Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
File: ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft (raw, json)
Hash identifier: i9tnTy8YkOn+KnqFha77ooTFJ+CMekBDFlPS8zPi5Oo=
Subject key identifier: 6E:69:B7:0E:09:E9:FD:84:D0:39:15:2E:B6:A3:FA:E9:78:89:10:9F
Authority key identifier: 8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
Certificate issuer: /CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Certificate serial: 0194BC3CA0C5CF410281C8E3D1294FB21BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
Manifest number: 070F
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: M6xpky55AMxbDlUx-K95hhxr5Kk.roa (hash: majQcAJx/81XUJNai+d/h49hOIvLtwk1e194SET+qVY=)
2: ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl (hash: DYyWUj7q0xWYCmXLbYopEMTI84LCYYkDLzkwZxwMwmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a0:c5:cf:41:02:81:c8:e3:d1:29:4f:b2:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=6e69b70e09e9fd84d039152eb6a3fae97889109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:93:9e:82:e1:f3:02:81:de:59:8b:aa:23:
b6:55:b3:1f:4a:31:21:46:da:72:dd:4a:b9:6c:56:
8a:b3:6c:d0:24:a7:15:66:35:83:16:fb:da:0a:f1:
70:aa:d4:32:bf:84:2d:ff:ec:66:44:ab:03:bd:aa:
36:47:96:59:61:22:82:4f:e3:d6:71:25:40:f2:2a:
96:37:d7:9f:5c:fd:57:d3:a7:d7:52:6e:a9:c1:99:
e6:07:72:79:e6:ce:d1:fe:ea:6e:5d:44:c7:ce:49:
8f:87:ee:17:75:6b:92:62:4a:fb:f8:e7:95:e7:1a:
b3:c9:33:9d:f3:95:3e:84:a5:8b:f6:31:1c:51:25:
50:4b:30:f4:15:a3:37:0b:bd:01:d7:fe:a5:69:30:
70:ad:c7:be:dc:78:9e:5a:54:93:50:c8:2b:f0:c7:
31:68:0d:f2:8b:05:ac:e8:63:ca:26:94:be:fa:17:
c4:85:a0:fa:0e:81:f0:41:1a:8c:37:a7:db:a6:79:
0d:c0:ec:fe:5d:7d:d7:32:63:3c:65:02:5c:d2:5f:
b0:9f:05:92:a5:36:77:3c:77:09:87:49:01:d3:a7:
33:93:fb:d4:c4:fd:3d:8a:f6:70:8a:2a:2e:31:a4:
39:28:74:c3:01:e8:66:6a:cf:59:8c:7d:99:eb:4a:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:B7:0E:09:E9:FD:84:D0:39:15:2E:B6:A3:FA:E9:78:89:10:9F
X509v3 Authority Key Identifier:
keyid:8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:39:f5:8f:1e:9a:5e:66:04:5c:1d:8c:a7:c7:bc:ac:d9:
8f:ac:f8:78:4f:b0:ed:65:f8:44:6a:9d:4f:ca:0a:a8:9f:55:
db:cc:29:22:a5:3d:50:88:a8:4a:5b:ff:6f:29:88:cc:a5:d8:
d2:a6:16:c4:0a:65:fc:16:94:ac:df:de:81:0c:53:1a:06:b1:
dd:b2:3b:97:7b:07:df:2e:fa:dc:6b:99:55:01:ba:14:47:58:
4a:77:97:a6:2d:85:03:b9:67:15:53:7b:43:4c:3a:70:42:b6:
d3:c5:3a:6a:7c:dd:77:d9:6f:ae:09:e8:a3:5d:9d:cb:16:bd:
dc:e0:28:d1:dd:89:7c:90:99:fa:c6:98:e5:d4:25:06:4d:6f:
df:ad:fa:69:b7:de:67:0a:ff:a6:fe:91:df:cf:88:34:26:34:
8e:53:5f:9d:33:90:77:9d:d1:ae:4c:f2:73:3f:2c:0c:cd:06:
88:da:00:f0:97:77:c3:d5:32:0f:15:fe:5f:f6:68:c5:5f:8d:
d5:3c:a3:a3:47:39:5b:9e:11:75:74:25:2d:4c:51:4d:16:6b:
9d:a7:17:dd:7e:ed:d3:c6:17:ad:66:0b:37:a8:cd:b1:13:f0:
ed:a3:96:09:24:de:8d:e3:fe:56:fd:62:3a:6c:e2:27:76:7c:
2a:f8:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:39 2025 by rpki-client