Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: 3/lRKDmLIE6sOsyVKGnJwXNm6YXcGkRlR1I5AMCbyOw=
Subject key identifier: BF:09:60:51:38:63:8F:FB:B4:28:46:B6:DF:02:18:73:F2:75:24:7D
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 0194BCA985110BE05E9AB6D442F662A12429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 02D1
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: IYjvgN6vgyUMErXQj7Xen3kr5YKofWsEFJGVICtN+oc=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:85:11:0b:e0:5e:9a:b6:d4:42:f6:62:a1:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=bf09605138638ffbb42846b6df021873f275247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:ac:45:33:96:a5:33:5b:7e:d0:ba:59:8d:
be:24:ce:8d:4d:3b:7f:65:41:ca:41:6d:09:7e:b4:
68:2c:c9:9a:03:dc:b2:38:0e:0f:21:c0:59:2c:49:
83:c2:40:ba:06:b6:ba:cb:d8:77:a3:fa:d2:d4:2e:
fa:bc:0d:2e:24:17:c2:d8:ae:5e:61:72:7d:9b:77:
e7:61:e5:69:f9:a2:0d:3b:69:3f:1f:ce:bf:d4:79:
a6:38:ef:74:0d:4c:44:bc:18:04:51:91:b1:ba:1f:
e9:5c:ad:4b:56:9d:1b:b0:8b:49:bf:b5:d4:18:ca:
06:59:35:74:ab:bc:a9:77:b4:9a:57:f9:e6:53:cd:
9e:c2:e1:b1:f8:74:05:31:34:51:78:f7:b5:7e:93:
ca:88:ed:f0:27:39:39:a2:c9:18:e7:86:ff:6a:9a:
53:65:ca:a8:9c:16:10:0d:3e:4b:2f:83:fe:95:cf:
9d:55:ed:2b:d1:32:a0:2c:f3:ee:2e:b3:04:0a:60:
a5:88:c1:b4:2f:85:d5:de:34:93:2f:e7:08:d3:4d:
89:70:c5:e0:d3:f1:e8:78:8a:31:01:a5:ea:be:8e:
50:b2:2f:a0:c2:f6:ba:27:36:d9:6c:2f:fb:2d:e3:
92:c6:19:9b:c1:0c:8d:0f:72:b2:b6:22:1e:0e:2a:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:60:51:38:63:8F:FB:B4:28:46:B6:DF:02:18:73:F2:75:24:7D
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ff:a2:c0:fb:46:e6:78:10:0a:4a:01:14:be:a5:2b:a6:b1:
32:f3:6b:57:d2:9b:be:a4:cf:c9:06:d4:e0:93:51:37:2d:80:
7c:ca:8f:3b:60:6a:3a:fb:b5:d6:32:39:02:85:26:0a:4d:1d:
c1:86:51:a1:29:3d:8a:62:b7:73:74:ed:1a:16:83:54:62:c7:
5c:a3:98:a1:b1:ba:63:d2:23:65:0b:18:ef:ab:3c:55:9e:1d:
af:24:c6:3f:c3:2b:4b:cc:f9:61:a5:27:7e:8c:31:af:5d:72:
2e:c2:20:00:34:b0:ba:ca:4b:da:30:4f:93:a3:f3:8d:ae:80:
b1:48:39:f3:71:4e:28:bc:02:c6:76:eb:a4:9f:35:f1:2d:f1:
1a:e5:a4:10:8d:27:27:7a:50:19:65:6d:3c:cf:fe:a2:58:73:
bb:02:b0:52:8b:8e:34:ab:3c:5a:3d:41:10:2a:27:2b:1b:41:
0b:5d:5e:e1:61:94:aa:c8:68:25:07:42:02:d7:a1:db:58:99:
ab:c6:91:98:14:3c:3d:e9:8d:9a:b5:fd:bb:00:0c:85:58:94:
67:6b:01:1e:c7:81:a2:86:bf:05:3a:c5:eb:ff:19:21:19:a3:
6f:60:ba:b3:8c:dd:a7:e4:6e:73:f0:f0:56:7f:a1:45:70:8a:
1d:dc:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:36 2025 by rpki-client