Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: g7BB7XoKoh622SOof3wZ8r1VT3MyWFaZRVnZX8b78vg=
Subject key identifier: 27:3A:2F:EB:A0:F6:03:88:74:68:B7:D0:7B:F5:F0:B0:7D:4F:65:DC
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 0194BD4E4F19F928B7685F002A159ADECF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0203
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: 7iL2LHhOpIuUU/J3ljcSPfxLaG8ED184YqzEwPylzGI=)
2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:19:f9:28:b7:68:5f:00:2a:15:9a:de:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=273a2feba0f603887468b7d07bf5f0b07d4f65dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:6c:5e:53:e3:3b:d1:c5:f2:43:8a:9f:d0:
61:eb:26:0e:0b:50:bb:97:20:c5:2b:b5:b1:51:1c:
49:05:4d:39:cb:4a:3a:7c:eb:4a:d1:8c:39:14:e2:
be:f6:83:95:22:11:07:11:5b:2b:6e:f6:c9:4d:46:
32:fa:d8:2a:88:b2:7d:ed:b9:a9:43:6a:14:0b:62:
f2:39:50:0c:0b:09:3d:a6:d6:00:96:7c:07:8d:fc:
1a:79:3c:f7:77:05:71:cd:f8:6c:c7:57:84:86:18:
36:05:e5:e9:0b:0b:0e:47:62:31:73:70:a9:a0:4c:
48:94:0e:e3:c6:d8:ac:92:a4:57:0c:90:7e:86:5a:
5a:f1:17:96:26:a9:8b:d6:f7:e3:45:74:f6:c8:c7:
52:d2:b8:f3:25:74:58:3d:57:b7:3d:5b:a6:72:ce:
55:8f:a0:cb:22:51:6f:ad:8b:a7:92:d7:f6:5a:81:
81:71:64:26:d6:41:c5:0b:79:dc:d3:78:03:97:39:
df:f4:cc:2f:92:7e:87:eb:66:e7:39:b3:05:b5:56:
13:34:1a:50:b8:04:d5:ba:52:68:2a:02:58:c4:cf:
f7:aa:ce:1e:16:7a:5a:8c:e9:2a:07:ac:ff:4b:0b:
4a:96:31:0d:30:7f:27:86:5a:79:e8:eb:e9:28:a0:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:2F:EB:A0:F6:03:88:74:68:B7:D0:7B:F5:F0:B0:7D:4F:65:DC
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:91:dc:8e:3a:d5:33:46:01:13:55:51:e0:35:6b:7b:74:
31:78:7a:3c:f0:0b:f4:88:33:98:9b:73:95:35:1d:94:cc:1d:
b3:5b:ab:7c:89:1b:8f:2f:65:2a:0b:2c:18:45:01:d3:61:b3:
11:08:6f:fc:da:d0:87:b2:ed:64:0d:4b:27:ac:a2:7f:40:62:
91:e2:a1:d9:8a:21:98:db:de:e1:7b:73:08:f8:cf:ab:e3:2c:
44:be:90:02:f7:fa:ed:20:87:da:64:7b:b9:66:42:98:ca:a9:
04:fb:72:45:8d:99:e5:81:cc:83:2d:61:02:15:68:3e:bb:ac:
88:5e:82:e3:d6:88:37:77:d8:f9:a2:14:76:fe:dc:88:bd:02:
88:cd:3d:2b:1d:83:93:f1:ef:03:69:70:3f:32:55:d9:d6:08:
e9:f5:c6:35:46:05:2b:66:c9:8b:96:39:1a:2b:5e:c4:b8:d5:
ab:52:ac:7b:cd:af:16:f9:1a:7a:e2:08:34:8a:d9:2b:c5:22:
bc:5f:ff:63:7f:9e:d1:8e:7b:16:16:69:bd:be:0f:59:81:39:
9c:ae:8b:13:f6:92:17:f3:4b:be:fe:ae:a0:b5:3d:e4:fd:4d:
5c:56:5a:82:c6:f5:36:ca:f7:c1:2e:80:b8:4a:da:ad:80:01:
f3:f0:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client