Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: HZ/Os/NENy/Hn3BHyV038uMWPbUt46k9Y4IZf6LIXE0=
Subject key identifier: 29:B4:1C:86:AF:8F:46:CC:A1:BC:C9:8D:3E:9A:71:CA:E8:B4:58:36
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 0194BCA9A31924D5A65A406FF6F4201816B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 06B6
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: Ht6FhYCeYQL/+QsyBL8yX6GswlNfSNYf5EiAKDPT5mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a3:19:24:d5:a6:5a:40:6f:f6:f4:20:18:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=29b41c86af8f46cca1bcc98d3e9a71cae8b45836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:26:cd:a2:dc:cc:7d:c2:3b:be:8e:ca:c3:
34:44:bb:8d:58:26:d0:df:4b:e8:8a:9c:4a:a8:12:
bd:1a:2e:81:32:e9:e9:85:ed:f9:95:f5:9e:c7:15:
cc:f5:1e:04:6f:63:f8:70:c6:6a:33:9c:2f:8c:7e:
8d:e5:49:86:f2:0b:87:9a:85:87:ad:1b:6a:d9:31:
ad:77:14:e4:93:09:6a:15:72:10:74:bb:84:d2:9a:
09:85:16:5c:db:8b:9b:26:d7:3d:9d:f5:cf:83:8e:
0f:ce:52:ef:20:70:13:3b:98:ab:d8:01:65:4a:49:
9b:58:21:5d:02:a3:a1:6f:57:f2:4b:e8:56:c2:32:
b8:3b:ae:26:46:3c:1b:51:af:ae:6c:77:c9:4e:05:
07:89:b0:42:a8:55:78:2b:28:e0:7e:28:38:2a:a5:
95:8b:64:3a:d3:68:a3:5b:42:f1:64:1c:d4:bd:07:
32:30:02:33:ab:21:fc:03:1d:99:dd:49:e1:11:1f:
64:94:c8:4c:a2:16:9a:9e:db:32:6c:e9:b4:47:59:
4c:f0:6a:b1:a2:42:96:51:7b:70:4b:86:2b:9e:82:
b7:ae:4c:bc:e6:a9:19:8c:8e:09:84:20:30:f3:8b:
65:06:5a:66:d9:43:e5:1a:15:dc:4a:e9:1c:b4:3d:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:1C:86:AF:8F:46:CC:A1:BC:C9:8D:3E:9A:71:CA:E8:B4:58:36
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:61:39:67:ca:06:cf:88:31:2a:08:de:e1:6c:51:fa:82:0d:
cb:c6:12:08:17:af:68:63:44:f2:ad:a3:30:7b:ba:2e:57:e7:
2f:60:3d:5f:f8:bd:f1:bf:98:c5:80:8a:22:39:9d:21:0e:d0:
4a:da:7b:9d:21:40:72:dc:b9:13:7f:fe:b8:23:7a:97:39:de:
7b:4b:d3:b7:76:32:94:42:b2:3c:04:da:6c:0a:3a:f3:35:28:
79:8b:a7:0b:ea:dc:c3:45:7a:84:62:b1:92:47:f0:b2:62:a5:
43:fe:99:0c:8e:1f:97:6c:49:2f:79:32:4f:02:53:15:dd:31:
ef:83:1b:07:ea:ed:d1:80:3a:77:b1:66:ce:0b:ae:79:eb:9e:
77:6c:db:91:02:52:a9:65:ea:9c:42:df:1c:72:49:52:90:8b:
d1:10:32:f3:e2:ba:2a:34:f6:33:b5:55:97:bf:e3:ef:3b:80:
1a:15:6d:36:b7:e5:64:34:2b:b2:fe:ba:d1:37:6b:13:a0:09:
20:5e:a9:da:07:19:53:58:42:9a:fd:cf:46:49:30:9c:89:ea:
fd:eb:8a:05:7b:e7:f8:7c:a5:1b:a6:5c:4b:c3:20:f9:32:2e:
5b:c8:33:d4:05:dc:40:2a:9d:8a:e7:36:c2:a0:6a:d4:f6:f0:
f2:4d:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client