Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: JtYqoVwmtKy6EbRPPSkUis/JQiZwTzo/Pz6s/U+AHkk=
Subject key identifier: 2F:28:7C:C9:41:A6:4D:60:5C:D0:3A:FC:1A:63:6D:67:96:DE:04:D1
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 0194BC04AEFD009598568D13B3CC12FAF3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 02B8
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 9XlHb8rJg-OmDPMs6N_TKhkkHb8.roa (hash: cpk83kEdrOWJJYVKeP1fpe20g1cPT7sKTkIKvw0KJjI=)
2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: ZtJGAsIITY7AqkEXhBmiYDzvzjCToH9m3a6u17zmArk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:fd:00:95:98:56:8d:13:b3:cc:12:fa:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=2f287cc941a64d605cd03afc1a636d6796de04d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:d4:ec:ef:50:52:80:8d:44:77:28:4d:54:
d3:dd:bb:ee:a9:fb:96:6e:ef:a8:f8:14:7b:58:dd:
4d:92:ef:f2:11:62:9d:dc:5d:ba:9e:2f:88:f2:1a:
f6:80:c8:b1:27:fe:d6:6c:6d:bc:74:f4:a5:d5:73:
c4:df:bf:7a:f3:85:56:05:e9:70:85:55:67:29:4d:
a7:74:3b:77:8f:f4:71:65:73:77:e7:59:e0:e7:05:
ba:75:c4:ff:8e:28:d4:b0:1f:07:72:8d:67:3b:63:
97:f1:08:0e:e1:cc:52:18:d0:45:ab:ec:2e:85:fd:
93:f3:d3:b4:74:5a:82:20:82:da:c6:90:83:2d:45:
48:49:31:81:a1:c9:f9:10:ea:ec:f3:2f:bb:d1:4e:
a0:41:8e:b9:02:77:45:10:e1:c5:dc:36:1a:bf:56:
65:1e:0f:fc:55:62:72:42:5a:96:29:0b:61:bd:46:
7e:d9:3c:2f:d7:89:f7:fb:14:a2:13:a7:c1:ce:34:
7b:55:4a:c8:96:77:09:e3:69:4f:c7:88:d6:e0:4d:
ea:1c:75:ee:62:66:63:3c:d0:cb:d5:ef:6f:38:6b:
22:07:d5:42:2f:02:9c:69:5c:3f:c7:03:cf:d7:72:
d8:69:b9:df:b4:77:51:56:1a:07:3b:ea:49:7a:bd:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:7C:C9:41:A6:4D:60:5C:D0:3A:FC:1A:63:6D:67:96:DE:04:D1
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:98:6a:2d:12:54:31:c6:15:e3:29:8a:3c:36:f0:9e:b0:f1:
82:98:30:02:c2:d7:ed:af:7c:38:02:7f:2e:8c:44:6c:cf:55:
fa:2e:13:09:87:97:53:5e:6c:16:c4:9b:24:78:86:7a:a1:61:
14:a1:12:f8:58:29:d5:54:6d:de:51:e1:d9:a1:26:91:1e:23:
44:a2:d2:01:03:61:22:86:8f:b5:22:2a:b9:e7:90:71:78:14:
21:b8:56:2e:65:15:11:1f:57:5e:d8:de:09:3b:09:71:50:3e:
a1:0a:ca:8a:a6:b4:52:6f:2e:89:3a:78:32:00:db:58:31:35:
96:58:3f:7b:41:b8:f6:b5:4c:2c:3a:09:14:7f:61:1d:4b:d0:
d1:18:69:db:f1:21:5e:4e:ce:27:d6:59:74:e5:38:50:a8:76:
9f:64:99:89:94:6b:57:c6:c6:85:ac:2f:75:c7:0c:66:5f:63:
e3:9b:d0:08:87:86:42:6f:6b:8b:36:71:15:04:17:d5:8f:06:
6e:c0:62:fe:60:fc:26:24:8b:ee:ee:50:73:fe:62:9d:e0:dd:
85:04:84:b3:d8:de:de:09:c0:87:18:f1:2b:88:04:6a:1f:61:
c4:01:fd:9a:64:d0:f4:63:fd:f5:9b:e3:7e:36:1a:b2:ad:d9:
71:84:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client