Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: 491otvMfMGcfbl0/EoBo1tTpnIfeV5B8dgK+tFYjnj0=
Subject key identifier: 4E:50:46:3A:21:9B:4E:65:EF:EF:5E:B3:42:35:C3:AD:4A:0B:59:9E
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 0194BC3BBCD84F6838E63E8C2896D381DD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: 1eZPxpy21H7NqqVQdzNXPM3npqUWDcbE3+A7mI4b1aQ=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:d8:4f:68:38:e6:3e:8c:28:96:d3:81:dd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=4e50463a219b4e65efef5eb34235c3ad4a0b599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:e4:5b:88:d4:54:5d:fb:d8:1c:bc:c7:7c:
23:40:2c:63:c9:38:25:2e:57:5f:9e:8b:03:88:4b:
69:d3:99:6a:cb:5f:20:b7:e4:6f:74:68:b1:80:50:
a6:46:8a:b4:14:11:3b:a9:7d:57:e6:72:c3:a1:4a:
e1:bf:35:3c:54:02:4c:31:fd:b3:98:50:5d:d0:ea:
01:63:fe:ed:5b:f0:b2:23:2a:9b:05:cf:62:62:91:
46:29:d1:4f:12:49:a2:65:07:13:df:44:06:e3:7c:
a2:e2:7b:49:6d:f5:fa:27:24:9c:08:29:80:eb:7b:
33:07:24:20:fb:03:ec:80:97:ed:d9:a0:d8:09:b4:
2f:81:e3:d0:34:2e:9d:db:13:73:f9:d6:0e:c7:2e:
8a:2b:cd:25:b1:ee:4d:fe:f0:ae:8f:af:36:30:5d:
4d:c9:b1:83:b7:53:4d:fa:94:35:9c:47:bf:92:9d:
cb:49:62:66:cc:6f:17:27:dd:3e:12:07:38:83:9f:
a6:ba:20:c5:22:00:c1:8c:d6:b7:04:08:e0:91:6d:
d2:3f:fb:51:09:47:c1:0f:98:d8:09:8c:95:6a:84:
64:f6:9b:bd:ae:68:41:cc:a2:83:67:fe:77:b4:52:
5d:7e:94:6f:8d:79:81:db:00:ae:4f:6f:a0:b8:3a:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:46:3A:21:9B:4E:65:EF:EF:5E:B3:42:35:C3:AD:4A:0B:59:9E
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:13:bf:7f:e3:d7:ce:2a:a0:e6:7c:a4:42:60:99:4f:1f:3d:
a4:4c:c0:25:9b:ba:5e:51:21:e9:45:01:32:d4:f3:02:08:f6:
03:62:4f:cc:87:4b:cf:ad:60:df:46:de:9a:15:88:89:98:e2:
47:96:59:99:7b:18:fa:db:f0:e2:74:0b:20:f6:d8:03:9c:ed:
92:e9:52:e6:1b:32:f5:08:97:74:94:07:0e:93:6d:40:4e:7b:
1d:4b:66:e1:42:b9:5c:6c:66:40:b5:20:1e:5e:f3:c2:84:2e:
e4:a4:f3:ef:57:f6:3d:ad:df:01:25:ea:ff:e0:b0:3d:ee:de:
9b:fa:63:4f:32:1a:ec:7e:41:39:3f:cf:9e:6b:8f:ae:e0:c9:
27:ae:e0:71:f3:27:0c:70:27:1f:73:f8:11:b8:ad:f0:bc:92:
69:95:86:f0:32:19:58:9c:95:3d:de:af:51:d8:f5:19:18:c0:
0e:62:09:0f:a1:46:f8:be:80:8e:34:92:d7:c6:54:18:35:d3:
04:0e:ca:f7:5f:6b:4a:58:94:20:21:65:e7:ab:e9:b6:d3:54:
0b:87:1b:34:6d:ba:bd:19:10:20:e1:bd:87:97:d3:9d:53:22:
48:7f:75:f2:d0:94:91:05:f7:72:78:2a:a6:1e:0f:f6:ff:49:
35:81:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:26 2025 by rpki-client