Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: FgzYk8dcu17mftPQQLN0WqIegCP4SSCQ1Ax486TCMcY=
Subject key identifier: A7:83:64:88:5C:1A:BE:28:04:99:BE:12:53:A0:AC:33:A4:DD:41:92
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 0194BC04BF545F41AFBC1C78B65FAEC6AF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: SEXHyOjw7Ot9qWgi9CTZBPHNxjZzEXHbqi9Ho2xC1t0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:54:5f:41:af:bc:1c:78:b6:5f:ae:c6:af:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=a78364885c1abe280499be1253a0ac33a4dd4192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:44:e5:fd:35:20:a2:e9:be:4b:08:e4:41:
41:3b:a4:07:43:9c:74:46:d7:68:fc:ac:2c:b9:54:
b9:e1:cf:b8:ad:d0:5d:1a:ec:70:4b:cc:f5:73:01:
4d:71:fd:e5:81:73:c4:c0:c9:eb:53:99:34:dd:3d:
fe:cd:3d:dd:14:68:7c:52:72:a3:0d:8f:b1:27:f2:
fb:d3:43:1e:79:b7:46:28:5c:12:97:56:07:a8:b5:
65:a2:ae:2a:f4:4f:68:61:c5:56:3b:22:49:ba:35:
95:71:11:c2:0c:41:69:12:c4:9b:93:70:d9:74:3f:
e9:d2:ea:b9:d1:ed:53:11:08:57:5a:93:07:eb:1d:
f3:dc:4e:0c:fc:22:5c:78:60:21:da:ae:2d:60:c8:
ef:85:f3:bb:80:15:ee:55:39:47:aa:03:dc:0e:b7:
95:2c:a8:39:73:60:b0:4a:d1:ce:c4:c9:14:45:15:
5e:3b:ff:10:98:2f:57:f3:ed:b9:0a:56:7e:33:db:
52:4d:2f:cf:1e:bc:43:9d:48:dd:06:52:a1:d9:87:
cd:68:0d:72:64:c0:90:15:50:3f:0a:e4:6b:4a:3e:
ce:1e:95:1d:0b:9f:ac:db:0a:62:75:bb:a7:02:7d:
41:f1:7e:24:ee:d5:d2:51:68:9a:6d:94:0f:e6:00:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:64:88:5C:1A:BE:28:04:99:BE:12:53:A0:AC:33:A4:DD:41:92
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:f2:e4:51:b5:42:5c:d5:ba:9a:81:d0:ac:73:40:f1:52:
c9:af:a6:4a:26:4c:af:d9:4a:77:60:32:cd:c6:a7:76:4b:8a:
b0:04:4c:1b:93:fe:9a:44:7c:39:8f:e3:b8:d3:d0:53:6e:80:
14:89:86:6d:f1:2c:83:d5:2f:32:54:e9:cf:0e:b6:0c:22:d6:
21:0d:da:85:d8:97:dd:60:2c:c8:3b:e1:52:e9:f7:f1:40:0b:
cd:c8:16:e2:c2:4f:c5:88:b5:c4:aa:56:c5:4a:41:4c:4e:0e:
03:d8:06:ba:fa:0b:08:3a:a8:4e:02:e8:5b:db:b9:24:db:b6:
66:c6:b1:39:ad:8d:d0:cb:f9:36:e5:7f:54:8c:22:c1:e8:4a:
c6:e6:4f:ea:2a:a8:09:00:02:51:89:9f:71:c8:73:47:7d:77:
7e:e9:c5:c7:e4:25:f1:27:eb:ca:8d:0d:ad:b9:a9:07:d4:0e:
53:2d:bb:6c:5b:29:56:b8:a1:0c:95:a7:40:0f:d5:ef:a0:a1:
b8:67:7f:92:19:9d:37:71:7f:d0:1c:56:00:94:7b:47:57:91:
1b:c9:31:dd:41:84:e8:c1:74:aa:4a:cd:2d:e5:58:e2:42:81:
da:cf:91:7b:1b:b4:e7:ad:d3:36:f4:b9:35:40:24:c8:1c:56:
e1:86:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:51 2025 by rpki-client