Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: U44qlSAykJCE6PCT3resXp8TpY7050eltTqKuRKVYys=
Subject key identifier: 8E:8B:D2:4E:73:6A:6A:6B:A9:6E:15:29:21:8F:57:9F:C5:07:FC:19
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 0194BCAA16B27F96EF8F1936F813F6B3AC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: ULs1I6GHoEzEpMsMFJ7/LNgCWkZPyWNrpD/7PKDk3Ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:b2:7f:96:ef:8f:19:36:f8:13:f6:b3:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=8e8bd24e736a6a6ba96e1529218f579fc507fc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:6b:22:69:47:7b:69:20:a2:57:bc:52:a2:
df:2f:3a:e1:f9:56:77:ee:4b:de:45:cf:58:3e:de:
ee:d9:79:f4:56:e9:53:db:e3:02:b1:9b:90:ac:be:
67:64:bd:df:01:db:13:d0:da:2a:e1:d1:c7:43:15:
3e:f0:21:d3:25:05:35:43:12:51:5b:ea:13:f2:37:
ec:ed:dc:5a:5a:64:31:04:96:e0:87:db:44:44:6f:
63:9c:db:73:99:f9:12:da:f1:0b:09:bf:3b:5b:6b:
2e:1d:15:b3:31:0a:63:97:68:a3:ce:cb:e1:94:0b:
f6:21:ce:f1:31:3c:55:02:40:56:fb:be:88:13:52:
ec:a7:6b:4a:9c:7b:62:b4:f2:c5:ae:e1:44:23:33:
6c:72:68:dd:28:92:4e:55:ad:6a:3d:33:fd:71:bd:
bc:a2:90:3d:29:88:70:b1:ed:92:2b:37:98:81:3e:
f3:2d:39:28:aa:37:6f:59:38:3b:4f:49:52:b5:09:
30:40:f9:20:2b:9a:40:2e:90:6d:64:3b:db:9f:5c:
11:07:69:24:e9:4f:b5:81:64:cf:9e:62:6d:be:f2:
68:8e:c5:54:0b:48:fb:00:c8:bf:83:11:48:bf:9d:
f0:cf:32:71:5a:1f:e9:bc:73:74:11:ba:1c:e2:ac:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:D2:4E:73:6A:6A:6B:A9:6E:15:29:21:8F:57:9F:C5:07:FC:19
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:15:68:1c:a1:be:31:f2:e4:28:ec:eb:34:86:0e:58:1e:
17:7e:6a:81:45:cd:ee:1a:61:b2:ab:71:a1:28:2b:3d:b7:28:
80:d4:6d:88:1f:5a:e8:13:8f:1a:ec:7a:16:ed:75:bc:ec:74:
fa:92:8b:7e:1b:3d:46:3a:50:2e:4c:04:6f:fc:b8:14:a4:7a:
26:8c:56:5a:be:b2:d5:da:ef:2d:c7:ea:02:09:ee:64:47:bc:
f7:f4:0e:5b:68:5a:6a:76:2f:cc:3a:7b:ea:37:93:5c:75:8d:
50:1f:28:c1:cc:53:36:1c:9b:1a:80:ed:0a:5b:07:84:3c:42:
32:d5:4f:3a:56:01:d4:98:26:82:6f:85:7f:25:8f:c7:b0:db:
e6:72:e7:a7:de:06:ec:ed:57:1b:79:1b:eb:12:d2:0a:8e:88:
80:b6:3f:47:12:a7:b5:81:35:d6:89:5b:f4:9b:34:28:bc:e2:
b9:a0:0d:6a:e9:dc:e9:df:af:40:c5:99:06:d9:07:14:b2:b1:
b7:7f:31:42:d8:a6:bd:bc:ef:e4:25:69:27:c8:85:28:bc:c9:
ac:c9:50:22:df:c9:82:88:a2:fa:67:eb:97:24:eb:71:17:f9:
27:2d:3d:87:0e:05:a0:c8:dd:8b:d0:08:de:6e:d3:12:ef:4d:
c1:83:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client