Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: bfCFmdDpJRhV12H06IduZXGdQXjfK8VvHgigGmuXCKc=
Subject key identifier: A9:3C:57:DA:C2:91:71:96:E9:7D:20:02:76:28:AF:80:27:6D:40:60
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 0194BD4E72E9A3608B69896BA48641883C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 13EB
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: XUlZvaYo1i3Q/Mh27Li4CswmQgENB5WBLhXPbkIxl1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:e9:a3:60:8b:69:89:6b:a4:86:41:88:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=a93c57dac2917196e97d20027628af80276d4060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:81:d1:9e:e8:3f:df:f0:3f:b1:05:d5:a5:
3e:98:97:54:e1:66:f4:e9:d9:a6:0e:e4:a8:c5:de:
e7:79:ed:fb:09:3f:1e:2b:89:8d:34:f8:ab:0c:52:
17:e2:cb:b5:95:a9:20:82:06:3f:2c:97:5b:b4:e7:
54:f1:19:fc:a0:a9:cb:ca:06:f6:03:64:7b:af:be:
36:c3:32:0c:e0:bf:ed:56:d9:d1:e4:db:84:7a:bd:
44:11:2c:92:29:0d:ef:13:52:00:47:55:3f:86:39:
cb:2c:66:ba:eb:65:31:4f:c6:c6:c0:09:0b:3b:12:
6a:40:e8:d0:b5:2d:6a:f0:49:3a:33:2f:4f:fe:56:
ea:e6:39:8e:dd:ae:bd:7d:a1:b3:c5:66:4f:06:81:
8f:7a:66:bc:fd:63:e1:7a:99:0d:b1:6a:99:91:14:
12:db:c1:0d:be:ca:4b:03:b3:79:8b:a1:98:6e:6f:
bb:f8:1a:2b:23:7f:ae:d0:99:e2:42:05:4b:e5:ec:
15:4b:4f:36:43:16:e9:22:25:c2:fd:45:6c:96:40:
d7:d7:d8:e5:3b:b5:89:0e:e2:bb:e6:69:e2:e7:52:
31:63:6a:ad:8b:81:23:f8:85:ae:af:fc:79:da:e9:
96:fc:9a:00:b2:f6:da:14:fb:d1:ac:46:de:0a:ce:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:57:DA:C2:91:71:96:E9:7D:20:02:76:28:AF:80:27:6D:40:60
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:4a:8d:9f:2d:7c:86:77:dc:16:85:83:aa:ec:28:93:2f:
74:94:ed:1d:e1:06:f6:9d:c6:56:2d:ba:39:94:32:a7:96:dd:
8d:cf:db:f6:23:d1:80:7b:4b:7e:88:7d:70:15:28:4f:0c:c8:
f4:d7:a1:40:46:78:61:0f:84:47:14:13:ea:73:a0:d8:a0:0f:
35:9f:82:d1:4a:5c:f2:44:ab:7d:1d:76:a4:5f:85:1f:6b:1b:
58:7c:a4:10:e6:45:2d:90:ca:ab:ef:88:e1:3c:6d:68:1c:06:
4f:62:b1:60:86:7d:dc:88:7f:99:50:bd:41:3a:fb:2c:b6:74:
2d:ab:84:86:63:5b:7f:cb:31:c5:0b:b9:1e:d4:02:b1:df:ca:
41:c7:a0:41:52:be:29:a8:b7:39:cd:34:72:17:37:7f:28:a2:
b3:b6:dd:86:79:50:f5:3a:97:8b:d9:92:0c:6e:bd:bb:87:3e:
46:c2:64:61:6d:66:cd:72:bb:ff:d0:95:43:cc:1e:d4:29:17:
ad:fe:3d:1d:ca:bf:1b:1c:e5:da:70:48:1d:e0:d7:f9:91:0f:
3d:d0:a6:b5:bb:fb:5c:90:28:73:10:86:c4:6c:b0:8a:15:76:
ec:9e:be:12:3d:f8:ac:b4:55:16:b4:1f:1d:52:21:39:08:c3:
e2:44:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:53 2025 by rpki-client