Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: epXl28u9jXgnqJ/UrL+iKXjwmxBP3TdHlbc6rKH8ab0=
Subject key identifier: 98:CC:18:91:C2:95:C8:68:32:B4:32:34:11:73:F4:DF:C1:92:2B:11
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0194BC04BC15F887B42755FFA2A0C5CE44DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 12EF
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: y5t7oFnQSawLgoW1+nJ1+78LKOsTWTny4Dy1GqtKpoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:15:f8:87:b4:27:55:ff:a2:a0:c5:ce:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=98cc1891c295c86832b432341173f4dfc1922b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7a:27:2e:94:ca:c3:03:f8:3f:dd:a1:03:c8:
66:a8:92:42:ae:bb:d0:fd:2f:c2:4f:74:7e:d5:de:
5a:41:e8:54:50:5f:3a:0e:5c:1e:af:fe:4b:0b:b3:
9c:c8:ab:29:f8:a5:34:d6:68:a4:7f:5b:98:94:6e:
4f:2d:b3:36:f0:73:69:ee:06:6b:89:74:62:35:dd:
64:3b:81:d6:e1:71:ad:22:41:6e:e4:62:bd:33:7c:
55:8a:da:bb:b4:29:56:6b:e6:ed:47:0e:90:d8:0d:
48:9d:3d:0e:0f:35:ed:b3:19:8b:db:3c:23:a5:df:
22:41:76:4a:43:13:8a:65:d5:d9:30:62:71:d0:2f:
26:20:56:6d:b1:4b:2f:f8:a3:56:8e:6c:2c:de:2e:
01:2f:ba:ba:b5:a0:d6:a5:96:db:a0:63:cd:58:e9:
8a:3e:7a:6e:14:a8:76:ce:0d:28:52:1b:c8:89:82:
06:e3:59:9a:c7:63:6f:db:91:c6:99:81:3b:a6:74:
be:93:87:ab:4c:54:65:2c:f5:0b:5b:c6:8f:d7:e2:
1c:8b:13:b6:84:56:2a:a3:fb:d5:4f:f2:5b:5d:60:
d2:6c:f7:85:db:e2:ec:18:74:bb:36:b7:ef:70:66:
26:5b:a9:c6:63:88:d9:7a:85:dd:32:9b:3e:7a:c4:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:18:91:C2:95:C8:68:32:B4:32:34:11:73:F4:DF:C1:92:2B:11
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2c:7e:6d:d1:f3:fb:03:68:a9:ed:7a:ac:92:ab:f1:57:58:
4a:83:66:da:a2:7f:8f:bb:fe:fb:b0:e0:6e:92:4a:93:d1:75:
27:98:53:b9:d4:c1:49:b6:76:e2:58:7f:f1:8d:5e:99:04:57:
6a:27:b7:5d:a4:4e:f0:dc:f7:44:5b:f8:fd:4b:b3:89:eb:a2:
f7:62:d5:e3:a4:45:5e:38:0b:85:08:fd:da:78:a2:23:26:a2:
c5:02:25:75:8f:b1:1d:81:41:18:7f:2a:c0:48:47:a3:12:46:
bd:f1:83:c0:2d:b2:60:37:37:78:50:f4:93:f3:7f:59:1d:09:
82:c9:da:34:45:a8:a1:c5:a6:66:ee:4b:b7:a7:0f:ed:d0:dc:
60:ef:6d:67:d4:85:df:02:fa:2f:9f:b3:5d:fb:4c:89:3c:c7:
2f:68:97:57:f6:65:26:95:dc:19:88:a8:b0:22:31:89:e2:e2:
5e:3e:9e:84:d4:f3:a4:12:bc:d1:f3:9b:17:26:0b:07:8f:64:
21:74:ee:ea:8c:eb:3f:10:27:86:8f:4b:d9:ca:a1:8c:70:8d:
ee:dc:a4:9d:10:43:ca:90:0c:5e:42:6f:4f:22:53:73:a7:24:
29:3e:28:db:6b:0e:20:f0:75:89:77:2f:b7:be:94:25:7d:8f:
94:61:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client