:37:31:0b:21:41:11:57:39:7a:45:f4:e9:
e1:9c:7f:d9:23:5c:16:07:d9:3f:37:8d:bd:3f:55:
11:74:fa:49:72:7a:42:da:82:d6:af:68:d9:88:b2:
42:ee:44:d3:b5:cc:70:1e:4a:3c:9f:b3:08:79:a6:
d4:d9:ef:b4:be:dd:fe:e6:2c:27:f5:bc:c1:42:b4:
67:06:27:f5:38:9b:22:3e:11:a1:db:c8:80:e2:a5:
c6:b8:17:79:7c:6a:cf:54:72:90:da:1f:af:37:25:
30:e0:ef:da:9d:a4:09:58:4a:c2:8d:2f:d6:91:38:
be:2b:4b:36:b1:87:a6:b8:70:3b:01:47:89:f7:d3:
ca:e9:fe:ac:15:9a:6e:87:64:b6:86:43:d2:3d:ff:
ba:3d:de:4d:31:cd:34:0c:80:ef:9a:0a:ca:c4:29:
c7:7a:d2:18:0d:0b:22:62:98:30:9b:69:5c:27:ce:
ce:4f:ee:1e:40:3d:19:8b:f0:35:24:06:26:7d:cc:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:3D:6B:C7:DC:6C:02:BA:9C:7C:F1:83:0A:AF:E4:C0:D6:64:0E
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:aa:dd:ce:1a:21:b7:1c:50:1f:c1:d5:9b:0f:ee:ef:1a:
ae:56:65:09:1c:8d:45:ca:95:35:f3:f4:a4:a9:a7:77:b8:b3:
68:3a:29:ce:0d:6b:42:bc:d7:e6:4e:b5:46:88:ac:c7:85:8c:
95:bf:2f:a3:8c:ac:25:15:ce:9e:44:47:fe:73:86:91:a8:bd:
88:da:be:75:8b:a9:09:4c:d9:a1:b1:0c:5f:c8:34:e6:55:bf:
64:c8:c2:11:fb:34:a1:82:db:00:68:cf:a5:3d:8f:48:dd:45:
98:c3:96:d1:aa:62:ea:0c:85:5a:4b:bd:bf:6e:60:b8:07:5a:
c1:e9:66:7a:46:11:e8:2c:2e:0f:96:0f:fe:ac:0d:46:8a:bd:
d3:60:96:1f:d7:58:94:a7:e3:d4:79:60:69:a5:b9:37:a7:73:
cd:c7:6e:dd:d8:6b:3e:d7:2f:7c:87:92:2c:05:3c:c2:ac:81:
1a:ca:ed:d8:d9:b9:51:2f:9a:91:c3:da:06:50:7f:00:b1:31:
57:47:8e:06:f5:67:71:b1:9f:b0:b2:62:e3:45:e8:71:2b:18:
fd:a1:24:ae:04:59:e7:24:9a:0c:c8:7f:42:1d:6e:c5:54:8d:
4b:a0:b5:4e:4c:16:69:56:72:5d:64:da:f2:42:e5:77:eb:64:
c1:e5:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:32 2025 by rpki-client