Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: noctgK8Q1qv1/YW5IU/7qFhEbZqLiZMbLmCWYPWl870=
Subject key identifier: C8:44:0D:FC:77:99:4C:A6:48:02:3A:04:12:F7:BA:DB:D5:D8:AD:BA
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 0194BC04B89A19FA99A87AB7A8A44A7927B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: WuAEMhuP1ddROlXSCXf1V0sKCp/txYV112R0HSDFiGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:9a:19:fa:99:a8:7a:b7:a8:a4:4a:79:27:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=c8440dfc77994ca648023a0412f7badbd5d8adba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4d:40:52:1d:b7:04:75:a6:24:be:59:a9:2e:
9f:08:0b:ec:8e:98:fb:14:bc:4f:af:b0:71:52:d3:
a2:58:85:aa:e1:f8:bc:46:df:4c:90:b1:fd:d0:46:
01:6f:dd:54:c8:7d:91:35:bd:5e:05:d4:fe:61:3c:
c3:30:c2:6d:2c:48:e7:43:ab:ed:91:8a:23:8b:da:
44:6c:6a:ec:d4:b1:72:c2:3b:cd:b6:0a:34:3a:5e:
a5:cb:12:fe:16:b1:42:7d:f8:06:e6:57:0c:30:c2:
f7:d0:ea:d2:fe:35:b2:d5:55:a1:4e:21:ef:3f:6d:
ff:a4:55:9e:99:8e:5d:ed:33:b0:c7:a8:c3:d4:37:
a5:cd:99:3a:5e:1a:bd:9e:1c:b0:86:e1:8e:a1:dc:
c2:96:fa:51:9f:42:33:ac:02:d7:eb:1f:42:75:33:
b4:89:b7:2e:ae:84:4c:72:d8:90:52:01:34:7f:21:
82:4f:49:c1:25:4e:4e:88:12:26:d5:ad:45:06:30:
bd:4a:29:97:ff:b0:66:5b:33:1b:f8:ce:f3:35:38:
80:06:54:07:22:b8:c7:42:3a:ec:85:1b:e8:a2:a0:
a7:89:df:89:f6:6d:ab:32:44:4e:ab:13:51:8b:0a:
b4:b4:4b:7e:11:ec:e4:5f:1a:4b:94:a7:0a:83:3b:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:0D:FC:77:99:4C:A6:48:02:3A:04:12:F7:BA:DB:D5:D8:AD:BA
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:65:31:2c:18:97:f7:f5:8e:56:97:f4:dd:b1:f5:64:58:
7a:49:47:e1:d7:53:4d:22:fd:5c:c0:21:3d:fb:20:3c:9c:f5:
b6:4a:81:a1:8a:dc:f0:e5:76:7e:b4:2c:b2:ec:65:c4:80:92:
6d:00:c5:4b:5b:2b:79:8a:b8:a3:82:e5:7b:6d:5d:1d:b4:80:
e9:12:f0:a2:ee:41:53:72:34:fb:4c:7d:6b:4c:ed:07:0d:a8:
88:e4:f8:66:f5:0a:51:73:b8:ba:24:d7:59:4c:9a:1c:f6:aa:
05:11:1b:ee:8f:ca:cf:99:a4:78:5f:c9:9f:98:72:c5:62:3c:
83:71:d5:4e:13:67:41:7a:15:e1:a4:1f:f5:88:b8:9e:b4:90:
5e:7a:6d:18:a2:cd:b5:a0:93:73:1b:5e:af:a2:06:d4:b5:48:
8f:00:e2:e3:7c:eb:c8:0d:24:1c:d5:57:27:53:b1:8a:cd:29:
a5:92:01:18:cb:da:f2:3d:1c:ab:6f:2a:be:07:7a:b1:9d:56:
2b:e1:19:62:a6:e9:38:d7:71:c9:c2:30:6d:e7:bc:8f:b9:39:
06:4a:6a:ac:08:8b:51:3a:11:40:d6:41:32:3c:38:45:39:57:
72:5e:2a:10:8a:0d:27:4e:89:8e:d6:c9:e6:97:ae:3c:16:3f:
6a:4e:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:52 2025 by rpki-client