Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: KHAZW9QkmKUqa90RNKl/GrPU4FPJuP6SjrVBZNux0pU=
Subject key identifier: A6:76:5B:D6:B7:3C:13:30:8B:A1:F9:27:FB:3D:4D:A1:58:C5:F6:2C
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0194BCA99C7528FE9B3AF9474AFF39C33AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0DE8
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: RJkO8AUrZrMkwWrIpOKAj9ZRQns.roa (hash: DMl9U1g0NhHcsK5udeo5/s32paUDRQXnGqAqFKyzYXk=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: vk5oidZSluDzah05XA30W76VaoUeAo1JUFUMVjgMQVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:75:28:fe:9b:3a:f9:47:4a:ff:39:c3:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=a6765bd6b73c13308ba1f927fb3d4da158c5f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:9e:4f:8c:ce:cb:6b:5c:37:bc:21:1a:dc:
33:77:a0:44:3e:7f:8e:5e:df:83:cb:58:10:c5:2c:
29:1b:5e:9e:01:cf:d3:68:68:f9:88:b6:a7:b5:27:
4d:cf:73:a4:7d:f7:e4:14:af:91:e9:3d:d0:6d:13:
80:df:56:5a:74:f9:51:02:d1:65:48:40:77:fa:ea:
24:cd:2c:19:26:12:fa:93:1e:e2:f4:6c:ea:b0:d2:
d6:27:92:1d:fc:ef:05:55:ed:70:18:ec:94:28:65:
55:f7:e9:77:1d:1a:68:a9:59:a8:f0:1c:8d:7c:fd:
3a:9b:77:2d:2e:9e:65:e9:7d:74:e5:9f:9f:81:21:
6a:8e:cb:8b:f8:51:4c:89:bc:4a:2c:7a:04:21:ad:
52:f1:ae:a4:4f:ca:72:95:a2:f6:b5:f3:84:64:ab:
13:8d:3d:a6:8f:ce:16:06:93:7e:7a:51:36:aa:9b:
b9:25:a1:23:82:ed:8c:93:0e:6c:10:56:e6:1a:71:
1c:25:0f:b5:39:6a:38:29:0c:ee:c8:9d:f1:ff:90:
4f:58:74:f7:34:86:25:79:65:aa:51:35:3c:e2:f8:
2e:a2:ea:85:da:67:41:02:7c:32:3f:1c:82:4e:13:
e4:65:11:d3:dd:18:1a:2b:aa:cf:6c:82:b6:4b:f3:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:5B:D6:B7:3C:13:30:8B:A1:F9:27:FB:3D:4D:A1:58:C5:F6:2C
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:25:68:27:51:af:c7:e9:16:e3:34:e9:c0:ca:3f:e0:49:
70:57:5a:41:22:a4:2b:80:8c:89:ba:78:42:a1:67:cf:4a:e3:
fe:8a:41:ea:26:49:8c:ef:25:d1:fe:38:21:7c:26:ba:77:bd:
42:81:8e:96:4a:b3:ec:93:ce:9e:02:f7:72:df:b1:58:9a:a3:
e9:f7:1f:ae:e8:c9:38:a8:7a:16:c1:fc:6d:04:89:30:24:51:
06:5d:8b:a4:60:34:12:d9:ba:5c:0b:be:c0:d8:79:d3:bf:7b:
bf:ab:e8:a8:c0:84:e7:6b:e4:1e:13:66:8a:f8:1f:12:ef:ea:
26:e9:5a:7f:24:31:15:87:a7:3b:7d:72:c5:be:4c:26:8b:cb:
39:24:cc:f9:a6:22:40:0d:cf:8f:b8:99:c3:44:b8:21:68:50:
d2:3b:21:c2:ef:96:32:f9:09:dc:70:a3:47:5a:63:4a:00:bd:
21:25:8b:68:80:a8:c0:1d:b7:51:95:d1:1f:3e:c5:2e:13:01:
17:ca:3b:0b:06:e7:83:8a:f1:fb:81:4e:17:b7:5e:16:64:2f:
3d:87:9a:0a:ca:c4:1f:52:d6:95:f2:c3:72:c3:a5:82:dc:46:
ea:3d:e8:41:59:7c:55:68:a5:1e:af:d6:13:61:96:a1:23:e7:
a2:e3:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:23 2025 by rpki-client