Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: oooA2CL1g+OH51AU/6eALqQIuPJUH764yno7bqLPksQ=
Subject key identifier: C4:4E:4C:61:27:2A:54:CB:48:FA:C9:EC:8B:BD:1F:C8:2B:91:C4:F0
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 0194BD85B9FC223CF472206D13A8D2D51F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 0F40
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: clFIrNjv4+rJXLbf+tmxJ7uskAACmmFt+UdXMKM1oeM=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:fc:22:3c:f4:72:20:6d:13:a8:d2:d5:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=c44e4c61272a54cb48fac9ec8bbd1fc82b91c4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:a2:42:1e:46:ae:8f:1e:f8:ac:1b:9c:a3:
cc:35:14:c8:94:02:d9:ed:87:20:5e:09:a7:92:38:
f7:14:f5:66:56:b5:0a:e0:83:4e:01:42:e6:8a:fd:
82:ef:ae:4a:31:d5:d3:10:9b:d8:28:19:cb:1e:69:
fc:a7:3b:e1:a2:ee:fb:b2:82:35:5a:25:3c:cb:3a:
1a:5a:ec:83:15:d6:1d:a7:8c:61:16:46:1b:2c:02:
da:c2:e0:76:b4:c2:46:95:9b:ba:72:a9:f5:b6:bb:
47:4f:d2:e6:0a:ec:24:ce:ba:47:93:e2:3b:a6:91:
67:68:d2:60:ec:0f:e4:60:80:e2:7e:67:bb:1c:6d:
ff:b3:2e:55:12:ad:22:17:1c:9e:81:ed:ec:af:0c:
31:34:4f:0b:f4:52:81:bc:68:e6:96:8b:a6:7b:97:
df:67:a8:55:3f:72:15:4d:61:8f:c3:59:5f:f0:9b:
a6:9f:e8:2b:73:a0:81:cc:50:35:14:da:1a:48:4a:
d2:98:4c:cb:bc:a8:4f:92:bd:68:cd:13:e4:66:c0:
c7:e7:32:16:a1:09:7c:07:13:71:88:63:1e:c2:f0:
6b:d5:3a:01:94:d9:b4:ac:db:0e:54:b4:86:c8:c0:
78:c7:dd:52:6a:cd:55:20:84:67:ce:51:66:0e:77:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:4C:61:27:2A:54:CB:48:FA:C9:EC:8B:BD:1F:C8:2B:91:C4:F0
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:4d:9a:65:32:98:6f:ee:6d:49:30:43:08:ff:bb:b1:44:
13:e6:7c:7f:8f:1f:55:e2:53:ad:67:ca:2c:68:ac:d8:ac:f7:
cd:e3:5d:c6:d8:e2:9a:d3:3b:e2:64:3f:d7:35:d3:12:ce:da:
cc:eb:17:7e:41:cb:41:7f:67:7d:dc:62:f9:a9:4f:f0:0c:dd:
85:d1:91:8e:f8:ae:a9:05:f2:75:b4:84:70:72:cd:ee:22:c0:
82:9a:d3:9b:88:ee:e3:65:78:a4:11:ab:93:a9:19:30:4f:3f:
0b:78:8c:2d:da:58:a1:01:bd:ea:93:b1:0c:02:35:68:5d:bd:
9a:a0:14:e7:68:5b:65:9e:76:a9:7e:f6:38:b7:e9:a0:ab:af:
d4:f8:52:a0:90:7d:1d:e4:b2:37:0c:24:78:8c:70:12:82:b3:
c4:e0:1d:00:7f:e1:db:16:9f:b5:6a:ef:f2:27:ad:78:3a:0d:
f1:33:72:ea:23:c7:30:1d:b2:07:c6:95:a1:9e:e7:04:30:0c:
13:c1:2b:2d:0d:a7:53:16:f1:92:d8:6c:a1:57:16:31:1d:0c:
e1:74:a1:28:b8:79:03:2d:07:af:7d:37:d2:d4:a3:49:12:91:
4f:0b:1e:cc:68:38:fa:5b:29:8c:00:27:44:8b:3a:d1:76:48:
8a:77:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:42 2025 by rpki-client