Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: icYjqLe3JHrAvBKrBvG2QKxRxXthc0dz+wYIQsMuFN4=
Subject key identifier: ED:6F:76:B1:C2:F8:D6:F6:74:38:F3:5E:06:DD:A1:30:EB:33:96:12
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0194BD856C3C3DC7A25159568143BF449736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 12F6
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
2: iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa (hash: YaxAkBWvS50g4TE9KDjWuEy+sBe25yzJdsukBPT8zpw=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: qN85S64zWT2QVMdFnqntW5F1BuugndWuSz0D4IZ6er4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:3c:3d:c7:a2:51:59:56:81:43:bf:44:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=ed6f76b1c2f8d6f67438f35e06dda130eb339612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:56:19:25:31:68:db:02:91:b3:94:de:eb:
07:7a:79:2f:29:d5:5e:65:c7:e0:16:70:3f:19:d2:
e9:de:04:8e:f8:c1:7c:53:7c:54:ed:9c:1d:e5:c7:
67:b6:07:c5:e3:dc:02:3a:e8:65:8a:a5:07:88:60:
07:51:8d:ce:04:50:b5:a0:a1:fd:32:a9:a3:6e:52:
a3:fe:8d:13:9e:be:b1:1e:f1:fc:21:a2:3b:76:e3:
06:eb:24:4c:9f:13:e8:47:a5:1a:84:b2:33:7b:82:
df:11:39:e0:7a:dc:1d:2e:01:2f:a7:ee:69:5c:a0:
62:6a:01:b7:01:f3:d9:e1:ef:48:56:91:cf:6b:94:
90:0e:51:74:da:12:1b:af:0e:6d:cb:e2:71:46:d3:
53:af:26:7e:fa:c9:b2:21:e7:da:1a:0e:8e:6d:db:
d2:10:e5:75:8e:9b:89:64:88:f8:9b:43:54:0c:b1:
4b:e0:a2:d3:ab:e3:67:a2:2e:5a:b6:55:37:37:ff:
d9:6f:3b:bd:98:d6:be:c1:63:17:8b:bf:a1:64:c9:
8f:d5:ea:d1:79:70:56:3d:c9:9d:35:81:77:d8:a5:
9a:73:16:57:6c:2a:eb:8f:68:f8:5a:bb:5a:90:cd:
d7:90:69:0f:48:59:83:95:b3:d2:7c:47:fc:ee:fc:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:76:B1:C2:F8:D6:F6:74:38:F3:5E:06:DD:A1:30:EB:33:96:12
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:cb:11:05:1d:25:ce:97:13:ec:f3:d5:dc:d8:f1:20:c9:
4c:0b:9d:99:ed:d8:1a:a3:4c:f4:1f:2d:67:e4:99:21:9a:3c:
19:f9:75:0c:fa:71:3e:ff:60:ae:a6:a0:1d:e3:e4:9a:13:61:
66:f0:4d:2a:bd:13:17:fd:c5:6f:91:2e:43:29:11:42:80:d5:
3b:e7:fd:c4:ee:15:f7:86:f5:ca:14:b7:c7:10:6c:da:9d:0d:
a6:94:2e:6d:60:c9:6d:bd:e7:b7:97:e1:57:96:fd:10:2b:10:
df:3e:70:8e:2e:73:9a:2f:64:64:9c:72:86:37:0b:52:b9:4a:
96:b5:f6:86:6d:48:c8:3e:4d:8d:fb:a1:b6:b2:89:b6:f4:0c:
b4:3a:e3:04:1f:84:75:6a:01:0e:b8:ed:af:0f:e5:bb:09:55:
97:1a:ec:8d:ec:dd:c6:ee:e0:7d:71:f7:14:d0:ae:f9:51:4e:
43:95:30:44:a1:00:cb:ed:bb:c7:5a:52:df:c6:a3:89:1c:5b:
18:66:9c:01:1c:83:9b:48:75:b9:7d:1b:59:d0:ff:97:29:64:
96:b7:4f:ab:d9:c0:07:25:6d:a2:1e:ce:fe:b6:88:05:84:99:
86:62:20:73:40:33:04:97:a0:ab:11:0b:74:8a:fa:51:4e:fc:
58:ca:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:40:46 2025 by rpki-client