Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: OXV0OHp2hdMlGTseLNGIMFeLFawS5b1JdCNFOapdDHE=
Subject key identifier: 2A:9C:45:44:44:A9:2A:F6:AB:D0:38:5F:AC:BB:D8:EB:D4:16:1E:14
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 0194BBCDCA4F279141EEDCBCB6E7F7308C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: pg06YHcF0XgMQfgbmzI009p8W6545V76SMLrgTtlTJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:4f:27:91:41:ee:dc:bc:b6:e7:f7:30:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=2a9c454444a92af6abd0385facbbd8ebd4161e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:e2:25:1a:ae:e7:16:56:a5:9e:d0:84:0e:
40:81:d0:af:35:ea:63:27:f8:21:b5:0e:5e:99:19:
f1:de:c4:e3:64:e3:06:b2:51:f7:91:10:2d:5b:e3:
18:09:4b:66:bb:f2:c6:46:78:4d:85:28:ce:37:11:
fa:8b:de:3d:b8:4a:e7:e9:e1:8e:61:d7:8d:ca:da:
90:d2:ea:64:17:37:45:65:ca:49:6e:a2:42:d3:27:
21:38:0a:27:14:b2:e6:13:87:ee:9d:f5:88:b1:3d:
7e:33:64:44:7e:6f:1b:20:54:d0:04:c8:41:f4:b0:
00:00:89:c1:77:b3:36:c7:8d:78:a0:9b:6e:13:5b:
dd:e0:4d:87:2e:88:18:fa:5f:18:6a:a0:50:4a:85:
42:3c:b2:15:fe:b0:cc:bb:ad:4f:f3:74:a7:b9:36:
b9:67:40:58:31:8c:22:8d:c3:a3:60:6e:a0:12:3e:
8e:fe:ca:f3:b9:dc:7e:6f:98:bd:b6:0e:18:71:f6:
43:87:20:0d:9c:b9:68:db:b6:ed:58:f2:0a:74:7d:
03:09:85:c4:0c:66:43:05:57:63:d4:dd:14:47:5a:
79:f0:b6:89:ff:ee:fe:84:04:21:95:6e:98:0e:2d:
a0:b0:35:16:31:52:3c:2f:4f:31:54:cc:b4:97:06:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:45:44:44:A9:2A:F6:AB:D0:38:5F:AC:BB:D8:EB:D4:16:1E:14
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:12:0f:60:17:38:c5:ab:ea:d1:be:40:0a:14:0b:0a:0a:
b3:c5:bd:9c:40:35:1d:f3:0e:a7:b1:f2:e2:79:c5:0b:53:90:
15:a9:10:60:0f:cb:dc:75:57:25:9f:59:cb:2f:83:22:ad:48:
fc:12:27:97:43:c5:96:3f:1a:60:ed:64:73:61:96:40:24:f6:
67:3d:fd:9e:0d:b3:56:1f:ee:ff:62:e9:ad:f6:17:6c:06:38:
cc:a7:06:2e:e4:b2:a4:01:12:77:36:16:54:61:eb:77:98:41:
ec:55:c8:0c:36:63:0f:39:4b:b8:01:e5:e0:4b:73:c7:a9:35:
e9:29:70:96:97:e6:ed:b5:a6:22:e1:f8:86:4b:df:fb:58:2f:
33:27:fe:f8:7a:3b:5a:64:f7:8c:7b:05:83:14:22:25:8d:8d:
de:cd:38:c5:51:2d:c9:7e:6b:45:df:3d:41:30:ce:bf:87:83:
7b:b9:3e:73:ed:02:f4:9b:27:5a:78:83:b9:65:a8:55:a7:1d:
bb:75:47:08:63:64:80:7d:5b:9b:ee:3a:2e:2c:c7:04:d1:1f:
cc:a9:52:f7:e4:c9:21:d2:57:b4:a9:09:ff:c5:d7:a0:17:25:
b5:77:76:21:cf:87:56:fb:ea:46:86:35:53:12:81:10:d4:55:
8f:94:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:57 2025 by rpki-client