Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: UUDXoy23yTBz0cP5FiqOy3zDb0UUCYSuSUlMcu4Xn58=
Subject key identifier: 44:7B:21:93:2C:71:BA:95:02:1F:F2:76:DA:9F:B7:BE:0B:E5:C4:09
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0194BD4E6D933B37EABB78253F8AA1018EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 05BB
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: S24+dUGSNfI/qQn5ZQWMzK7Gvwpknpm9LLDF08p5Kxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:93:3b:37:ea:bb:78:25:3f:8a:a1:01:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=447b21932c71ba95021ff276da9fb7be0be5c409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:94:72:6a:32:29:96:22:a7:9b:f6:02:4b:
66:1e:81:1b:cb:2e:7c:d5:61:ab:24:b3:5e:da:25:
b2:fd:86:56:f4:da:8d:a1:05:3b:eb:a3:d7:ed:db:
b8:85:1c:c1:b5:97:4a:18:26:76:e0:82:ff:75:43:
cb:cf:fe:1c:6d:82:21:35:45:33:92:0b:a7:4c:df:
b9:16:eb:34:6c:3a:e3:f4:5c:ea:59:54:9e:87:f6:
dc:f6:8d:92:d1:18:a1:8e:59:aa:7b:e2:63:2c:48:
1f:60:77:0c:d9:20:41:bb:c4:6b:b9:9e:77:84:51:
21:cb:b4:95:15:83:6d:59:cb:2c:9b:e5:4b:5d:7d:
35:a9:5f:81:21:84:c1:6c:d5:48:59:2c:16:61:40:
26:74:53:88:ed:15:7a:97:86:a9:35:bd:cb:78:4a:
d7:b7:fb:38:34:3d:89:dc:a8:00:a6:6c:1a:85:87:
b0:b8:ce:51:69:d6:5f:ab:be:08:21:78:f4:c3:7b:
e1:f2:1b:22:ef:c5:b9:e0:cf:d4:94:57:ba:48:a0:
66:11:e2:4a:5a:05:43:18:ff:97:b7:5f:44:3e:3c:
b1:1a:2d:56:a1:1f:40:85:99:1f:37:80:f2:7b:f1:
61:b4:6b:91:02:2d:cb:b2:10:a5:66:6e:52:57:d1:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:21:93:2C:71:BA:95:02:1F:F2:76:DA:9F:B7:BE:0B:E5:C4:09
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:81:24:08:59:c2:44:98:1b:70:d4:79:39:d4:23:08:a4:7d:
d1:0a:36:7b:c2:8c:41:94:1a:8a:ae:a6:58:70:f6:46:ab:50:
08:80:80:3e:ae:3e:3d:9b:b4:cb:da:77:91:5d:6c:10:f2:a4:
ea:16:5d:bf:76:ee:bd:87:f1:4b:1a:08:be:4b:72:38:bf:8a:
05:ff:af:20:9f:76:bc:86:01:b3:c1:76:c9:3d:8a:3e:30:40:
3b:42:de:b0:d1:9e:e5:51:ff:ce:4e:e1:5f:dd:6d:3a:ae:a5:
57:c4:95:88:80:8c:f7:15:8a:42:3f:83:ad:27:f4:19:bf:16:
b9:02:da:d6:47:ce:4b:73:06:c8:a0:84:e9:5d:a0:87:9e:b6:
ad:22:13:0a:22:33:b3:ee:a3:bc:05:01:5c:fd:2f:3f:24:49:
f3:55:e1:14:ec:03:7b:90:a5:ae:6d:41:21:db:01:12:a4:38:
d9:af:99:bb:49:2b:74:a2:fe:43:95:b1:c4:66:c8:a8:62:41:
1e:a4:18:e3:55:7f:b1:e8:4e:f9:c8:0e:4e:c3:d9:57:fb:30:
47:6d:e5:26:02:b3:ee:16:8c:22:9c:3b:c6:01:53:37:87:e3:
3c:04:16:d1:47:53:af:a9:cf:73:bf:7a:8c:f5:b3:48:92:72:
66:97:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:34 2025 by rpki-client