Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: 2VP/YMVVpuqaFYS/MgPWdJfYlfy3Y+79PWgmLuvR6jo=
Subject key identifier: A7:94:33:29:25:73:A9:55:3F:6B:14:CC:2A:8F:2C:B6:21:36:82:FA
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0194BC0509BB389BE1D68F5A13F7DF0DA691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 0F35
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
2: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: BkQZg21IPZvkaY+ZH0ZpczdIKQQ1iu20v6GTXXVIAHQ=)
3: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
4: sm0dzeK37hT-wuGom8l8gIsKM0M.roa (hash: aN7IhoW+mRln1TFbBotAvdvU2j9+u20Cp80yd6cOn9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:bb:38:9b:e1:d6:8f:5a:13:f7:df:0d:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=a79433292573a9553f6b14cc2a8f2cb6213682fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:bb:c5:d3:c9:f5:8c:c0:b7:3b:98:48:0f:
f8:51:76:4e:59:f9:92:7b:ba:6f:7d:7c:18:f1:5b:
54:df:10:ee:90:8f:63:20:34:f6:c7:29:98:e3:07:
a7:ac:5a:f8:5e:93:b8:f2:1a:76:31:1e:9a:2c:39:
2e:8e:fa:63:5c:cc:05:aa:17:18:e7:3a:e2:5b:cf:
0f:50:ad:74:61:3f:df:b1:24:35:59:2e:b5:4d:83:
0e:6a:13:e4:99:9c:a2:ff:01:2d:0c:b1:52:6a:9d:
e7:eb:22:09:6d:78:a0:ca:68:8c:6d:e1:b9:4d:46:
45:85:3f:31:75:84:70:50:30:7e:aa:47:75:f3:1c:
54:ff:67:e7:2f:7d:b4:3b:2f:bc:0c:69:f1:1b:38:
d5:4e:b3:9a:56:de:1c:f3:a8:3b:a2:5d:70:87:2f:
9d:fa:cb:6f:fd:55:9d:13:3b:94:87:05:c2:2a:ac:
c9:6e:83:d0:78:bf:bf:7f:1e:4e:97:56:e8:f6:ef:
cc:80:42:0e:70:37:ae:4f:c5:89:2c:f7:37:40:57:
c0:fc:4d:27:4d:08:35:3b:8e:c4:e5:e1:a6:59:1b:
92:61:36:78:44:97:7f:6d:ba:e9:53:cf:06:aa:62:
ea:dd:9a:a5:c3:92:08:ca:b7:f5:ac:ab:90:aa:f3:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:33:29:25:73:A9:55:3F:6B:14:CC:2A:8F:2C:B6:21:36:82:FA
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:18:8b:99:75:a7:2a:f1:0b:c1:02:45:ba:ac:fa:49:cb:
14:c7:99:8a:a5:ce:e5:70:72:14:3a:83:1a:be:5f:36:d9:5d:
90:47:6e:72:6e:d6:41:cf:53:db:9f:be:f5:dd:33:73:9c:46:
5a:d2:4e:b2:14:75:72:fd:ac:da:51:83:34:97:89:98:8e:fe:
43:58:b8:d0:d2:30:52:e2:8e:f3:0d:56:c4:7c:3d:4d:32:83:
3b:63:96:8f:b0:d7:ff:71:91:88:4b:d8:fb:78:a9:a9:0c:ef:
d1:a2:8e:19:fe:a5:a8:e3:97:74:8d:48:d8:07:96:98:8b:66:
c4:17:1b:78:d8:cc:58:ce:22:db:fb:5e:67:3a:f2:c0:bc:92:
bc:09:18:7a:54:a5:f6:70:c6:41:a7:0d:da:ec:d0:26:66:38:
a5:69:4e:16:1b:8b:d7:66:50:ba:f6:fc:58:8e:1b:b9:91:df:
91:ce:30:32:b5:a9:86:fb:3e:d5:95:0f:d9:f1:0a:64:80:dc:
46:d9:98:4e:d7:cb:4d:3d:88:88:eb:6d:b2:55:da:eb:6e:29:
df:31:40:4a:5c:e0:4b:0f:19:fb:a2:37:ab:11:82:52:7f:29:
bf:10:77:61:08:a1:e0:f4:f6:82:5e:ba:01:57:6d:b3:a8:d6:
4f:8a:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client