Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: bkn4ZMrF3Uc1TWKjcVHinbTUIRj2LQJY0XKfluUuHMI=
Subject key identifier: 52:16:3A:C3:BF:60:CD:60:67:99:19:DA:36:2A:E9:49:B3:B3:9D:3E
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0194BCA9CF51D194C315CC5667184CD6D3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: ToCdF5lY/ANutZEvZUxY0eE+nnWL8/XiVywuHDLv2iM=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cf:51:d1:94:c3:15:cc:56:67:18:4c:d6:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=52163ac3bf60cd60679919da362ae949b3b39d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:da:52:ca:c4:00:8a:27:8e:96:cd:5d:8c:
5e:a7:b1:e1:6b:f7:ba:f5:53:c9:37:75:7d:72:99:
ee:61:a0:f8:d5:c7:6e:19:34:db:fb:b0:c7:06:c1:
23:89:58:11:77:1a:a0:19:46:27:5b:82:cb:49:96:
60:5c:17:52:91:6d:cc:61:3f:2e:19:68:98:0f:99:
18:4e:63:f7:f9:7c:ca:03:cf:18:99:6b:1c:16:7e:
5c:00:33:4b:37:8a:b8:fd:cd:f9:02:c6:ce:7c:f8:
9c:1e:9a:b9:06:19:50:21:e0:56:a4:fe:d6:1c:a5:
63:02:87:5d:10:f8:fa:f9:80:01:b8:dd:4b:61:33:
4e:6c:54:0c:93:9d:63:ed:1f:08:d7:e8:c1:a1:16:
e9:ae:f4:b6:3c:f1:e8:43:b1:d9:3f:b4:b5:d5:4c:
5d:43:99:1c:7f:04:0e:da:14:cb:56:25:b4:78:55:
4a:c8:92:43:c7:f7:19:c1:00:9e:3f:7a:a7:d2:77:
65:ce:d6:9b:5c:fa:ec:24:9b:be:f1:a9:f3:ef:36:
f3:40:41:c9:e3:35:79:78:57:13:d2:0f:b2:b5:0c:
d3:21:b1:ce:5f:ae:8f:76:64:f1:9a:ed:9f:65:cd:
e4:86:77:44:44:53:90:6b:d1:52:8f:1e:b9:f9:3a:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:3A:C3:BF:60:CD:60:67:99:19:DA:36:2A:E9:49:B3:B3:9D:3E
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a0:53:ba:98:da:1a:a6:38:b9:0d:d6:26:37:c8:bc:cd:f4:
d6:12:61:bd:a2:6f:2c:0b:84:7c:1c:de:a4:5c:0e:fd:ef:21:
88:f6:43:dc:d2:3f:24:43:64:4e:2d:aa:77:22:32:87:2e:c7:
35:a9:b9:b0:ed:2b:41:c4:cc:4a:a5:8d:7b:67:92:b7:f3:0a:
a8:f3:ad:4d:b8:89:b6:af:b7:04:e8:2f:b9:bc:13:68:68:3b:
16:50:b9:0a:85:2b:5c:d3:48:de:13:48:e8:11:e5:6c:1e:aa:
5a:6d:b8:ee:13:1f:f6:9d:ce:ff:8c:71:17:4a:2c:c4:97:26:
19:dc:2b:fa:a1:8c:87:66:7d:98:08:8e:66:18:82:5d:82:b4:
98:8e:ad:ac:ba:73:12:26:b1:aa:11:d8:b1:40:d8:41:02:34:
c7:57:4d:51:ec:2c:aa:2f:53:1e:97:0a:0f:ee:90:d0:bb:6c:
6f:29:5d:c8:4a:6a:2d:2e:be:43:05:69:6f:41:ef:49:a0:4e:
d9:9c:2d:1a:8a:22:6e:ff:d9:7c:1a:9f:3c:e8:a7:c6:72:cc:
db:83:8f:02:82:79:1c:2a:b3:42:ba:0c:67:c0:e0:00:83:ee:
68:3d:c3:d3:eb:46:ce:5f:b2:84:f4:ec:48:95:0b:6b:cd:f0:
84:a8:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:52 2025 by rpki-client