Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: GjOUBtNE7IJ0LXnRCsaRY1nfJBB4mP+fA8YW57swyCc=
Subject key identifier: 76:89:2B:AD:F0:13:8C:CD:F1:EB:07:53:E8:EB:A0:22:29:19:1C:37
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0194BCA991D78E811229E01A5452A7DAC4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: 3KDEYUEOyReovijf+w9dEKJ1qKFa2PqQNwvcvb7Uw3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:d7:8e:81:12:29:e0:1a:54:52:a7:da:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=76892badf0138ccdf1eb0753e8eba02229191c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:63:30:98:2c:a1:b5:94:f7:75:c3:16:a7:
96:3e:92:c1:24:4d:21:26:8a:61:43:ed:54:0f:f3:
ce:e4:68:fb:a7:c2:b1:26:7f:4d:49:9d:9b:43:bd:
7c:ef:67:b5:76:20:45:44:53:a3:75:53:c8:52:fd:
17:15:14:50:ed:b7:0c:7c:98:81:c2:ee:3f:13:17:
5c:22:c4:bb:55:9a:f5:97:58:34:8a:05:d1:84:1b:
bf:e0:cc:de:00:27:3c:1d:f9:0b:45:0d:91:ee:03:
90:ed:e4:17:a5:50:00:40:59:d0:14:e5:f7:7a:e5:
2f:ff:15:3b:01:6e:02:22:60:e0:84:43:24:2d:ba:
0b:cb:47:c0:ee:b2:fb:46:06:af:c4:85:cb:a2:aa:
fd:0f:87:b7:eb:8d:5e:dd:19:17:55:ea:2c:78:26:
11:d8:ca:0d:f6:e6:bc:d0:67:a5:30:2b:0f:e9:fa:
ac:29:9b:1f:09:dc:26:11:69:34:9c:6d:bd:e4:81:
e8:07:f8:1c:35:d0:65:ac:cd:73:3d:3d:a0:6a:c5:
46:78:82:2d:54:ba:7d:59:3f:99:9f:d6:06:fd:cd:
4b:a3:87:8a:c1:e8:b0:36:8d:60:a5:ad:bd:cf:60:
50:e9:f4:2a:2c:bf:8c:ed:19:97:fc:a8:18:64:30:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:2B:AD:F0:13:8C:CD:F1:EB:07:53:E8:EB:A0:22:29:19:1C:37
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7d:b2:1a:a7:0b:17:22:e5:b0:a4:34:75:4f:21:41:28:89:
51:b6:35:a6:21:4e:49:59:88:26:50:80:50:f5:4b:03:4c:65:
ad:33:1a:a2:7b:86:b1:f3:73:fd:fe:71:22:37:01:da:64:09:
7a:51:37:cf:33:1f:bc:77:d5:14:94:a5:38:94:f4:7d:87:5a:
50:89:bd:6f:f3:06:66:7e:fc:a8:c4:d1:03:dd:37:c9:98:49:
7e:f9:a0:d4:74:16:aa:9b:b2:cd:93:67:fb:96:be:27:9d:ab:
c8:8c:77:ea:09:c3:80:47:8d:39:ba:f5:e9:53:b3:46:9e:da:
a1:cb:fa:1b:cd:b4:1a:2f:f9:0d:18:4a:fb:76:74:5f:c0:01:
27:4a:7e:20:76:fd:f4:1e:14:f1:b3:73:38:a1:3e:76:b3:88:
df:7c:5e:cd:0f:b3:da:a4:dd:09:21:8e:b4:6d:9a:c6:c3:70:
93:c4:43:33:0a:73:84:3b:d0:3c:02:76:89:22:7d:cb:19:f2:
78:3b:25:92:71:eb:f8:a2:39:dc:26:14:fc:cf:bc:0b:80:f7:
57:b1:90:ec:2a:e7:9f:cd:02:6c:de:7a:f7:19:98:fe:b6:6b:
3b:41:17:b8:33:cd:67:23:7b:1b:f9:34:2e:e0:9d:c2:c0:77:
2d:6e:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client