Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: +jx5mCzoApBMm6vFLEceBvd8Pgy9Gkw4QIdLT+lRmYM=
Subject key identifier: 31:1A:7E:41:60:8C:8B:A2:15:91:F6:5A:6B:F4:8C:FD:4A:4B:A4:CF
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 0194BD1784244CAC217E4108794608850CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 02A8
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: m9hPJxuBwP7SBXbIW1/xeoMJwlw0Ay4PLjbMnob2gQw=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:24:4c:ac:21:7e:41:08:79:46:08:85:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=311a7e41608c8ba21591f65a6bf48cfd4a4ba4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:ad:e5:7b:e3:1d:b2:fb:6e:75:c0:c5:85:
11:76:a7:db:f7:08:28:bb:58:22:78:87:a9:29:5f:
8b:5b:40:2d:74:e1:ee:78:5d:d5:00:3d:fe:21:96:
fb:f9:1c:50:34:af:6b:e0:30:90:6a:a6:1a:ca:d5:
49:8a:2e:5c:81:e3:1f:0b:bb:22:ee:9a:8a:30:4a:
48:28:f6:33:c2:5f:cf:2a:19:78:be:84:8a:82:03:
5b:c1:f9:87:79:67:00:68:d2:c8:74:02:a8:11:c4:
52:9c:26:de:36:37:02:46:2a:14:34:ee:5f:38:9a:
87:50:18:fc:e4:11:9c:86:11:cf:f7:76:74:26:37:
e0:9d:b4:46:52:23:32:41:ab:52:9d:52:7c:60:4a:
a8:64:96:d6:24:80:65:94:60:85:ac:5e:6d:04:c2:
a7:e3:0a:ca:31:8e:5f:01:53:02:eb:47:0e:74:99:
a7:34:c4:07:f5:d5:02:3b:e8:29:29:bf:66:4d:d3:
de:dd:6a:2c:71:51:41:ca:1b:84:cc:e5:62:54:7a:
f2:b1:9f:c5:1c:bc:fd:77:0a:c5:ba:3c:06:a3:db:
d3:5b:79:41:f8:74:a8:16:93:69:24:a4:47:42:0a:
67:cb:05:b8:77:4e:74:d9:c5:39:53:7a:f8:8c:da:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:7E:41:60:8C:8B:A2:15:91:F6:5A:6B:F4:8C:FD:4A:4B:A4:CF
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:21:98:18:10:50:d0:3a:22:cc:aa:71:3f:08:42:3c:eb:57:
68:73:1e:c8:42:f6:0b:6c:ce:5d:b8:1d:2f:36:73:d7:d1:16:
f9:9f:ef:1f:9a:55:93:36:98:04:3a:5a:e3:1f:ab:0f:e8:1e:
b0:9b:77:04:a1:36:04:64:15:4b:6e:29:9a:a3:15:2a:6d:7d:
a8:92:42:35:3c:59:35:24:e9:2b:95:58:7e:c4:0f:19:66:a3:
9d:10:4b:50:6d:d8:c9:a2:e0:35:36:0f:90:a0:be:8c:1c:b6:
cf:c7:cb:de:88:2d:03:9f:94:17:03:7d:ae:c0:2e:59:77:f4:
04:fc:2f:1f:60:c1:2f:be:55:8a:e9:ec:30:48:55:ca:bb:a0:
6c:1b:1a:50:92:15:4f:f9:43:1f:05:a7:f1:33:3d:5d:22:5c:
70:53:6d:26:3f:2e:53:a7:94:ec:39:07:d7:dc:a2:a6:d9:d0:
d9:a8:41:9a:74:59:c4:5f:dd:78:7a:3f:b1:a7:ef:61:08:d1:
69:dc:68:13:0c:74:92:d0:50:88:8a:43:06:8b:b8:3a:10:bb:
fa:5c:cb:80:90:de:b9:9e:f3:a5:1d:b7:d7:5c:8f:ae:1a:aa:
d8:b3:2c:60:b6:18:37:e7:5f:c3:05:e7:cd:4e:f8:c3:0d:e0:
cb:4c:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:07 2025 by rpki-client