Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File: js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier: XfZG7K084jWpEMQGG2FlAB2ZiP/xT2VFcERq3cNefpI=
Subject key identifier: 4A:57:41:AB:34:CA:08:D8:E8:3D:CE:2F:FA:68:92:91:FA:CB:2F:5A
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 0194BD85B616D413CC670852D5A687E0C802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number: 0669
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (hash: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=)
2: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (hash: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=)
3: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: QymE2+3nlZ9fvDwY7TOL8fkzXh7j1eWkcYlo4SOI0NI=)
4: kWqQsigWLE-Ov88YUeZJL-x7iCw.roa (hash: Ge/EMSQE9osHtx1/BzfNSCkBRWxNw3C0d8zRkadzqgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:16:d4:13:cc:67:08:52:d5:a6:87:e0:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=4a5741ab34ca08d8e83dce2ffa689291facb2f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:a9:cf:9d:e7:eb:6d:b5:7a:19:e9:6e:dc:
7f:e9:c0:dd:de:21:38:41:77:98:e7:8e:ef:6f:68:
79:df:06:88:88:7a:8d:c3:9a:94:fe:9f:66:00:2f:
ae:f2:62:87:1c:4c:a9:bd:dd:b8:95:83:cd:67:ac:
dc:90:06:e1:0b:90:70:be:b1:a0:6b:2a:54:fd:c2:
f6:f5:7a:24:e2:fd:6c:4a:1a:e2:5e:90:42:da:b1:
dc:69:82:30:40:1a:06:c8:d1:ef:2b:0c:4f:56:8c:
20:87:f8:12:6f:4b:1b:43:f2:85:fc:a8:01:35:67:
d8:ae:91:6b:37:1c:c6:57:f0:cd:5c:39:b1:1e:2a:
5f:a7:0e:d0:64:88:58:91:80:c0:59:89:13:dc:01:
fd:f2:4c:d3:d0:18:58:bd:06:25:7f:7a:5a:bc:75:
fd:8b:85:f5:73:40:16:fb:ee:bd:5f:49:5e:90:82:
58:2b:e4:a3:aa:4a:56:04:e8:b5:4e:91:6a:6a:51:
da:c6:55:c2:0b:8d:db:18:b6:ac:49:5c:05:38:b1:
11:32:10:1c:64:99:9f:27:e2:12:9d:a6:19:8c:f2:
b5:40:30:c8:8c:a7:3e:03:33:e4:ff:29:73:75:0e:
67:13:ce:03:80:be:a5:1c:37:0f:d4:b7:09:3b:68:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:41:AB:34:CA:08:D8:E8:3D:CE:2F:FA:68:92:91:FA:CB:2F:5A
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:51:13:f0:c3:9b:65:03:29:1a:6b:c0:18:cb:09:51:5d:
b1:2a:08:47:56:97:8b:41:04:8d:5c:dc:b9:1f:80:7e:39:a3:
78:63:95:e8:82:85:e5:ad:83:97:ab:bb:97:9b:24:d2:3c:e6:
a5:c5:1b:4f:15:70:46:7c:ef:fa:16:06:fd:c2:78:e0:d1:ff:
51:01:fe:19:a5:8a:8f:6b:e6:e2:4c:7f:0d:ba:e8:a9:76:a3:
b5:39:14:a6:fe:1f:d2:39:17:97:a3:2f:e2:7a:51:7e:d4:85:
8f:9d:a1:21:a6:71:83:04:f5:29:a1:d1:58:0f:1b:54:65:95:
1b:c6:71:e2:b3:6f:f1:2c:c6:43:13:6f:d2:90:3f:1e:68:ad:
af:b5:54:9d:a0:0c:25:73:91:1c:db:ce:09:65:4c:ae:24:71:
88:e3:19:3b:f6:d0:a6:ba:c5:2b:3e:95:74:bb:87:b0:44:2e:
36:b0:bc:d0:f4:88:9a:e8:0d:6d:60:c5:7a:c6:2c:73:73:a4:
54:0f:95:d1:90:cc:d2:aa:93:48:4b:eb:81:4d:ab:e4:6e:c4:
ba:32:39:b6:43:cf:77:07:98:09:b5:27:8d:18:cb:91:21:dd:
59:e5:9d:c9:4b:e1:7d:79:29:db:39:23:f1:bf:a1:28:ba:51:
ad:53:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:10 2025 by rpki-client