Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: a+HxzWwjU+99s2xKvQDLEbHuACHD6nN7jNR1jbOUwA8=
Subject key identifier: 84:07:A8:DB:29:CF:20:D6:49:DF:66:0A:40:12:AD:09:49:45:57:B9
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 0194BC3BF9E61F08992293B05DC84165FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 01DB
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: TelciHh83ohMZLEiglr17mKx9tQ.roa (hash: WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: d8ErtL0DKYi7fdGpqm1FYJMduP7r2WI7xQXJ7tgzXK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:e6:1f:08:99:22:93:b0:5d:c8:41:65:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=8407a8db29cf20d649df660a4012ad09494557b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:68:32:8e:38:18:a8:f1:cd:1b:44:6d:bd:
b4:29:6b:13:95:13:86:2a:55:bd:c4:82:70:e8:bf:
f6:e8:e5:e3:71:e5:3f:37:82:c6:1e:0f:4b:ed:9a:
94:57:55:a9:89:c6:1c:12:c4:86:e4:d2:e3:cb:94:
5b:a0:1d:f4:dc:97:71:ca:c1:fd:23:7f:06:c4:54:
ca:3e:bc:3a:da:61:e6:c1:5a:63:30:2a:0c:31:0e:
ae:49:f1:01:7a:cb:9f:ea:e3:18:d6:37:ba:0f:42:
68:df:a3:a5:23:77:a3:27:8d:dd:eb:f5:10:47:5f:
ec:7f:f2:51:8d:a5:b8:f1:d2:4e:cd:e9:61:2f:9d:
95:3a:c3:15:e0:99:59:37:82:05:8f:ba:60:96:71:
aa:4e:08:f1:97:d2:da:97:9c:a9:30:d3:35:ff:37:
0d:07:13:58:9f:c6:78:a2:11:f5:55:e2:44:c3:c1:
f7:09:75:ac:c3:52:4f:01:0d:85:01:de:8f:a0:c8:
4f:5c:ed:cb:a8:11:b5:da:10:f5:30:b9:dc:cc:a1:
2d:a0:b3:51:fe:d4:c5:05:6b:ff:fe:45:bc:1e:b9:
24:97:cf:ee:0b:99:b7:d8:e5:38:ce:83:67:7e:1d:
6c:9e:1f:77:36:5e:16:ce:ee:23:aa:4e:dc:6a:71:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:A8:DB:29:CF:20:D6:49:DF:66:0A:40:12:AD:09:49:45:57:B9
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:b2:fb:de:0d:54:8f:46:9b:1e:fb:76:41:b5:ec:3b:a3:
97:c4:ed:89:e7:5a:e3:0e:af:1c:d3:dc:77:2f:b7:83:37:63:
fc:b9:04:62:23:72:db:77:15:35:13:e0:96:ad:7d:c6:01:a7:
3d:37:c8:3c:bd:dc:a9:4b:15:74:19:5a:5f:2c:00:44:4d:25:
b3:d0:9c:71:4a:e0:b4:34:c2:33:8d:a8:67:70:ac:34:d7:7a:
ff:44:e6:98:26:97:5f:ae:5e:ed:49:16:53:2b:ea:84:e1:84:
ee:50:74:ad:f4:2a:3b:ef:26:d5:2a:80:5f:e1:22:de:74:58:
a6:9c:7e:65:c0:25:04:f6:9f:dc:d5:c3:2e:4b:fe:f9:d6:bd:
cb:ab:37:f5:96:f3:ba:c8:5e:3a:d6:c4:f3:d2:49:a3:c6:13:
be:6f:58:08:31:87:3c:7b:ad:86:a6:d1:1b:eb:fe:08:c7:64:
ab:b9:f7:f2:e0:2d:2b:f1:be:1e:2d:90:c8:14:62:0c:61:ed:
31:00:05:35:d7:f8:03:0c:4f:53:13:18:94:9c:55:82:54:95:
63:ca:76:7c:be:25:79:3f:46:0c:c9:55:dd:fb:69:bd:c3:6d:
f7:b9:3f:0a:c5:fa:78:a6:73:9c:0e:a9:20:cf:71:da:23:4a:
8b:56:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:13 2025 by rpki-client