Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: +IgNBEv7KX1uHALEyR8G2KggTrusoEQtgWlc8vI4x9k=
Subject key identifier: 92:AF:27:16:BF:8C:65:0C:74:70:9B:7A:31:1F:B5:E0:D7:64:93:95
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 0194BD853660E596D0FE1497678A772F99A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: 56raXyVB9GUj50VZEMKSXCU+W6nvc7+/SmeOcHXj9wM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:60:e5:96:d0:fe:14:97:67:8a:77:2f:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=92af2716bf8c650c74709b7a311fb5e0d7649395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:19:8e:87:67:8d:26:8c:68:bd:06:aa:39:
96:fa:7e:e1:cf:bf:da:59:89:30:a3:d4:6f:3d:ac:
0d:8e:0a:70:79:a8:14:9d:76:6d:43:d0:50:d7:c8:
ba:0e:6f:78:a0:d2:21:11:2e:61:a2:32:01:a1:77:
be:80:65:fc:2d:75:f4:0b:26:20:c3:8c:b0:fd:ce:
24:ad:8d:f1:5d:b4:37:79:20:62:15:8f:79:92:51:
b3:a4:1a:bc:05:f2:db:4a:2f:f2:6b:75:2c:a4:95:
08:5f:86:94:c4:5f:65:d1:fb:5a:f6:f8:13:07:e6:
b4:13:49:59:2a:11:9e:5e:f7:5c:54:86:b9:ff:a8:
c1:86:05:9c:fc:2c:c6:9d:72:1a:ae:d5:61:ce:4d:
a7:8c:ea:2f:24:53:dc:17:99:35:3c:88:0d:5b:e3:
a1:68:21:01:3f:44:66:df:e5:9b:c9:13:c9:ce:fb:
eb:88:69:c1:44:76:06:73:4c:82:09:66:c4:38:e5:
66:69:91:a2:ef:a8:9d:06:27:27:45:0b:9d:ed:67:
f4:be:e7:71:4d:40:66:b2:65:ab:ca:b7:ce:22:44:
8d:c6:26:bd:80:e8:63:08:b1:ca:c6:bb:e3:3d:52:
ec:f8:ee:8b:93:87:dd:23:e5:bf:1d:42:b8:35:a3:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:27:16:BF:8C:65:0C:74:70:9B:7A:31:1F:B5:E0:D7:64:93:95
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:56:1e:71:bd:01:c7:bb:a2:35:31:8f:30:93:f5:49:49:15:
34:6f:ab:14:04:96:8d:72:5d:6a:d6:a9:ed:6f:b3:60:4f:ec:
0b:cf:d7:82:89:4b:5a:9b:cd:97:59:d3:5b:73:f2:58:bf:55:
25:13:50:ee:d6:d5:eb:70:9b:bf:07:b2:bc:87:1a:4e:05:0e:
4d:15:ab:a7:e0:c7:3b:d6:77:7b:ff:af:1e:66:5c:fa:70:28:
8b:6c:62:4c:bc:42:5a:ae:ba:17:43:ab:ed:4a:04:c5:4e:40:
00:35:ed:2b:4c:77:16:49:9c:ec:94:60:43:e4:26:e2:5b:c9:
2c:7d:5f:d3:e9:f2:f6:38:ea:ee:71:ec:61:c4:ff:2a:5e:f7:
e0:5c:cb:bb:c7:cc:87:77:04:ee:f2:5d:1b:ff:5a:0a:18:72:
31:73:74:1c:ad:35:f4:d5:23:b2:4c:d3:b8:55:0c:f5:57:75:
25:cf:23:00:e2:5f:58:14:05:03:d4:2c:61:53:85:c3:9f:a5:
ff:79:b6:72:38:fa:3b:b7:e8:aa:a8:0d:75:25:b1:65:66:e3:
4b:ea:b2:b9:06:31:37:05:ab:9f:1b:0e:30:b9:e9:49:91:03:
96:24:7d:85:ef:82:45:4b:45:53:48:5e:44:4a:81:16:1b:8b:
e7:dd:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:49 2025 by rpki-client