Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: p+j4/JcbeOXDk8AJLeUkZKCmnli7jowVrf08wC5xmW8=
Subject key identifier: DF:49:4B:17:F2:DD:AC:6A:F1:70:62:6B:5E:44:5C:99:47:FB:9E:EC
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 0194BC72CCF76AA8D5E68AE54B278708472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 1083
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: DsJ8slNtCFyi94IphAyewgKfg2Xrc4VwLubUtyWPUo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:f7:6a:a8:d5:e6:8a:e5:4b:27:87:08:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=df494b17f2ddac6af170626b5e445c9947fb9eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:54:3a:e8:9e:60:b9:1d:a9:a5:50:18:01:
24:79:ab:df:3f:e7:72:46:53:97:9e:80:13:d0:c0:
58:8b:28:8f:39:76:69:bd:17:5c:81:ce:33:72:f6:
3a:37:80:83:23:70:cf:c5:9f:1d:46:3e:9e:3c:25:
e3:6e:41:30:cf:1f:92:b0:69:0c:67:52:ad:4e:d7:
57:87:dd:0b:04:53:8d:ef:f1:67:eb:3d:20:5d:c9:
df:d7:7e:8e:76:3f:44:ef:df:2e:4b:95:e2:65:73:
7b:89:72:95:f4:07:a0:5b:cb:65:b6:3c:b4:07:40:
87:32:fc:c8:47:55:9b:c7:4f:8c:5e:38:19:a8:75:
ac:ea:7c:02:19:fb:fa:dd:07:f0:19:07:df:b5:8e:
4b:98:cf:b5:0f:4c:f6:44:8a:61:79:11:50:19:60:
2c:37:90:7e:5a:db:8c:e5:6a:ac:66:6b:7d:df:af:
8c:4f:fc:6b:a8:37:8b:35:c1:14:df:8c:bd:c1:67:
87:d4:f0:18:45:47:56:0d:15:e1:48:9a:cd:fa:52:
c7:bd:95:09:ff:7b:43:d1:d9:8f:4e:3d:aa:81:08:
ee:ab:60:31:fe:2e:8d:57:82:2d:74:ac:6c:f0:a5:
47:96:c6:4f:23:ee:11:df:63:8b:18:c9:60:59:3b:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:4B:17:F2:DD:AC:6A:F1:70:62:6B:5E:44:5C:99:47:FB:9E:EC
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dd:a4:3e:e0:b3:cc:7c:dc:a1:31:49:c3:75:7f:47:f5:f9:
99:35:45:63:42:01:04:b0:f6:a3:39:7c:c4:aa:ed:d9:50:67:
bb:d2:86:66:e4:f4:10:37:68:7a:13:73:b5:ac:b1:ff:4f:b2:
17:ea:b9:fb:f1:39:3c:89:fa:54:5c:dc:03:76:45:f0:19:f6:
9f:e2:56:5e:b2:fd:d0:31:28:c1:a5:ee:21:a9:35:3d:66:99:
03:6f:0e:43:0b:f8:45:aa:9c:47:38:48:d9:7a:ca:09:f4:ec:
e9:dd:3a:e0:aa:2d:72:8f:65:8f:51:ba:92:09:b6:bc:19:a7:
e9:8b:5d:5f:3c:c2:cb:28:09:4d:95:cc:02:a2:93:a9:68:8e:
ae:3a:b1:5a:1f:bd:f9:5b:41:c1:57:3e:78:d3:1a:18:ce:1e:
22:bb:a2:61:70:72:8b:07:22:48:c4:5d:9f:b3:bc:a4:56:6a:
9d:18:a0:d6:0b:c5:82:ef:07:d2:d2:c1:cc:5a:f5:b0:93:4f:
ef:52:2d:6e:f0:78:d3:13:7f:1b:68:e9:ef:f7:69:2e:ef:c3:
33:0a:a0:64:0b:f4:5d:a2:81:80:58:f3:30:40:0e:9d:4b:0e:
5d:ab:ae:66:30:48:d0:d1:d9:17:74:b0:92:ce:e9:0f:d0:cc:
0c:93:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:26 2025 by rpki-client