Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: THm+XO+vSYVj6k0dC3Ba/VKZKLImA8nZx3ShDcbeAUE=
Subject key identifier: 98:73:8E:AD:98:81:10:D5:F3:6B:40:09:BE:A7:50:F4:68:FC:35:60
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0194BD8615CBF9BC20E06E42E4202E0F6BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 041F
Signing time: Fri 31 Jan 2025 18:01:08 +0000
Manifest this update: Fri 31 Jan 2025 18:01:08 +0000
Manifest next update: Sat 01 Feb 2025 18:01:08 +0000
Files and hashes: 1: PiP4-iyiKF2CtBTOyBR9SaIx5II.roa (hash: pxGRQI1U++K4eAPfQpg4IW2SrGaABJrNfacv2i4f/4Y=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: wyhgHQwTKicTfIQi2o1QVrYniuc6GTI6tXANUWc5bDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:86:15:cb:f9:bc:20:e0:6e:42:e4:20:2e:0f:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jan 31 18:01:08 2025 GMT
Not After : Feb 1 18:01:08 2025 GMT
Subject: CN=98738ead988110d5f36b4009bea750f468fc3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:0d:40:60:0a:11:c8:0d:a2:e9:ca:60:6c:
02:e3:b9:4f:66:b2:d4:b5:53:cf:02:31:3e:5e:bd:
b6:50:bc:86:3f:3a:32:04:63:be:e3:49:27:fd:ac:
7a:81:24:bf:81:46:7c:d4:cf:44:ac:b1:2b:a3:dd:
62:2c:dd:ed:06:a2:d6:78:2c:8b:c3:13:87:f5:41:
e5:c0:58:50:1b:f5:f2:b9:cc:4d:6b:9b:e2:4d:7f:
78:7e:11:0e:c8:97:02:1e:13:c8:42:05:82:bd:d6:
b2:09:7d:28:f4:a8:a2:35:85:c4:68:9a:1a:56:d4:
39:aa:64:25:7d:08:41:81:87:a4:68:07:8a:12:e7:
83:f2:fe:0e:85:e9:64:34:fb:cb:c3:27:38:3d:88:
ea:5e:d7:ab:f8:1f:ca:6c:8f:29:9c:36:5b:43:ab:
47:bc:12:8f:f9:7c:dc:c0:2e:81:c7:a1:38:8d:83:
17:fb:42:d0:8c:72:c8:d6:fa:4d:95:f5:56:ce:d0:
d2:cd:39:45:b8:61:03:fc:38:dd:57:86:c9:26:82:
64:10:fd:7e:a1:6c:de:30:c2:f9:1c:83:56:92:1f:
ac:39:26:91:9c:47:a2:36:9c:d1:ca:28:45:02:4d:
47:33:0b:36:a9:46:b2:a0:0b:38:1b:4d:da:8e:e9:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:8E:AD:98:81:10:D5:F3:6B:40:09:BE:A7:50:F4:68:FC:35:60
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:ad:14:df:a1:4e:14:98:64:6c:03:aa:0a:f6:30:54:7a:
5c:21:ff:1b:03:fa:3f:19:b2:99:7b:12:1a:f8:14:a9:a9:1f:
af:c2:97:40:bd:b5:89:36:b5:28:e5:ee:c0:60:a6:8f:05:d1:
b1:a5:c6:bc:7b:54:fc:0a:15:63:75:c6:70:2c:d5:72:3f:96:
be:fb:8a:af:c6:49:63:1a:dd:14:b6:ec:de:6d:a8:d5:9f:90:
f1:a6:a0:1a:2a:85:6f:c4:11:cc:78:84:f4:8f:d6:3b:c4:31:
91:64:b5:63:79:ba:a6:2b:97:16:92:e8:fb:3d:bb:e8:8f:26:
78:7c:52:9e:27:e1:b3:94:b4:5a:9f:3b:91:a8:b8:25:4a:d7:
b2:a7:8e:8c:26:04:54:62:ef:96:34:3a:49:37:32:f1:f6:39:
61:36:19:a5:3d:fa:01:62:ef:8e:67:d9:31:b7:53:28:b1:21:
bb:6b:e5:9d:40:db:33:f9:f5:ca:f0:e9:bb:62:1b:58:83:83:
bd:49:42:09:b7:87:16:01:c0:a9:f4:df:3c:8b:f1:15:40:82:
1a:b6:b5:c8:09:d1:e2:7f:26:5e:19:80:d9:69:02:8b:94:64:
60:87:b3:3d:5d:a3:aa:cb:01:6e:02:7e:1d:b0:e0:a7:e2:97:
2b:36:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client