Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
File: jdwENRyFimp_4PkIErsQZV5a-Mo.mft (raw, json)
Hash identifier: jE79ASPD9nH8OcfXzHXfjUihoqsh4SWmxBkIwTBdJzE=
Subject key identifier: B5:DB:E4:06:6B:16:82:4C:EB:95:9F:F2:D1:F9:37:F9:6C:76:00:98
Authority key identifier: 8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA
Certificate issuer: /CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
Certificate serial: 0194BC72B15A4CB35F45B8811CD0E300A904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: jdwENRyFimp_4PkIErsQZV5a-Mo.crl (hash: elg89k/DD+cUUksQTgJheoze9wV3+jYVwE8bqpCYxms=)
2: vTPGgvTFOTKcwrxoY8g2suU_KuI.roa (hash: z6QhLi9xuHghOnwXqxIVXZYJknTyD77QAsOudJ+xOTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:5a:4c:b3:5f:45:b8:81:1c:d0:e3:00:a9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=b5dbe4066b16824ceb959ff2d1f937f96c760098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:92:19:9e:a6:0b:75:8e:26:3c:aa:4b:b2:
3e:af:e3:d3:b0:c8:50:93:49:17:9f:83:c4:18:c3:
d9:43:d2:b1:7d:63:75:41:d1:d1:41:da:16:60:18:
c3:92:12:f8:c7:2e:42:bb:b9:66:b3:2b:70:48:e1:
fc:62:85:8d:59:84:b3:b1:8d:4c:17:88:6f:5f:03:
f4:23:58:d4:45:0b:68:30:a8:6e:5f:cf:d1:90:a7:
e3:6f:e0:a6:c2:24:f3:b1:4a:b3:f9:55:e8:96:e5:
ce:e3:28:d7:7e:9d:df:48:fd:f1:fa:b3:e5:08:0b:
8d:7c:bb:06:ee:8b:d8:02:0f:77:18:0c:12:0b:d7:
c1:b5:a5:bd:22:fe:f8:21:12:5a:c0:20:06:bf:e7:
de:94:d9:b7:94:06:97:98:5f:6d:15:25:a1:34:d6:
5a:05:13:78:91:48:2d:8a:06:cb:f6:6a:a2:21:c6:
ef:f1:54:90:53:42:13:c5:44:bd:86:ed:ae:a7:bc:
00:33:0c:50:de:57:3d:18:c5:c1:fb:70:22:37:4f:
54:03:b8:71:9e:40:7e:dd:14:60:60:97:ca:2e:70:
53:48:08:0c:f8:9c:0c:9a:0a:d0:55:07:f2:f7:65:
89:33:04:28:ba:e1:80:37:0a:a8:e3:fd:31:79:11:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:E4:06:6B:16:82:4C:EB:95:9F:F2:D1:F9:37:F9:6C:76:00:98
X509v3 Authority Key Identifier:
keyid:8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:55:1f:98:cc:e7:bb:bf:ba:92:dd:ca:78:6e:c5:4c:5c:
06:fe:53:7b:03:a3:1d:f9:ce:c5:1a:83:d0:43:28:38:06:9b:
c3:a9:43:eb:2f:a3:01:02:87:9d:cc:cc:53:5f:1e:73:8f:63:
c7:31:09:53:72:9e:a9:43:70:cb:1c:b7:46:8f:79:62:d6:f7:
0b:76:61:65:fa:59:ec:6e:f2:59:9f:8c:3f:01:45:18:76:41:
7b:b3:f3:6c:32:dd:44:2e:90:a3:ad:27:12:ba:92:84:6e:5f:
cc:0f:37:a1:be:e2:c2:ad:4d:25:4f:b9:76:63:71:3c:34:ee:
05:5f:e1:12:69:dd:0d:ba:dd:00:60:7c:09:bc:34:5a:0d:f5:
46:59:bf:2e:82:b8:8e:10:3a:d7:be:67:b4:57:76:23:e7:9c:
bf:17:8f:89:c4:46:60:20:66:76:4d:8e:b1:14:ff:0f:06:58:
50:a9:06:8e:06:58:49:1b:c3:50:d1:0a:0c:54:f3:13:20:b8:
8f:ad:9d:2c:f4:d3:f8:f2:97:b6:34:f0:2e:25:45:e7:4c:89:
0c:c6:08:e9:08:51:09:df:d1:c1:a6:41:41:54:35:25:90:c3:
92:98:cd:f5:06:18:ab:d5:46:f8:86:e0:9b:f4:e0:b2:e0:dc:
c2:b4:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:21 2025 by rpki-client