Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File: jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier: DD3LVWCUOLL3Z0feWj4nf44h4aaYAnaIuUgnL3sT04E=
Subject key identifier: D4:BA:50:BA:5C:E8:40:33:F0:30:A0:42:76:0A:4D:2B:CC:81:15:62
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 0194BC3BEDB635DF0A47F8437DB26C45A0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number: 04D4
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: CZMiNJPObQ5JBb9uw4jhDY6zIjHQva2Ehh0v2PtnIo4=)
2: ujm37J3ubbyu5Ql44pmF8ExX4hQ.roa (hash: OE+0eHHx77x/+wl6GWmKStuCDxrk3hiiJvkYlOvzxhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:b6:35:df:0a:47:f8:43:7d:b2:6c:45:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=d4ba50ba5ce84033f030a042760a4d2bcc811562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:13:b0:12:79:b0:a9:d2:49:f8:9b:80:00:
c4:31:b4:0d:98:88:7a:f7:73:b0:c3:4a:0e:a3:f8:
c9:eb:23:58:cc:87:73:55:c8:0d:e6:52:ca:95:87:
43:86:92:70:2c:37:0d:2d:df:95:30:80:85:d8:17:
27:7e:1c:8d:f3:f5:3a:32:1c:e0:9a:0f:f2:aa:cb:
ec:62:8f:43:9e:dd:c1:7b:b1:f5:f5:af:b5:fc:84:
96:9c:d6:0c:e3:49:99:54:26:ef:83:60:24:b6:b7:
1b:13:dd:25:72:52:1b:92:24:92:89:9e:2e:7f:30:
70:18:41:c4:b6:79:6a:58:de:f3:97:9b:bb:a5:9b:
d8:21:19:68:05:90:82:31:31:e4:61:89:2a:11:f7:
a5:0c:59:d3:72:37:9b:74:2a:53:91:ae:4b:dc:da:
0d:55:49:75:eb:1e:ba:44:4f:93:df:20:2c:fc:a0:
3f:14:77:35:ee:a1:ca:aa:e9:16:f2:ee:fb:51:54:
82:e5:23:8c:5f:89:bb:df:d9:75:37:87:f6:8b:62:
bf:52:75:45:6d:0b:16:62:e5:29:dd:c7:b2:60:98:
2c:89:ad:8c:6f:eb:b8:2e:62:d3:3c:8e:ed:87:0f:
56:41:01:82:42:de:73:1d:90:bf:c8:b8:8c:70:f8:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:50:BA:5C:E8:40:33:F0:30:A0:42:76:0A:4D:2B:CC:81:15:62
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:11:f0:71:21:ec:fd:2e:e2:fe:d7:87:4e:4c:1e:1e:de:d0:
e9:a2:36:ff:f5:90:b6:ed:d7:24:5d:c6:6e:8c:07:7a:eb:39:
54:a2:e9:a4:9e:1d:03:95:a0:c8:9b:0a:ad:e0:0b:14:c9:bd:
71:ee:05:5c:50:7c:35:a7:1e:fc:e7:4b:14:92:8b:41:f0:28:
91:76:12:64:3d:6a:76:42:08:ff:f2:55:f0:68:a1:32:2e:73:
55:86:93:61:60:3a:9a:b4:f5:57:7f:41:2e:32:50:54:53:d5:
bd:4d:52:24:c5:47:2c:e4:0f:cd:e7:4b:29:04:3e:9a:18:08:
0e:dd:18:64:13:a0:83:a0:5f:26:e3:b3:e7:fc:ec:fa:25:76:
31:c2:5d:b6:f0:d1:b6:27:ca:b2:bb:e9:74:d6:6b:ea:45:32:
92:36:f1:5d:02:b9:d0:24:ef:60:66:ec:90:01:d1:00:0c:ed:
6e:3d:87:37:71:b3:db:25:07:3b:f5:a2:b3:94:cd:d0:12:f6:
e7:a0:9e:d7:37:e3:e5:dd:49:04:ff:88:14:16:e3:0e:24:35:
93:af:08:6c:d9:d6:bc:80:02:a5:8c:a0:e8:b1:34:d5:38:33:
ac:9a:f5:2e:16:d3:24:06:ce:62:4b:12:cf:3e:f7:75:c4:d0:
e2:c0:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:14 2025 by rpki-client