Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: YB/EFwtgQ1Wma0WZ5Ni7sdYK9QDemi73Q151xRajjS4=
Subject key identifier: 4E:8F:A3:1A:2F:54:66:12:87:2D:A7:DE:43:2F:DC:FF:21:57:7B:E6
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0194BC3C3D6158062E4E4D9267C44A8D2A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: WKFwzmEo54G0Mj4oj50pUbE7gRY5B20LKSfP0gIRqQ0=)
2: jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa (hash: /NFHrfrRwaEoNjeXwP4NglQKiFA3Q/YP75U6J0hU51w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:61:58:06:2e:4e:4d:92:67:c4:4a:8d:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=4e8fa31a2f546612872da7de432fdcff21577be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:24:85:f1:0f:62:60:77:39:c4:cc:29:e3:
86:c4:ea:ea:3b:bb:fe:6b:ce:d1:89:ec:02:1f:32:
8f:83:16:c7:49:7f:b0:53:bb:55:62:fd:94:ff:0a:
13:70:8a:02:2c:8b:6a:9d:82:e8:d1:91:b5:20:89:
84:1b:2a:dc:9a:01:16:88:dc:5a:74:f0:97:43:42:
37:8b:52:56:d6:81:54:cc:40:68:58:20:5d:64:01:
ac:bb:d3:7c:40:b6:ea:05:b1:7c:67:67:a3:10:89:
08:00:80:29:45:37:0c:20:c1:a3:80:66:c8:a3:15:
f2:04:3a:3d:39:71:13:9f:ae:a6:c5:bc:94:33:85:
63:a7:f3:99:94:b0:bf:ff:27:e3:50:0e:56:df:79:
53:c9:8b:73:a6:c9:6f:ac:30:ab:73:d1:67:3b:82:
5f:24:16:68:e2:72:5c:30:f6:14:88:4c:ee:15:3b:
2b:9c:e5:bc:51:31:07:a7:20:40:02:de:3d:9a:c3:
93:72:d3:2e:2a:b9:02:df:59:2c:4b:c4:e2:dc:71:
13:99:ac:97:1d:f7:81:9c:11:8c:c8:e8:6b:c2:7d:
fb:40:39:d3:9a:5c:4a:63:65:e6:79:b0:e8:f7:84:
23:ff:f8:5a:ba:1c:59:df:7c:43:c5:7c:c8:93:9c:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:A3:1A:2F:54:66:12:87:2D:A7:DE:43:2F:DC:FF:21:57:7B:E6
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:81:c5:23:70:93:3d:05:9a:a0:7f:44:28:6f:6f:bf:6a:
c0:6e:23:53:f9:0e:fe:ae:69:f4:a0:88:2c:7b:95:a8:bb:fa:
da:cf:87:99:8f:2c:e1:8a:ca:ce:be:98:08:eb:7e:a0:9d:e5:
fc:cd:bc:7f:44:42:f4:c8:67:5a:a1:03:4f:8f:cd:7a:95:08:
54:80:15:fe:f2:4d:b9:bb:c4:7f:8f:43:36:8b:b9:40:47:26:
5a:da:3e:50:2b:a2:15:e6:7b:c6:4a:95:c7:db:87:e8:cd:6e:
2b:59:ec:b0:fe:e3:fa:9b:a7:88:e3:68:9b:65:96:00:0c:f7:
79:36:18:0f:7f:63:bf:7f:f6:c5:5b:db:70:e4:1f:b5:66:9a:
02:80:d2:6b:9e:14:f4:e6:a8:6c:06:01:f0:e1:5f:85:43:3a:
d9:c7:8f:5d:59:8a:b6:e6:a7:49:41:8f:9f:d5:bc:5d:8b:27:
c9:97:aa:0b:f6:ee:a6:a8:6d:1a:aa:21:f0:ed:b1:7a:5a:46:
fb:2a:5c:dd:65:cb:67:c8:cd:4d:6d:70:ed:a2:e2:3b:41:0f:
a1:f8:ca:5a:4e:df:3d:9f:2d:7f:e4:13:08:db:75:b8:87:c5:
d1:f4:6b:e5:01:15:87:70:07:6a:c1:6d:c1:56:f7:c8:d3:a4:
21:21:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:45 2025 by rpki-client