Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: L5S4WR1Lq5sP9GR+Axz3xeoG9kCoYTdLpmDK04fdjuw=
Subject key identifier: 6B:CE:97:95:68:36:0B:05:73:58:FC:C0:5F:14:7E:4E:16:EF:3C:36
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 0194BC05221D9F59DA5AD30FB60A41792F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 0D7B
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: vXfYm5oFgraYS/XkgnokUav/oXN/mg/g4XYKrPV0SVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:1d:9f:59:da:5a:d3:0f:b6:0a:41:79:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=6bce979568360b057358fcc05f147e4e16ef3c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:86:55:3a:e4:f1:ed:3d:de:70:e8:18:c9:
c9:03:37:d1:a8:7c:08:ca:95:21:98:5a:28:06:49:
63:e5:8c:73:22:37:05:02:a9:ec:a8:22:27:66:07:
76:15:d1:4e:fe:b5:c0:f7:79:2e:e7:4f:f4:34:77:
37:9f:b0:5e:75:59:15:c9:88:e9:b8:e2:a2:99:3c:
c9:67:09:4b:14:c9:ca:25:3c:1c:e4:23:da:08:95:
47:2d:83:8d:65:ef:bf:a5:0a:ee:1a:89:10:74:31:
58:d3:fb:cc:a8:7a:d2:4c:6e:6b:bb:cb:a2:de:bf:
3c:3e:ea:a0:f0:ea:d6:cf:47:5e:aa:e0:17:1e:ab:
df:d6:c5:99:cf:0b:b7:67:d5:d4:df:fd:96:ac:b1:
22:71:9f:12:7a:ef:be:42:ef:08:b3:f0:41:f0:34:
55:58:96:b7:aa:19:c6:2b:5e:e5:8f:8d:52:8f:35:
76:48:fe:ac:36:53:3f:d4:c2:8b:e5:0d:48:0d:27:
f9:3c:32:50:ac:1c:7b:64:0e:cc:33:e7:f8:2f:50:
72:96:d0:0e:6d:ec:2a:b4:55:84:06:c8:ba:e3:1b:
e6:e6:99:3b:9c:66:84:90:f1:a3:d8:8d:77:10:51:
83:6e:72:cc:28:c9:a1:45:cd:1e:65:21:9f:b0:f4:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:97:95:68:36:0B:05:73:58:FC:C0:5F:14:7E:4E:16:EF:3C:36
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:bb:53:9a:1c:13:ae:04:f4:c1:cf:cd:e4:51:ed:01:64:
d5:d7:bf:22:a5:88:66:4a:9f:e9:d4:5a:db:73:8a:74:8e:28:
ae:81:82:47:4f:cc:95:09:46:c6:1d:f3:3c:99:7a:59:34:c2:
74:79:2a:c2:1c:e8:40:56:9a:73:af:0c:35:73:c7:68:8d:8c:
2d:1b:c3:7a:4a:44:53:fe:b1:81:ab:fd:75:8f:ce:9c:27:73:
a2:79:91:53:d8:f9:e9:36:c3:9f:0a:ed:dc:ce:b6:5c:7c:ae:
b7:48:dd:1c:42:87:73:9a:8b:47:61:d5:e9:7d:e8:2d:82:86:
58:d1:f3:b9:eb:d5:a7:d2:54:bd:17:e9:df:b2:56:e1:e3:c0:
ba:20:ef:00:44:23:0c:d1:d3:dd:7e:a4:16:34:30:72:33:05:
0e:64:46:a2:b3:a5:55:16:ff:07:a1:ff:6b:1c:9a:1b:b0:17:
3a:81:76:f4:cd:dd:64:db:2e:2f:e6:f8:e3:50:d7:ef:7b:a5:
42:dd:d9:42:11:f5:53:1f:81:2e:19:17:da:8a:05:6d:ef:a4:
51:8e:2f:40:4e:de:77:f2:f0:aa:ba:85:5f:88:51:b9:0a:83:
1e:ee:c3:cc:ce:da:10:57:54:bf:c9:30:1e:55:ce:e0:cc:01:
a2:e5:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:13 2025 by rpki-client