Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: kD7NewRm/XOA7fIORGUSPzZpT0kDXfsPk25LSgTrFao=
Subject key identifier: 64:17:A0:BA:BD:53:02:09:4A:FD:90:43:9A:FB:99:E4:37:B5:89:83
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0194BCAA21BFE4BD182D9794CB6D4D77587C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0C47
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: hXTHeRHWmvVq5FuX8+2YHTka40+62HVFWcTFmwS5N+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:bf:e4:bd:18:2d:97:94:cb:6d:4d:77:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=6417a0babd5302094afd90439afb99e437b58983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:96:5a:53:8c:dd:f8:a1:44:77:78:e2:4f:
91:30:22:50:c5:36:93:26:fb:8f:0c:eb:44:74:fe:
1a:8d:79:09:ba:f8:4e:68:1c:e7:b5:e9:bd:3e:5b:
ad:c5:fb:5f:db:9b:ef:66:cb:7c:47:07:55:1c:2d:
ee:82:b3:8d:e7:29:ba:db:4a:d5:75:c1:cf:49:13:
2f:f6:cb:82:60:d7:3e:12:24:84:db:58:5b:9c:c4:
f2:a0:69:0a:00:fa:64:5d:5e:f5:a2:9b:5d:ea:b2:
a7:95:fd:1c:68:2f:66:33:d5:09:ea:1c:8c:81:4e:
7b:26:93:fc:c3:2f:3f:eb:a6:87:d2:a3:1b:bb:25:
ce:40:9a:d1:41:82:02:10:56:ef:20:71:b7:af:ca:
28:ba:8c:ec:e8:4d:b7:44:79:c9:2d:7c:3f:8b:94:
3d:45:b6:dd:97:e4:a0:7e:b6:ed:2e:74:26:e2:25:
e9:12:0a:59:ca:76:f2:79:ea:57:85:35:61:90:3f:
c9:67:ad:05:a1:fd:14:47:79:ba:ad:7b:3d:ec:27:
d1:40:29:f3:76:b6:ca:55:34:c3:e8:5f:b1:46:14:
43:d3:e7:22:d8:e8:57:f8:03:b7:53:5e:14:1d:b3:
6a:df:2c:c8:a0:56:64:74:cd:4c:17:69:08:b4:e7:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:A0:BA:BD:53:02:09:4A:FD:90:43:9A:FB:99:E4:37:B5:89:83
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:33:a2:58:9e:96:aa:0a:74:9b:2a:95:11:8a:43:35:bc:
3f:ed:72:ff:53:e8:8d:07:1c:36:77:dd:97:6f:e4:6d:99:a8:
a7:70:65:27:31:00:ce:4a:61:66:2b:68:12:66:6a:38:b1:d2:
c5:1f:f2:1c:86:0f:59:19:54:4b:4e:e8:66:8f:73:a9:c6:9b:
33:8a:e7:ee:6d:a0:6a:91:3f:3d:0a:b3:d3:08:91:2b:41:f4:
68:ae:3a:c1:6a:62:80:ed:23:10:e9:f2:b8:1e:5b:7e:5e:fa:
c6:15:e8:ba:13:49:04:c7:22:fc:53:7c:53:cf:24:5a:0d:8c:
2f:f5:6d:2c:8c:b3:04:69:6d:94:fc:cb:4d:15:27:3e:f2:56:
59:9f:a1:c4:56:4f:a7:c0:af:29:e9:15:3c:54:45:76:be:cc:
d6:c3:08:5f:05:36:34:54:16:ea:1c:4f:bd:6c:72:92:fa:a5:
5a:92:0a:00:18:c8:07:83:6f:43:e3:64:51:67:d1:34:60:cc:
3f:3b:9a:4a:d7:66:ac:be:44:aa:85:87:50:ca:7f:68:bf:d6:
52:c3:1f:da:11:88:7e:00:df:ec:f1:e8:58:45:cd:84:29:f0:
04:65:9c:26:f6:3e:f6:1d:7f:d4:bd:8c:e0:a7:ba:d2:da:b7:
04:42:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:58 2025 by rpki-client