Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: SlcK1YjUMarFn8ZVDnzqmuQTB6obw2r66bwd5kK/N80=
Subject key identifier: 85:0C:64:75:3C:9A:06:7D:36:1C:63:A7:73:0D:E4:E1:00:C0:83:D3
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 0194BD85545EDA777ED57A1F519EE64884FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0817
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: 60qVn1Kw/piW0/9sf7eGddL1t/G69pU3G9tZSCYSLe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:5e:da:77:7e:d5:7a:1f:51:9e:e6:48:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=850c64753c9a067d361c63a7730de4e100c083d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:de:4c:5f:1a:b0:1a:47:fd:28:37:9e:b7:
c3:06:bc:a0:a2:44:aa:14:3c:68:87:5e:42:ee:a5:
b7:2d:87:c2:9f:d0:28:8f:19:2c:cb:77:fe:f0:b8:
3d:0b:65:e6:aa:72:e8:77:97:d8:1f:7a:40:8f:69:
1f:f0:99:9f:86:d6:3f:04:ff:7d:22:a9:3c:05:27:
ee:80:d0:a4:ba:df:11:5c:ba:86:14:e7:c3:86:e2:
c0:43:89:0a:3b:5c:fb:40:4a:83:2b:1e:c6:9f:67:
dd:99:16:41:2f:07:d1:73:6f:06:b4:73:b4:1c:19:
37:49:7f:65:d0:ae:a6:04:41:c2:12:74:1a:78:13:
51:f4:c1:9d:cc:b3:3a:4a:82:38:34:97:c0:d3:48:
37:6c:6c:85:65:cc:a6:16:29:69:a9:b2:8e:84:90:
5f:2b:bb:5a:e5:d0:f8:0c:92:91:35:49:45:76:c1:
e7:b6:ac:68:c9:67:7b:83:ed:dc:b3:7b:1f:a0:78:
bf:05:8b:dc:6d:ba:1f:55:1b:51:a7:ba:5c:fa:ad:
63:4f:c7:fd:ac:7a:08:d0:2c:85:45:7d:67:c6:1c:
60:c9:0c:8e:48:9b:3a:ad:2c:37:96:ad:99:0f:9c:
62:b5:5e:db:e9:70:c9:b2:f4:a1:4f:c3:87:dc:a3:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:64:75:3C:9A:06:7D:36:1C:63:A7:73:0D:E4:E1:00:C0:83:D3
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:f0:96:48:fc:f6:a8:51:2b:15:2e:5c:75:3f:45:40:2b:
98:e7:8f:05:2b:51:22:2f:ff:6c:db:11:31:b1:02:31:2b:b6:
13:54:bf:63:8c:9a:b3:17:d5:6d:09:0a:cf:87:b0:f0:30:49:
7b:a4:6d:43:53:df:40:d5:93:a4:5c:70:97:61:e9:2f:c2:47:
53:f5:f9:66:a4:1c:e4:f2:19:13:2a:c3:9e:1c:dd:50:30:f8:
41:51:d4:23:88:52:17:dc:ca:44:2d:4e:19:a1:8d:17:91:2e:
c7:ed:b3:44:3c:1f:ff:a7:d8:54:50:51:2f:ce:ac:69:09:c9:
f2:57:83:e3:b5:1a:2a:7f:7e:35:ac:81:ae:b5:e8:6c:c8:25:
d0:55:69:bc:e2:9a:49:18:17:22:4e:a9:da:ab:9e:89:f9:43:
f3:83:4a:8f:f3:8f:a5:d0:8e:d3:02:f0:46:c7:14:99:7e:df:
ec:a4:f8:b2:f2:8a:68:6b:66:4f:ff:72:0a:35:9a:2b:ae:1e:
48:d4:85:b7:37:d0:db:db:f2:82:32:b5:72:08:17:93:8d:1c:
2c:de:4d:49:a8:6f:22:80:1a:6f:4f:e3:12:6a:60:d5:aa:02:
5b:96:27:2a:3c:db:79:25:1b:17:fa:0a:4f:5a:76:f6:1d:7a:
c6:ee:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:49 2025 by rpki-client