Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: mSXQOH+/3sW/oJdzGrrKM8jowTeZL+shMsjNETMVYSc=
Subject key identifier: 02:5A:CE:2C:5C:1D:2C:4E:66:CD:0F:C4:EC:FC:D0:87:1B:A8:B6:5D
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0194BCA9A70F240296B014A84323CA15E18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: e91oyMuWAtXwMqbd5aTKinvctYC5IiRq9mcGWZlzvlw=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:0f:24:02:96:b0:14:a8:43:23:ca:15:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=025ace2c5c1d2c4e66cd0fc4ecfcd0871ba8b65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:ee:0c:0a:09:4d:06:e1:1e:d2:71:00:ff:
0d:b9:ca:37:79:fb:8d:aa:8a:48:fc:5e:a0:a4:66:
d6:ea:ba:17:ec:05:f7:51:e6:f4:6d:c3:85:65:e3:
0b:9c:c0:ef:b3:a7:5c:51:43:44:66:91:fd:e0:b8:
ee:ea:b5:f4:6c:39:67:36:77:ec:88:f8:46:47:4b:
32:46:b9:37:0a:fa:77:15:3c:81:83:ee:da:72:d8:
58:f0:02:42:d1:2c:ed:28:02:df:70:57:53:4e:1f:
53:ed:fb:3e:2c:9c:61:db:1f:08:b7:be:a6:8e:2a:
ca:df:bf:5a:74:46:91:68:83:bd:3c:44:81:86:1e:
00:58:5a:46:a5:92:ca:f6:67:93:04:dd:87:42:fe:
02:cc:1a:b2:0b:04:ee:82:12:34:87:b8:6e:17:0b:
2a:a1:a9:ec:20:1b:28:dd:b0:43:e7:ca:c9:b5:ab:
7e:7f:f2:57:5f:b5:3c:c9:78:55:62:52:f1:84:c6:
6b:31:ed:13:b3:59:64:c7:f8:1f:33:d4:9b:a6:a6:
f1:a1:1f:1a:4c:54:60:00:27:98:87:d1:48:c0:90:
d1:3e:73:73:fc:fd:1d:34:cb:26:97:44:89:9e:b7:
60:97:6f:e1:f3:49:9e:e6:b4:1a:dd:0a:b1:63:c9:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:CE:2C:5C:1D:2C:4E:66:CD:0F:C4:EC:FC:D0:87:1B:A8:B6:5D
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:26:23:e7:6e:02:81:dc:36:07:5d:04:4c:a6:a9:42:e1:
37:7f:47:1b:b4:22:54:4c:cd:bc:f0:8b:93:2a:ae:06:43:76:
f9:ea:af:5b:f4:50:a8:16:ce:9a:2b:32:59:c3:07:a8:4e:1f:
76:92:6a:b2:e7:2d:dc:80:c2:58:1b:b4:1a:0f:3e:79:0b:19:
31:55:54:b5:06:ac:01:82:fc:40:a1:22:e0:d8:63:1f:ea:2f:
58:20:55:4d:51:70:08:60:92:a6:ba:e2:13:71:c6:d4:32:37:
b2:e4:aa:5c:3c:3d:2c:fe:7a:7a:85:7d:57:b9:82:60:6a:d0:
aa:d5:a8:11:4b:d5:6d:1b:b7:c2:1f:87:29:11:31:0e:f8:b5:
56:88:58:31:07:2e:66:b4:0a:34:16:7d:9c:53:8d:02:9a:23:
60:46:48:c5:f4:58:3b:d4:c9:85:ea:ea:0b:b8:39:09:0a:2b:
78:a9:13:fd:c0:2e:9f:f4:2d:f5:e3:63:7d:58:a7:09:a9:dc:
d6:50:72:3f:76:65:9b:7d:db:e8:4e:0a:81:43:9d:e2:00:35:
d3:80:91:73:19:61:2f:6d:aa:ef:41:e3:ba:30:1d:a7:b7:7d:
9b:79:d6:97:ff:b9:bd:23:1a:2b:d1:32:20:0e:95:e8:f9:cb:
2c:52:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:18 2025 by rpki-client