Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: MZA5p3s7FeU5vKPvAMLBr7L9YZPYRCh1l8uRUWW5Obo=
Subject key identifier: 31:68:9C:29:42:B5:BE:93:B1:34:17:5D:3F:8D:5B:56:4B:8A:53:29
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 0194BC3C94845FE456ACF141267E4B4901A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: 8G8G8MnPS2+lsxTl4NcsGxfBFgC4Ycf8AZPVqr4cGck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:84:5f:e4:56:ac:f1:41:26:7e:4b:49:01:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=31689c2942b5be93b134175d3f8d5b564b8a5329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:dc:a1:8d:9f:ea:93:26:7d:4b:12:03:9c:
9d:2a:9d:95:d1:fe:41:56:69:e3:44:b3:14:ff:e6:
c6:d8:e2:db:a3:5b:44:a4:9c:20:ed:37:7e:cc:de:
b1:f4:04:c7:56:bd:67:ed:49:e4:a6:99:3b:95:83:
aa:dd:07:ee:e9:1d:a8:3e:0e:f7:d1:37:f6:65:24:
9f:a0:4b:f8:e6:85:b1:bc:a1:e5:e7:06:b0:10:b6:
c7:fd:7b:cf:d2:dc:78:e2:95:99:b8:de:52:d5:0f:
cd:1d:41:41:04:39:b7:67:07:2e:2f:57:30:b7:e4:
70:f6:af:34:3f:3a:c9:58:ba:f2:f4:8c:e4:23:1a:
29:48:62:5e:38:5b:57:1d:4e:ae:ff:fc:91:87:79:
a6:6e:87:99:28:34:eb:83:f4:9a:91:ca:b2:23:a3:
3b:2c:76:44:db:74:30:fa:b5:e5:9e:e3:9a:64:a3:
c9:5d:03:14:4d:f3:5e:aa:13:f6:d1:06:d3:3b:1f:
11:01:d9:76:57:ec:eb:b7:c3:12:17:32:bb:58:57:
82:66:fa:e4:57:48:20:65:6e:9b:60:15:72:a7:38:
c1:18:38:1a:df:fc:36:eb:8f:d7:a8:46:ff:e3:45:
41:84:11:c6:c7:59:24:aa:0a:3b:ec:9c:a9:d5:34:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:9C:29:42:B5:BE:93:B1:34:17:5D:3F:8D:5B:56:4B:8A:53:29
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b2:8e:14:5e:a5:60:d0:b6:56:33:98:fb:1c:d7:1f:66:d7:
3d:8a:c2:eb:17:d0:e8:9f:35:b4:ff:0b:0c:d7:c2:c4:61:07:
c2:21:20:e9:85:33:42:48:c3:4b:5e:97:e7:2b:1d:01:1a:4e:
1d:58:23:ed:34:bf:20:2a:71:30:8f:b9:4e:24:e5:f2:44:3a:
97:cd:ee:82:d8:88:88:4d:58:d4:34:be:3f:ad:be:75:04:96:
a2:49:95:0b:be:50:ef:c8:dd:67:aa:e6:5d:45:f9:53:15:80:
c4:df:ff:41:37:3e:14:6d:ee:38:3c:ac:4f:47:85:f9:59:ce:
bc:de:bf:30:b0:bf:bd:85:df:d8:eb:33:a1:4e:e0:08:d6:38:
61:b7:90:58:c1:bb:94:71:4e:85:30:a7:94:7d:1f:89:66:ff:
ff:1d:41:11:ae:85:e8:4c:21:23:2a:4c:1b:7e:0b:98:8a:70:
bb:17:71:a3:b3:96:28:b8:40:35:e5:27:53:25:8e:d9:7f:82:
9d:a2:59:97:73:6a:ea:f7:f5:b8:c1:b8:2b:2f:1b:aa:80:97:
8f:2e:d3:e1:4c:48:03:3f:96:44:e5:df:53:d0:70:e9:a1:c7:
18:1b:1f:0e:79:97:76:63:4c:53:b2:00:58:26:88:dd:ee:10:
fe:16:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:05 2025 by rpki-client