Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: ohwLi3gWmxB00STAsPZqmn5oAHGdkiW+vwc9C9SO1Dc=
Subject key identifier: 93:3A:F3:B0:8C:D7:7B:B2:C7:9D:ED:DA:91:59:2F:A6:09:F4:B3:B1
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 0194BCE0ABAFCA0344C281D39730DC231F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0C9E
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: VVNhVprggEV0s7UbAeVmlxnHAdyZjMVT2Em+TJ7DDnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:af:ca:03:44:c2:81:d3:97:30:dc:23:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=933af3b08cd77bb2c79dedda91592fa609f4b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:cf:ba:62:b7:91:d7:9c:6f:6d:ab:8b:d0:
24:25:80:32:91:34:71:87:6e:2e:3a:79:d1:6f:a5:
74:8e:22:69:fe:ea:04:3a:c4:fb:9a:21:23:62:d5:
74:20:85:7b:a6:83:17:05:e5:6e:27:df:dd:55:71:
59:a6:55:6a:8a:43:07:90:8f:96:f5:b1:30:12:7e:
c3:9d:96:82:1f:94:30:46:8a:ac:55:92:1a:a6:ea:
25:6e:6e:65:4f:e3:79:2c:c1:d3:cf:76:ba:fd:90:
78:2f:c8:a2:dd:4c:a5:cf:15:06:fe:8e:f2:90:d3:
49:1d:47:33:f1:f2:57:7c:4b:5e:3a:a6:32:ed:b5:
8c:83:3c:10:cc:bb:d8:ff:d5:80:2f:62:d8:aa:4f:
5c:27:47:4c:4b:f8:6e:73:68:54:0f:3e:73:a8:67:
30:f9:04:9d:c9:22:cd:44:aa:b4:c3:c5:61:10:21:
4a:88:e0:16:ee:78:6a:a8:9f:cb:44:0c:4a:3e:46:
0c:c9:08:be:c5:e5:87:0e:fe:96:39:c6:92:b2:72:
d8:f5:3c:30:9e:80:d3:5d:08:44:ba:39:44:0e:28:
f4:5f:6e:0f:79:51:b5:22:27:17:2f:5e:9c:d7:3c:
da:8b:d5:bf:5a:a1:4e:36:c4:73:c7:0a:83:85:3d:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:F3:B0:8C:D7:7B:B2:C7:9D:ED:DA:91:59:2F:A6:09:F4:B3:B1
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:f2:27:2d:1e:e5:38:eb:b5:6c:de:72:87:ea:59:a5:13:
8b:b2:94:47:2b:67:e9:8c:a0:60:4d:98:c8:b5:47:88:75:14:
14:6f:2c:72:51:e9:1e:7b:c3:b1:a5:a2:fa:a9:70:6d:fd:ea:
d5:55:b2:a9:cc:07:bb:36:2c:5d:6f:05:c6:f5:de:b0:54:ea:
51:66:77:13:b6:20:37:3d:9e:44:5e:2e:5a:65:59:42:f2:8f:
99:17:a9:12:43:e5:5e:c8:ac:a9:0f:e8:02:d4:ac:68:6c:74:
26:41:37:fa:10:03:e4:13:70:f6:87:1b:2a:d4:3e:65:d6:81:
18:5b:72:f4:dc:22:a2:b1:a9:8f:e9:31:51:2c:5d:65:99:ac:
df:c7:a7:49:7b:7a:ff:57:08:9a:2d:7e:f0:5f:5c:5d:99:3d:
9b:4d:87:e4:ad:fc:67:10:1d:81:01:22:0e:5e:cb:c4:47:8d:
25:b9:8c:f7:0d:ad:7d:dc:e6:79:9e:05:dd:37:d1:fd:e0:04:
76:60:59:99:1e:8a:18:35:17:8e:ba:bb:3d:af:74:02:be:93:
73:54:28:1e:a7:9f:8a:97:62:37:19:5c:28:62:59:a8:d0:e3:
8a:dc:e3:fe:95:cb:a1:65:f6:1f:96:93:ff:f8:b8:c9:4b:65:
32:67:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:35 2025 by rpki-client