Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: rMrQtxTKBNDZEPYXjPtpPE4O5LSmT5gt9+lnFVASJog=
Subject key identifier: 19:91:5C:BC:C8:A1:21:3D:24:BB:0F:4F:D4:B7:F8:AB:23:72:A9:58
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 0194BC72C0B19927671A3941679A94BA9647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 131A
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: dSwjJu1WVPMBFvU6TJKPj9hhftnKfqPOZpwWR4PmBiE=)
2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:b1:99:27:67:1a:39:41:67:9a:94:ba:96:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=19915cbcc8a1213d24bb0f4fd4b7f8ab2372a958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:bc:49:86:b5:a2:62:8b:cf:8f:7b:36:de:
50:fa:d3:70:be:19:53:01:ae:4e:7d:89:83:6c:b8:
56:a2:e7:8a:65:af:b1:8c:95:c5:9a:ad:40:bf:24:
eb:8f:13:b3:c0:7f:39:05:74:82:e7:b0:78:9c:38:
47:df:51:72:1f:74:2c:60:54:08:c9:ef:a2:9e:57:
da:fb:98:bf:42:1c:95:84:4a:e3:b1:fb:d5:2a:6a:
26:0e:f2:8a:7d:53:eb:57:84:b0:ef:79:26:a8:0a:
88:c3:64:07:e5:c2:cd:69:cf:93:f5:dc:b1:56:e8:
f8:60:96:9b:7b:92:fb:0e:7a:da:0a:53:8d:af:58:
d3:a7:03:4e:c7:69:a4:c2:59:76:d1:17:31:f3:8b:
72:d7:37:cf:37:91:3d:3d:c2:6b:31:35:eb:45:8f:
a7:66:cf:16:36:51:4d:19:9e:73:6b:89:a0:d8:f6:
01:50:d7:24:a8:ad:3c:ed:a5:6b:c2:ef:db:44:f9:
be:b3:19:d6:6e:39:a8:f3:0f:e4:29:31:0d:09:a6:
d4:f2:2e:e6:b1:0b:7b:c2:b8:40:3b:10:14:c9:dd:
ce:57:dd:22:e5:b8:43:10:cb:ea:0a:06:2e:10:14:
6e:47:03:ce:ff:99:dc:dc:f2:ca:8c:c4:b7:e6:2e:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:5C:BC:C8:A1:21:3D:24:BB:0F:4F:D4:B7:F8:AB:23:72:A9:58
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:b1:2f:e1:6c:92:f8:0a:d9:8d:fd:6a:a9:3f:cf:10:8f:
7b:97:be:dc:90:07:ec:21:f5:04:fc:46:ab:89:0a:21:c7:fd:
10:17:76:79:a2:e8:65:35:f6:4a:3e:66:5c:85:e8:8a:f4:46:
3e:90:92:24:89:2f:53:35:cb:d4:2d:1d:83:d5:8d:68:ca:cb:
9a:85:3b:78:21:68:a1:b7:fc:86:f0:d7:46:4a:ec:1b:6f:b0:
84:5d:d0:8e:c3:4b:15:e2:4e:2c:dd:d6:21:15:93:68:64:d7:
8b:13:87:91:21:98:cb:8e:e4:2a:14:aa:59:c1:47:55:de:31:
1a:a8:7d:a2:2b:71:b7:cf:0c:39:d3:43:6e:4d:4d:84:ee:23:
67:98:27:be:00:0d:9d:1e:10:88:1e:74:48:45:17:84:d6:2e:
b2:9e:1e:ef:ba:7b:dd:ac:05:68:ad:f9:33:b1:eb:c1:4b:97:
c6:15:72:97:71:f0:f9:3a:6b:f8:6b:a4:79:5d:2e:bb:37:60:
d6:11:81:24:a5:c0:c2:11:e3:de:2d:50:ab:45:e9:3f:aa:79:
c8:1c:c6:87:3a:29:02:7f:08:b8:6f:90:64:7c:79:fa:53:cc:
81:04:e3:60:7e:c8:30:9e:37:fd:23:e9:8e:7e:b4:7c:af:c8:
f3:2b:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:49 2025 by rpki-client