Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: MdGLI+yPX9bTYkzexTay2vm56Xl3aoVm4DgOi1C1pIM=
Subject key identifier: 5D:43:01:D1:32:83:1C:D6:68:67:8F:B6:65:33:D1:EF:E7:DF:56:CF
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 0194BCA9C96630C392E2B236800AB027EC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: wn5iiiybGcWV28Olj200+NM2cT18COeQ7uAlOpdUiZw=)
2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:66:30:c3:92:e2:b2:36:80:0a:b0:27:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=5d4301d132831cd668678fb66533d1efe7df56cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:6f:b7:72:35:f7:b8:4d:2a:e4:6d:44:3b:
33:1a:11:86:1a:52:d9:5b:b0:a8:72:41:f6:9e:cc:
30:fa:81:35:8d:63:f1:44:a0:14:d1:eb:70:94:cc:
8a:06:eb:b6:da:04:be:30:6b:98:36:0a:f2:8b:cc:
64:0c:15:16:d7:78:49:66:08:1d:bc:89:7b:8b:9b:
62:5a:15:92:1d:b4:6a:b4:46:a0:72:d3:d0:b5:8f:
73:bf:0d:bf:30:e0:4f:b9:34:23:7f:b0:15:4d:41:
9e:db:37:e7:a7:67:37:eb:52:ad:d9:83:a7:53:42:
b2:07:b9:94:5b:4b:10:7d:42:41:0f:dd:da:1c:0f:
92:e0:45:df:14:dc:be:52:9e:7b:a5:d9:31:02:6e:
9d:56:1b:5c:6c:00:48:e2:52:f8:be:9d:78:b4:da:
09:8b:fe:45:2f:03:39:16:b7:32:d5:f0:9d:51:ff:
c5:b9:21:0b:4d:39:28:db:9f:cb:39:3c:62:f6:66:
d7:ef:51:eb:2f:a5:30:f0:bb:41:92:68:77:b4:f0:
18:44:5f:0e:f1:90:98:82:da:69:e0:61:e6:62:93:
82:4c:05:5f:f8:7d:d3:2b:05:b5:07:53:7a:7f:8d:
dd:a1:0e:17:0f:6b:ce:b6:f6:d9:e9:fe:2e:f6:c1:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:43:01:D1:32:83:1C:D6:68:67:8F:B6:65:33:D1:EF:E7:DF:56:CF
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7f:83:c1:b0:bb:9a:ad:1d:8f:87:6d:50:e3:e5:33:21:37:
18:0f:c9:2d:3f:17:d8:b3:a4:3b:0d:e0:2b:f2:e1:bd:a5:bb:
dc:3e:06:e0:fc:6b:b8:fc:74:52:75:f9:72:a6:07:7f:eb:76:
e5:1b:15:e8:cd:94:c4:d3:67:be:8a:75:a2:24:67:3e:a2:c2:
8d:ea:b2:90:cc:b5:d2:15:05:a5:43:2a:5e:08:a4:64:96:31:
5a:02:62:cd:6f:3c:48:bc:b0:5e:da:f3:10:a5:40:08:b4:53:
4b:d2:41:b9:80:60:f1:de:b7:2b:6f:c2:30:58:d9:49:c2:1c:
fe:15:70:dc:5b:1f:be:a5:47:77:7f:dd:d2:33:7b:4a:88:1a:
b9:28:16:c1:d8:4e:e9:96:59:3e:f5:90:0c:a8:e0:8b:e6:9c:
45:64:90:9a:09:93:6c:0a:8a:1a:4a:3b:02:9b:90:52:4a:b2:
0a:6b:b3:c7:10:1a:6b:5d:e3:23:5c:a0:b3:e0:79:b0:70:84:
b0:1c:bf:fc:1a:ad:0a:f6:76:77:e4:70:91:e3:99:d9:e6:13:
d1:32:e3:56:f2:fe:f9:65:4c:d9:5a:d4:30:0b:3d:c2:c4:8c:
00:f4:ab:7a:60:e5:50:47:01:3b:a7:42:76:bf:a8:b5:c8:fd:
9f:48:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:56 2025 by rpki-client