Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: G4m43PIcgOsjDf0aK+X1QVFqQwGPrM+IcsuBcl2Ap4M=
Subject key identifier: F5:25:78:78:C4:EC:64:4F:50:D0:76:91:B0:79:65:96:4E:B2:67:B4
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 0194BD85AC0240A0A004156AD8BE1EA2F870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: cRuKLExHm918SGo9ct5lYzwQ2T/xWxT3byWusvHSqzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:02:40:a0:a0:04:15:6a:d8:be:1e:a2:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=f5257878c4ec644f50d07691b07965964eb267b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:f3:ce:dc:47:95:12:de:09:24:10:d0:cd:
83:7e:1a:1f:43:57:49:7c:3a:6d:ea:cb:0f:f8:cb:
98:2e:f0:79:e3:d4:e4:cb:cd:d8:07:08:01:6b:57:
34:1d:6f:68:1c:0f:d8:fb:f1:89:8c:8e:e6:49:1c:
27:36:78:d8:c3:35:10:c2:11:e1:36:27:49:49:1e:
42:c5:94:8a:3e:8c:43:88:94:4e:e0:25:ec:2d:3c:
32:b3:1f:14:3f:14:72:ca:d8:b4:9b:80:67:01:79:
0d:f3:ca:e0:77:b4:ee:c0:0e:cd:90:46:ba:02:a9:
de:73:1d:91:bb:ff:eb:38:23:bc:a5:9f:52:8d:d1:
09:ab:a3:a1:35:11:e2:d9:cb:19:10:18:17:3d:08:
f1:ef:84:18:2e:8b:47:35:56:68:0e:61:7b:93:58:
39:b5:68:ac:f6:7c:05:7e:08:c3:eb:ad:13:99:15:
34:ff:9a:a8:ef:a0:32:cd:3d:9b:02:c4:79:4d:02:
3d:82:5e:b3:b6:1e:a0:e8:e2:55:17:0e:f9:6a:6a:
3a:af:1b:1a:db:ee:0c:b7:51:0b:c0:f7:59:9d:6b:
58:f3:f1:81:78:46:73:c7:0c:cc:6d:99:d7:23:31:
7a:4b:24:6d:a4:ae:46:a5:c9:ac:2a:e8:7e:4f:a9:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:78:78:C4:EC:64:4F:50:D0:76:91:B0:79:65:96:4E:B2:67:B4
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:16:b8:13:97:78:63:d2:ff:84:ba:e4:2d:e6:12:ed:d7:
4b:4a:0c:52:a4:b5:1d:3d:fa:cb:54:39:22:cb:9b:83:c4:a1:
da:42:6e:d5:89:0c:ba:bc:fc:b9:f0:18:c4:18:93:ad:d6:e2:
ed:c0:96:42:9f:2a:67:8d:90:05:98:66:08:49:b5:ad:d7:c2:
a4:db:a5:fe:ab:41:05:e7:57:7c:c0:20:6c:ec:73:26:c1:46:
08:72:dd:91:97:30:5d:ba:3f:3a:11:dd:fa:f5:fc:32:02:e9:
78:1f:b1:cb:87:24:cf:11:63:99:97:0b:7d:59:bf:f1:6f:58:
33:25:d9:28:68:cb:5d:e4:58:e9:8e:55:0b:66:8d:51:c2:9a:
3d:a4:d8:70:3c:ce:5e:f4:3e:52:ee:bc:7d:ab:1a:d2:6a:d1:
1f:24:f4:3a:7c:c8:08:f8:3d:07:89:8d:2e:1f:be:c7:4b:9e:
ce:5d:ec:e3:96:e1:39:bd:78:61:f8:68:18:9b:20:d2:91:42:
f4:43:03:eb:77:a6:c8:96:0b:86:ca:47:e4:f8:3f:b2:b9:97:
75:04:ce:98:1c:44:1f:83:93:54:14:64:5c:36:bb:b7:aa:4f:
88:be:72:8c:b0:f2:29:ad:10:b3:ef:ef:78:76:32:0f:1c:4a:
eb:bf:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:27 2025 by rpki-client