Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: nmbwx32FVcMDRB3ad98NP09AFPH4euwfSctLYfANqgU=
Subject key identifier: FE:78:8F:11:F9:C8:C1:28:FB:38:85:BE:08:09:98:CA:EE:F8:CD:77
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 0194BD17D90C4C2837FB0AB71640B373DA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: sQ+W+Cd/C0qPrLhVep7eqpE/ptZDtWTmCqJANHPtBSM=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:0c:4c:28:37:fb:0a:b7:16:40:b3:73:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=fe788f11f9c8c128fb3885be080998caeef8cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:44:92:8f:21:ac:ec:b3:86:54:be:d8:4b:
5d:74:f4:1e:b6:f9:3e:a5:1d:da:b5:4c:76:5e:de:
50:0e:c4:e3:0e:ee:75:74:49:7d:85:7e:3f:fb:15:
40:f5:7f:41:f5:0c:b4:19:a1:ad:30:15:e1:24:01:
99:eb:7c:c0:cc:76:1a:76:41:44:7a:dc:af:80:83:
84:65:30:05:82:07:18:c6:34:4b:3f:ad:94:bf:86:
83:18:a4:d7:e3:1d:14:d5:6a:7e:d4:8b:80:44:71:
1f:81:da:af:f0:74:25:e8:89:ae:e6:11:af:67:d6:
3a:8f:d2:80:00:6b:2d:32:95:33:a3:72:51:2e:0c:
9c:b1:c4:de:6d:58:1c:e2:7e:bf:98:96:2e:0d:e4:
e7:09:c1:10:60:43:3e:c4:1f:5f:66:de:7d:65:4a:
91:74:f6:26:23:53:56:c0:12:aa:25:72:b6:be:d6:
ff:cd:ca:ba:72:43:fc:50:ac:47:ef:5d:54:82:67:
8a:cd:f2:f9:4f:75:a9:3a:5b:c4:0e:7a:8d:01:1b:
9d:4f:a2:5a:4d:07:e1:78:b8:35:8b:aa:68:75:4c:
46:d3:d7:f1:69:5e:00:29:07:7c:b1:26:f8:6d:3a:
32:90:dd:a8:c3:69:44:f1:76:d2:f0:00:02:0a:a2:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:8F:11:F9:C8:C1:28:FB:38:85:BE:08:09:98:CA:EE:F8:CD:77
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:6a:b7:71:ec:92:c5:f1:ad:54:83:f6:f1:7a:8b:ce:a6:
8f:a2:03:36:e7:20:f3:7c:f4:1c:18:49:8f:2e:59:40:23:34:
63:a5:90:8d:a1:2a:a0:4e:24:23:95:27:cd:02:0e:2f:cb:7a:
95:67:98:e8:cd:47:db:1b:3a:4c:cc:34:27:e0:e7:b8:13:bd:
4a:34:94:8b:e3:70:db:55:92:26:c6:cd:cf:58:8f:54:63:d4:
b1:72:9f:04:17:96:3a:63:a0:aa:25:f1:57:a6:1b:51:d1:05:
92:7f:fd:d7:91:5b:cc:c5:5f:a6:64:e1:c0:43:29:89:93:4e:
81:65:b1:35:c6:fe:e3:91:ad:65:f0:95:b6:76:d3:ec:4b:59:
47:b2:64:3c:98:b4:07:37:f3:12:d6:ba:d4:19:08:20:1a:e7:
44:02:39:35:e6:00:e9:56:fb:f4:9a:a9:c4:e7:3a:9d:f2:63:
b6:b4:9c:1b:89:ca:70:0a:77:c0:6f:90:91:ff:65:61:47:ce:
e4:40:62:58:a4:af:60:e6:31:3c:60:60:55:46:22:fc:fb:39:
0d:5a:5f:7b:1c:1c:a3:4f:72:7a:b4:60:a4:4f:0f:6d:cf:17:
09:4a:c1:d8:f5:7e:2e:e8:5c:8a:ae:7e:61:ae:af:ca:51:e9:
4c:17:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:18 2025 by rpki-client