Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: xx5fs3GUpVQN26lqiQJlk1mZFJK1LePr5P9IHCkSo/I=
Subject key identifier: BD:F5:93:7A:6F:CA:79:91:1A:A9:A7:9F:BC:9C:17:BF:8F:70:A4:F6
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 0194BD176A9C0D98D78B8CD775ACA00017B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: FkbilmEh1qvcg4W4KIxBkwzPAEr0ORL83RIryjeRvAs=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:9c:0d:98:d7:8b:8c:d7:75:ac:a0:00:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=bdf5937a6fca79911aa9a79fbc9c17bf8f70a4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:88:f9:a2:8a:5c:81:27:46:cc:17:70:8b:
75:d6:4b:db:4b:0a:f2:52:d1:3d:24:ed:27:c4:24:
a7:8b:c7:2a:30:7a:7d:e8:71:75:e1:cb:ac:cf:51:
20:a0:da:8c:57:1c:da:67:7c:b0:d3:47:85:b2:14:
b9:47:88:95:9f:e3:dd:52:90:77:cd:ad:f9:1f:8a:
22:11:e9:2f:f3:ec:2d:9b:2d:a4:5b:de:1a:ef:e6:
2c:5e:0e:eb:9d:0f:c7:1b:61:2b:5b:4f:9b:5f:24:
58:2f:97:29:96:e2:c6:f8:66:a0:e3:5d:44:4b:65:
f1:1a:8a:14:29:03:b6:55:0a:d9:57:77:35:3a:8a:
8b:aa:47:f0:30:bb:d7:64:4e:12:ac:8d:77:43:88:
66:8c:a8:68:ee:5c:86:b7:41:98:a5:28:ff:40:f2:
23:da:36:a6:ef:11:a4:bd:02:51:5e:c0:78:65:4a:
7c:44:85:6b:b4:b7:17:49:31:b6:18:6f:70:ba:0b:
19:d0:8e:aa:3a:58:7e:57:62:a0:21:5a:d4:f7:e1:
39:23:5b:a8:ea:cd:68:84:e8:e7:68:9a:f2:82:3a:
f8:3f:24:48:66:0f:95:fb:08:c0:29:80:41:e2:5d:
ab:33:9d:0e:3c:5c:73:0f:f4:7f:cc:d5:fd:19:29:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:93:7A:6F:CA:79:91:1A:A9:A7:9F:BC:9C:17:BF:8F:70:A4:F6
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:fb:78:62:7b:f0:7b:37:01:6b:a1:a3:54:ef:78:aa:29:
d2:a6:cc:0a:f1:98:12:a6:04:72:b9:70:26:95:67:51:87:6d:
b8:12:69:57:b3:96:0d:e7:5f:1f:6c:a0:62:17:4a:bd:6b:59:
35:0c:92:6d:21:dd:65:6a:47:b6:59:60:12:93:50:fd:3d:a2:
7c:7c:1f:bb:b4:22:ce:be:dd:e2:a6:3b:6f:81:d1:d7:64:1e:
d1:da:e4:44:18:02:e6:38:bf:9e:e4:e3:19:f9:4b:a5:59:5c:
9f:3e:ff:08:57:7e:3a:d0:56:bd:81:c1:15:d7:7f:bf:8c:c7:
10:18:74:0a:02:64:6e:ff:46:34:11:53:a6:9c:67:8e:52:cc:
fc:5d:d4:96:0d:5b:d0:c3:3b:96:c8:11:1a:ee:04:07:c9:fe:
55:43:b0:04:93:0f:bb:4c:87:89:6c:9c:aa:fd:87:a6:ef:e6:
32:7c:06:a9:98:94:7d:6c:a8:3c:4e:51:be:42:53:f6:5b:d6:
e0:b2:81:89:18:b7:5e:f6:0d:8a:c1:3b:a1:b7:58:ad:33:de:
a2:a7:6f:fa:94:a5:67:27:4b:e5:6d:b4:1c:2a:22:51:db:d0:
e3:2a:04:51:e3:37:df:34:5a:6f:88:f8:0b:e3:29:a0:26:c0:
ec:71:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:28 2025 by rpki-client