Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: bzLKk+/t2SAz+PIVJJ7OK2czVtnORzxx8OdnITT5fno=
Subject key identifier: BD:86:D5:FE:AE:8C:88:46:2E:BE:A0:C5:85:05:3E:04:32:FD:D5:22
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 0194BC3C17798511A4A086D44AA0E103EBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: jPqg4DzzEydrSR0kD/2+Y2nzrYeZm9DC5X8Fr5zeoOw=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:79:85:11:a4:a0:86:d4:4a:a0:e1:03:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=bd86d5feae8c88462ebea0c585053e0432fdd522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:cb:d9:25:68:16:37:64:bc:c5:eb:49:48:
ff:e1:6c:e1:9d:be:35:2a:80:cd:80:84:de:30:27:
87:4e:95:92:65:98:ab:90:27:8d:e6:e8:ec:11:48:
dc:d3:4d:aa:c2:13:36:24:35:55:80:32:69:4a:ad:
de:36:29:d6:d2:87:5e:5f:89:eb:e0:ba:7c:f0:7c:
dd:49:59:5c:a1:44:21:a0:a2:2b:c3:87:f1:d3:cd:
b6:a9:10:65:a5:15:7a:e0:d3:96:b8:24:f0:c2:1c:
81:8d:b6:83:29:1e:52:41:a5:8c:f4:cd:89:a0:fa:
16:ae:40:c9:80:1a:51:11:06:c1:9e:cc:f4:b9:67:
01:23:9e:7e:35:51:c3:62:05:f7:58:78:da:7f:9e:
40:0a:25:68:3c:0e:03:19:9c:ba:37:d5:88:e9:6a:
97:2d:64:34:39:f4:aa:8d:03:2a:2b:0e:29:47:72:
58:0a:e6:05:6d:e2:b4:98:b9:26:1b:61:68:c3:52:
4c:5e:a4:63:c3:a6:ec:c1:78:e5:3b:b1:5b:26:fd:
48:b4:40:bd:ef:ba:6f:63:6f:bc:74:a0:e4:d5:bb:
7a:e3:a7:2c:23:f0:3e:4e:c0:94:c4:ed:39:73:80:
9c:ae:37:b4:7f:d4:41:e1:b0:1a:e4:32:5d:72:c7:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:D5:FE:AE:8C:88:46:2E:BE:A0:C5:85:05:3E:04:32:FD:D5:22
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:69:fb:be:1b:e0:3c:37:b1:6c:c4:04:e9:da:33:ad:65:
aa:39:95:41:57:af:4e:9d:de:b9:bf:b7:96:b1:d0:ed:eb:8f:
f7:d6:1c:a5:d8:ef:e8:96:01:65:9e:2c:a5:d5:e2:ca:53:5b:
f4:06:26:05:b0:24:62:8d:b0:17:8c:0c:ef:53:b4:31:a1:a5:
95:78:0a:aa:fe:97:34:a8:d4:c2:b0:80:6e:88:0d:3b:9f:e8:
d1:c7:05:00:e8:e4:eb:35:39:d7:2a:02:61:d6:2d:d7:70:ea:
0b:cc:56:aa:f9:63:e4:1d:99:0b:fd:d4:ed:fb:c3:24:4c:0f:
6c:d8:1b:be:aa:0d:59:95:c2:b6:5d:c3:5e:1b:7e:11:41:74:
41:41:45:fc:d1:b2:96:47:2f:cc:db:9b:b0:7e:4d:91:ce:c0:
e6:ba:6f:64:e0:ec:48:94:c0:00:2a:c9:25:0d:95:45:89:2f:
0c:f9:98:92:93:10:90:a4:3c:0c:3d:e5:c8:4b:c9:f3:c1:35:
70:9f:63:21:8b:c1:17:2b:cb:1b:3e:27:21:ca:9a:b6:4f:d7:
e5:10:56:d6:6c:f9:40:74:35:86:36:ca:1c:8d:70:17:84:db:
15:e9:c1:9c:30:f3:a6:a4:dc:37:9b:3a:66:5d:d4:fe:04:1c:
13:3c:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:34 2025 by rpki-client