Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: YV4sc+Yw6KLVgR16Eg9l3HmVYnLYlsV2GMf6/AISbKs=
Subject key identifier: 4B:B0:18:9F:B4:4E:0E:CB:20:79:19:30:AE:6E:83:E0:6B:4A:C0:B9
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0194BC04B17C758A893A5F7104C578BA36F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: 94pELaFLcEmA5XY8i4kyqsla1Oho0IiAVIWDFt7L8bI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:7c:75:8a:89:3a:5f:71:04:c5:78:ba:36:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=4bb0189fb44e0ecb20791930ae6e83e06b4ac0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:ef:72:c4:a9:96:6e:bd:6e:80:68:e0:58:
03:a3:1c:8b:a5:98:65:94:fb:2f:e9:3a:ca:41:cf:
eb:49:49:76:6e:9b:82:54:0f:5e:b4:5e:60:c6:df:
db:53:17:7b:f8:7e:3f:c4:5c:6e:01:c5:ea:fe:e2:
8a:49:df:af:ea:3e:31:77:ae:49:af:58:6d:90:3d:
ce:26:d3:b2:39:b5:f1:67:2e:22:d7:b1:65:97:63:
91:8e:39:e6:1a:41:6d:fd:1c:f9:7e:b3:6a:f2:b6:
e1:1e:b9:6c:33:cd:42:4d:6b:9c:03:3b:4f:82:0b:
a6:91:65:4c:1b:5f:c8:34:b3:ad:00:2d:32:26:ee:
3b:48:cd:84:40:cc:08:33:08:b1:ac:70:7b:f6:94:
bf:a7:08:d0:54:36:97:6f:ce:50:ca:9f:fb:84:81:
b2:d5:ee:10:81:d8:5d:a4:dc:70:76:15:3f:fc:f3:
7b:f1:1f:8a:00:b1:f2:a6:ec:6f:29:fe:fe:ad:55:
92:7e:8d:4c:da:3a:b3:7b:91:ca:cc:c8:d2:a9:e7:
c8:18:6c:b4:4e:fa:3e:75:f3:c9:e4:3f:bb:58:06:
b5:08:10:27:0e:53:70:bc:0b:9e:6a:81:78:87:59:
dc:32:0f:f8:b9:4d:f5:69:c3:44:c4:9e:e9:cf:5f:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:18:9F:B4:4E:0E:CB:20:79:19:30:AE:6E:83:E0:6B:4A:C0:B9
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1f:64:a0:15:87:07:4e:e4:e8:81:bd:a8:05:46:d7:28:1e:
ef:dd:42:33:64:5c:e7:ee:c9:83:4f:41:df:e1:2d:b7:50:56:
a6:78:1f:9f:3b:7a:a0:9e:3b:e5:23:1b:c8:6b:11:8b:40:f3:
ad:11:0b:de:f0:bc:06:a6:94:07:0c:fb:df:3d:50:6e:a2:74:
68:c3:cf:81:ac:19:e2:8f:f8:0d:95:19:01:32:30:6b:af:8b:
1b:6f:40:a3:c2:b3:03:ed:b9:73:d7:bf:3f:22:60:12:72:dd:
d6:f8:23:75:59:38:9f:5a:1b:73:64:c3:15:37:b3:e9:ff:0c:
f4:01:9c:05:e3:67:1f:78:9e:70:9c:bc:02:f1:a3:bc:76:cb:
ef:c4:3c:26:2a:9e:4e:b4:b6:68:69:48:1c:21:2a:f0:90:63:
ed:de:33:78:f3:67:ad:7d:b1:e2:a8:a6:66:c0:d8:1d:99:af:
77:12:5f:f2:3e:37:8a:92:3e:c8:50:e6:bb:16:44:6f:2c:7d:
f4:91:8f:3f:a1:10:f6:91:a8:c2:65:aa:41:0f:b8:11:45:88:
e4:ea:b1:9d:a9:1f:61:a6:9b:26:d7:1f:ff:03:80:19:3b:8a:
2b:89:f6:97:70:70:0b:f3:c9:20:4c:2a:fd:d0:b3:14:d1:cd:
d3:cd:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:15 2025 by rpki-client