Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: znEyDXEozIMWsJci/RQ4oKghuv0tTjraQTmeDS9b7jE=
Subject key identifier: 35:F3:74:AD:8C:D5:E4:77:EF:76:B9:18:AC:F0:EE:F6:2A:2C:F9:88
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 0194BC72C887809370840E5F09587F6953BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: ArYrgC7S2D7dC/QmxcS52At7DBhXc49JSkUtI+i6gtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:87:80:93:70:84:0e:5f:09:58:7f:69:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=35f374ad8cd5e477ef76b918acf0eef62a2cf988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:74:90:14:38:61:16:a0:39:38:91:6d:6e:
0b:02:b6:00:2a:bb:64:6c:dc:e5:cd:ec:e2:92:e9:
2d:c6:e3:17:6b:b8:53:65:27:02:8a:31:36:bf:bb:
07:81:0e:18:57:eb:d0:1a:28:2a:aa:a6:f0:3a:a6:
8e:2e:0b:a7:22:9e:5d:fd:fa:82:c6:25:16:af:cb:
8b:82:9e:d4:72:f4:99:4b:72:9e:78:f8:d8:62:ee:
44:a3:f4:3a:0c:ec:e4:c0:f8:c0:21:34:a8:ee:af:
59:69:02:ea:1b:9a:d8:d9:66:47:4c:ad:cb:b5:93:
d5:0a:39:7f:91:99:5d:e3:25:8e:31:40:26:0f:52:
e9:f2:ad:b6:74:c0:82:b5:03:59:c7:cd:9f:4a:d1:
c8:60:da:2c:a9:6a:b1:42:e8:73:94:2b:70:0b:70:
b8:0d:79:d4:6c:83:af:0e:10:68:04:99:13:41:06:
40:2f:bc:14:fc:db:98:ba:7f:f9:0e:f8:84:2c:6f:
14:af:34:83:e1:36:e6:d7:29:b3:dd:37:3c:34:30:
c0:35:28:db:95:21:4e:92:57:a3:16:a0:28:f4:76:
5f:ba:85:3a:c1:80:28:ae:24:13:60:bc:a4:9b:d0:
e6:74:a9:a8:3b:df:df:47:0f:8f:ef:d0:63:05:0f:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:74:AD:8C:D5:E4:77:EF:76:B9:18:AC:F0:EE:F6:2A:2C:F9:88
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:61:34:6e:ac:df:1e:c4:a1:45:b0:a4:10:0b:9d:c1:ef:32:
f5:cd:ef:c9:6d:85:4e:5f:45:e4:50:1d:e3:e8:34:10:e0:94:
78:62:76:79:57:cc:c7:74:ca:f4:da:c6:0c:83:39:a0:37:14:
ab:e4:99:2b:71:e1:4d:d1:e5:75:69:74:3e:3f:2e:74:2e:23:
ee:f4:ea:b8:c3:63:9a:ea:33:59:da:71:1c:0e:da:bc:d2:3e:
4c:4a:2f:14:16:6f:07:2c:de:b2:54:1a:ac:ce:69:1c:d0:1d:
4c:9d:16:f1:0f:07:a2:06:bc:fb:66:be:3e:73:6b:d0:d7:f6:
39:f1:80:21:c6:53:54:22:cc:67:fa:e8:7e:dd:31:ce:8f:b8:
1b:49:3d:00:81:96:62:7c:c8:57:fc:bd:1d:bb:93:07:0e:c4:
4b:c3:ac:1f:df:ac:25:47:bb:d9:38:e4:c3:b3:6a:98:eb:a4:
b7:ec:5c:6d:ac:1c:84:4e:be:a4:2d:5d:d7:44:93:df:dc:8c:
5e:9c:cc:79:3e:2c:db:2f:9a:93:5b:e3:6a:db:f7:da:7b:17:
f3:25:71:36:7f:a9:11:9e:1f:7e:52:a2:a0:23:e4:f4:38:8e:
4c:02:bc:69:82:5c:a6:8f:6b:56:ea:26:35:a0:7c:1a:fa:dc:
28:87:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:16 2025 by rpki-client