Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: 5E2yzCbikwF688362tUM+UpqoBuF/HpfLyMg5WYvW1I=
Subject key identifier: 26:89:FC:A0:32:8E:57:59:21:26:81:18:D4:FE:44:E2:15:B5:91:F9
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 0194BD4E712B4143263C55E1E60857AA34CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: Fnfcx6E+0hgp9EbDPXP8FCpGYT7xvjCPtghvw9fwsLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:2b:41:43:26:3c:55:e1:e6:08:57:aa:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=2689fca0328e575921268118d4fe44e215b591f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:3f:a6:7b:ec:36:84:bf:ee:23:bc:85:b6:
c2:d5:c4:b9:c3:72:07:f3:10:12:7e:5b:cf:95:0d:
01:59:d0:ad:ae:be:80:39:86:66:c2:82:ce:bb:44:
14:63:38:dd:90:0c:31:ae:91:46:a6:18:ea:69:c3:
6a:c9:78:f2:62:b1:03:80:e9:2b:2a:db:29:44:72:
76:1b:8c:d5:85:c3:ee:67:41:17:cc:b1:73:f1:ad:
da:b3:40:cd:54:8c:69:54:af:09:b8:4e:2f:b1:2f:
56:a4:3b:c5:59:2b:e9:be:7b:60:9d:9c:23:f6:f2:
98:27:c9:51:a5:e2:77:8e:5c:81:1f:10:c4:bb:df:
62:f8:dc:97:7d:4c:9a:e1:71:5f:68:4c:7e:e8:2b:
85:49:ab:64:7f:3a:35:d1:68:fc:4d:fe:5f:be:8e:
82:0e:8e:c2:b2:87:00:82:4b:42:c0:4a:42:91:f0:
c0:4f:12:ad:2a:e3:44:fe:66:09:39:8b:31:95:15:
1d:5a:50:8a:9f:dc:7f:1b:c1:ce:55:0c:ca:ac:f9:
f2:d7:60:f7:17:56:a1:61:52:a9:46:2f:ab:8c:7a:
5a:ef:72:7c:bd:cf:64:73:18:62:b0:6c:22:d3:df:
cc:50:fa:2a:f1:f4:cd:7a:d1:aa:d5:6a:d8:15:0f:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:FC:A0:32:8E:57:59:21:26:81:18:D4:FE:44:E2:15:B5:91:F9
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:e6:02:e8:2a:54:24:b7:64:eb:5a:2e:85:53:ce:20:02:
a7:51:24:89:fd:27:c9:75:ab:b8:f2:8e:ef:94:6f:05:53:d2:
f5:ae:15:86:1d:e5:e7:43:08:c4:86:2c:b3:04:cb:ae:2d:10:
d2:72:27:c9:47:fd:46:2c:7b:9e:8d:f4:e0:b2:c7:95:fd:57:
73:6e:2b:f9:3f:c5:3e:2b:e9:fc:18:7d:07:ee:ab:38:73:8c:
6d:70:b2:c7:b9:48:36:8e:2a:76:5f:46:2d:78:b6:17:b6:35:
99:f3:83:3b:19:cc:53:2e:5a:c9:9d:98:9e:f7:14:b5:bc:6e:
ed:e3:36:2a:07:98:a6:f8:f0:58:b2:34:38:fc:a7:9b:67:10:
9e:03:14:c6:7c:a0:c2:48:e2:98:fa:91:c2:a4:62:e8:d5:45:
57:ef:84:cc:b9:72:a4:5f:0d:4b:49:aa:0a:95:fa:d2:ba:8c:
33:fa:c0:c3:74:be:bf:e3:78:37:d5:9b:e8:ea:2e:e8:93:27:
db:95:61:d9:5d:e8:71:2c:4e:0e:5b:50:65:33:c9:a1:5e:9f:
b1:1f:55:e7:dd:c3:7a:2d:49:ca:12:19:72:5d:96:fc:2e:81:
b3:0b:6d:4b:72:5a:45:51:d9:b0:1d:40:1f:62:a3:57:7f:ea:
e5:c8:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:28 2025 by rpki-client