Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: XVORwS8bD7npgjWl67Zb5/oAMLurR+ElYCG+tCeBmVI=
Subject key identifier: 37:68:76:C5:04:04:C1:36:95:4C:A3:C9:A6:1E:18:B4:14:79:AE:40
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0194BCAA00B34BCCA6F3240FFF454999FFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 0E0D
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa (hash: 657I1jLunRMhj2vBtHhC7I7kj5ImF6yxkiyRsM9bRks=)
2: CsHRty9mRnt0BIZyK9xPxLB8vMI.roa (hash: SOTUJt2h333yX+nLIVz1pZ1xGDOUOZ+oSW3hWCCQZd0=)
3: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: jpKS2zkCOYmIf+WNFYlR34//TNO2083SokzlgBYqWXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:b3:4b:cc:a6:f3:24:0f:ff:45:49:99:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=376876c50404c136954ca3c9a61e18b41479ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:53:c0:da:4c:82:22:bb:21:9c:d3:92:5d:
e6:86:3b:a4:a7:c9:da:b3:56:f5:3c:14:38:b0:d6:
48:da:d4:20:1d:f2:96:31:bc:99:06:0f:8b:3a:a5:
45:eb:1a:2d:26:6e:40:3b:92:5e:76:8e:59:57:a6:
c1:3a:e3:a2:c1:1c:35:8e:a3:f3:db:18:52:91:18:
49:a9:b5:8a:ab:a2:d2:c7:e7:99:a1:9e:55:10:69:
b2:d6:c7:5e:2e:fc:c2:85:c3:05:e1:16:08:5a:b4:
1f:77:3e:0a:f0:bf:fc:4f:3f:48:5e:fc:c0:53:78:
c6:9b:cb:20:29:bc:85:ee:ca:87:57:94:f1:59:a0:
54:76:3f:31:f2:3a:c0:c1:fc:ea:a5:cf:43:cd:05:
57:4d:8a:0d:db:51:d0:f3:2f:6a:ad:83:30:a8:ed:
64:90:c6:20:c5:bd:be:1a:41:e9:c3:d6:c3:5e:bf:
7b:39:78:b3:ef:a5:3d:dc:7e:34:21:da:5a:65:f6:
d4:62:59:db:a3:b4:d0:00:93:57:38:cc:af:f4:9e:
57:f8:87:3d:59:4c:6b:28:0d:37:7a:1a:4d:12:57:
0d:cc:5c:e5:d1:46:72:dc:62:f5:55:04:d0:fd:65:
3a:c3:91:c3:a4:31:e5:b8:ef:7a:10:4a:4c:36:6d:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:76:C5:04:04:C1:36:95:4C:A3:C9:A6:1E:18:B4:14:79:AE:40
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:66:04:a0:8d:ab:59:47:a4:b2:14:c3:df:78:5c:8b:a2:5c:
d3:14:36:fd:9f:99:9d:17:92:31:03:b5:11:71:de:18:6e:91:
8a:76:0e:aa:cb:66:e8:c6:4d:28:32:c6:41:81:38:b9:2a:41:
38:f7:bc:67:30:cc:a2:ff:c2:42:0e:81:da:87:d8:7e:67:95:
67:b1:53:70:2e:bc:9c:ff:db:e1:5e:2f:f1:af:41:80:59:ac:
90:eb:86:11:32:78:e4:09:0b:5b:07:d7:42:f4:0a:62:93:97:
e8:02:ae:60:dc:24:ec:22:bf:99:f5:97:76:e3:e6:ff:e0:e5:
73:2b:62:31:29:d2:80:27:a4:1a:87:c7:50:6e:85:5e:82:1b:
da:44:69:15:82:66:4b:a0:46:e0:b6:6c:c0:6e:2d:34:83:c5:
b0:f3:f3:c1:b2:67:e1:89:46:60:f9:18:28:c4:c0:6a:c2:34:
53:17:30:bc:68:30:43:8b:8b:2e:1e:20:0d:ac:6e:eb:87:16:
ad:67:92:09:7a:ad:04:ad:bc:4f:6a:d3:32:e9:94:9e:63:9e:
1a:38:3c:cd:62:dc:7f:fd:9a:84:71:33:0c:3c:17:33:9a:8b:
34:e3:c8:25:de:4c:88:0d:0d:ed:cd:b0:6f:a4:33:12:ab:3a:
38:6d:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:41 2025 by rpki-client