Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: RjnezDL/uXeiS2RWqVaWmACkAWSH90wPXYSArbq1nTw=
Subject key identifier: 2C:E0:C3:E3:E6:B7:C3:9D:1B:03:81:E1:B5:76:4D:16:7F:38:1F:EA
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 0194BCE09BF41299286F1F1FD867BF31DCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0AE3
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: QILUFUOXfddrwT8YhZvB2m4NP5ZP6dehrcA2nZvZ1eY=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:f4:12:99:28:6f:1f:1f:d8:67:bf:31:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=2ce0c3e3e6b7c39d1b0381e1b5764d167f381fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:03:e9:71:b1:e3:63:2f:1b:77:16:fc:a2:
bd:2a:a6:26:6a:bc:02:43:ae:75:63:ef:5c:97:80:
ce:b0:8c:47:8d:46:bd:df:7d:2b:4c:05:8e:3f:b0:
74:37:e1:87:c3:10:c5:41:d9:c9:d1:70:40:90:d9:
70:a1:5b:34:a4:a2:21:03:e7:96:da:8e:a6:8e:49:
b8:02:a9:1f:75:32:9e:a5:59:e8:44:db:77:47:84:
03:e1:8a:4e:8e:06:c4:28:5d:4e:a1:45:5d:17:63:
49:52:ad:f8:2d:79:27:8f:93:37:b1:fa:7d:84:5e:
91:5c:15:56:aa:53:3d:de:d1:c2:8b:2b:80:92:6d:
80:c6:63:f3:6f:a8:1b:54:87:03:e3:b5:12:c1:fd:
0f:23:a1:f7:fc:53:59:ed:61:c2:4e:59:67:6f:23:
49:a7:a1:45:ae:eb:dc:53:c7:71:23:33:0a:59:23:
50:24:0d:98:9d:f9:de:a9:07:03:72:f8:2c:ae:72:
c0:2c:ac:f0:4f:3f:ed:46:11:00:a0:9f:e8:d4:fd:
93:80:e7:5e:0b:3b:b3:24:ff:2e:5b:49:a4:b6:5a:
dd:49:7a:8f:df:ea:e4:ac:7f:79:be:57:2c:23:2d:
04:43:5d:20:e2:ab:be:ed:a1:49:a1:5f:f1:6c:bd:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:C3:E3:E6:B7:C3:9D:1B:03:81:E1:B5:76:4D:16:7F:38:1F:EA
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c3:af:47:d0:17:57:ee:36:31:01:34:c2:15:80:81:ee:d2:
3c:4c:a3:38:fb:12:ae:14:3a:ef:95:97:fe:67:72:ef:62:c9:
f7:05:f5:85:11:3a:36:a2:70:0d:6f:bf:cb:0b:95:8c:d7:64:
15:f2:49:3f:a8:d9:e7:5c:6b:55:2f:9e:1d:d4:ab:fb:d2:06:
c2:a4:75:40:48:25:37:2b:3d:6c:c9:d5:8a:c5:8b:3c:a1:88:
d4:86:3a:ed:7f:63:9d:80:46:f3:a1:05:25:89:99:26:79:e0:
c8:fd:1c:65:b7:07:45:aa:e8:9c:7d:e7:be:2d:1b:ab:b0:1d:
30:50:5d:1f:58:21:50:bf:bd:77:bc:26:92:8b:e7:a2:51:cb:
3a:cc:f8:cf:31:93:65:b1:4a:9a:7c:05:32:a2:9e:65:d0:b5:
1a:7c:52:31:05:61:d5:07:46:db:43:ca:97:2d:49:0b:3d:cd:
87:a1:5b:26:89:93:c2:3b:d1:14:59:2b:bc:35:5f:88:11:29:
05:da:dc:9d:2e:5d:19:b3:82:5b:54:36:f3:dd:01:65:63:a4:
6c:92:43:31:bf:51:43:d8:bd:cc:02:c8:0b:b6:93:ea:37:5d:
e5:8b:c1:08:5a:b7:92:ba:24:15:b8:69:c5:2e:f8:a5:7d:4a:
ed:2e:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:04 2025 by rpki-client