Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: 7KpSQDvrMsiMsVEEleBtVUeItEOsOJVza2LWJSaw3yc=
Subject key identifier: EC:DB:6B:F6:F0:C9:5D:50:52:6F:1E:0E:4D:6B:CA:B6:3D:4F:BB:80
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 0194BCAA3E282EB1C3507CDB37B128300018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: kAki9O74U/tGCWqfdIyROPgvJtFvobV65LN+L1Wi7b0=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:28:2e:b1:c3:50:7c:db:37:b1:28:30:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=ecdb6bf6f0c95d50526f1e0e4d6bcab63d4fbb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:97:93:99:b3:7a:6e:36:a4:20:ce:19:29:
73:c4:c7:21:d1:85:2c:0e:a4:c1:7c:66:62:12:dc:
fd:21:12:a4:25:e5:61:2f:d6:60:0c:95:4c:79:87:
d2:28:e6:3b:3f:62:63:5a:1d:5d:5b:b6:60:a7:66:
57:29:22:ac:db:0f:ca:44:f8:c9:38:d3:f8:eb:7f:
56:2f:df:e4:b5:33:44:2f:b6:89:a3:50:79:e0:77:
30:f3:82:7b:dd:d6:48:09:57:ab:38:d4:98:58:c0:
30:45:53:a3:1c:59:3b:a3:b7:09:1d:b1:8f:6c:73:
64:2f:03:b9:1c:70:e2:bf:78:91:93:66:ba:76:d2:
1a:8d:54:b0:b0:69:a6:43:e8:25:12:84:5f:ae:2e:
44:19:c1:72:83:a1:e5:28:8c:5d:d1:01:45:b4:1f:
da:ee:72:b1:72:6e:be:61:4c:51:f2:8f:bc:52:e4:
02:5e:29:45:47:97:4e:ea:7e:2e:3e:4a:06:66:1e:
14:e7:fe:c4:5d:f9:30:d2:8f:c6:75:e9:42:5c:dc:
81:b0:2e:d4:15:b8:1d:22:85:88:ba:ce:40:89:d1:
87:c8:60:cf:b2:57:75:43:5d:aa:71:43:59:7b:69:
ee:d2:94:56:b0:aa:8f:fb:a8:42:24:67:68:d1:b5:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:6B:F6:F0:C9:5D:50:52:6F:1E:0E:4D:6B:CA:B6:3D:4F:BB:80
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:8d:1d:46:59:b9:10:a9:36:b2:e4:b9:a7:4f:75:05:a8:
4d:b1:02:3e:f3:51:09:fd:6c:ff:dd:40:ef:fb:9a:65:3a:e9:
f3:e5:f9:2f:9c:70:68:87:98:b0:e0:4e:59:b1:34:a4:bb:1e:
74:a2:a5:0a:db:23:83:40:a5:4d:ad:97:d4:61:af:6d:30:dd:
57:7e:09:f0:6a:08:51:a8:e1:22:d1:09:05:aa:30:33:be:b4:
1b:23:09:ad:b3:0e:e2:1d:3e:08:7b:01:b3:67:b1:0b:6c:16:
2a:6e:9e:6f:4a:d7:f9:fd:63:c6:20:e4:3a:76:5e:5e:b3:1f:
bb:9a:8b:f4:31:ed:51:60:92:7a:b8:de:2c:fb:41:2c:44:d1:
0b:b4:71:4c:19:e9:e5:e2:f6:69:be:81:3f:5b:f2:08:e1:e3:
cf:9b:95:81:1e:de:fa:b4:14:fc:d9:b0:c0:d4:59:8a:bb:2c:
9a:b2:b7:01:0d:8c:7f:3d:f5:68:a0:85:48:a2:2c:f8:62:90:
55:2e:6e:ef:7a:0b:69:b4:fd:ee:26:47:df:49:34:89:41:d5:
9e:91:b4:27:ab:a1:f5:50:73:b0:53:10:b0:9c:bd:69:2d:69:
60:29:3b:50:e8:01:dd:92:99:0e:31:7c:8e:bf:72:16:5a:aa:
b2:86:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:52 2025 by rpki-client