Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: TV9AC3zCoDMIgk6gSn9UnafBnzP/e4Ne4uuI415CK0I=
Subject key identifier: C4:3D:AF:4E:C4:E7:B9:35:41:06:33:5B:D8:67:66:95:78:ED:76:B2
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 0194BC04EBE965AD1745ECDACE72ACD5DD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: d50ksJedtTbWyf6xzFqaQFteHfWGZN5Wvj46cBsdW4A=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:e9:65:ad:17:45:ec:da:ce:72:ac:d5:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=c43daf4ec4e7b9354106335bd867669578ed76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:c8:60:80:f0:95:dc:4d:c7:63:84:77:56:
05:91:ea:45:2c:3a:ce:c3:70:d4:3a:b0:c7:e4:32:
04:9e:11:cf:b5:c5:9d:b0:ba:11:a0:f7:0a:aa:02:
2e:1a:38:3c:4d:89:97:d0:d8:c4:44:0a:6b:1f:2f:
96:23:a3:ef:a3:4b:15:af:6f:5c:ac:65:ef:86:0e:
4b:62:58:21:89:7f:b5:49:cc:5c:32:f0:3d:23:36:
51:23:e7:f3:18:1f:32:a9:dc:81:88:4a:5b:19:32:
e7:c7:f3:5c:5f:8d:ea:4e:95:90:d2:01:df:b0:98:
1d:88:19:a3:bd:db:25:49:21:f7:03:38:48:43:b7:
b9:f2:fb:54:f6:dd:1a:5e:72:c0:24:ac:e5:bd:7a:
76:74:8e:f2:c2:de:c6:bf:c8:df:6c:0d:47:b0:15:
ea:5b:a8:0b:2e:13:58:d9:ee:82:ba:d9:bf:a7:b1:
c2:b1:3d:53:2f:38:34:f9:f9:05:81:e2:47:01:92:
8f:51:4b:67:37:df:a9:f4:b7:5d:60:60:dc:4d:9d:
7a:8c:b9:d8:44:20:98:53:d7:00:2d:a5:1a:05:cc:
1d:22:5e:11:a3:be:81:c6:30:c2:4e:92:c3:5a:63:
a3:26:b8:c9:28:e3:9d:b0:5f:2f:9b:ff:81:96:fc:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:AF:4E:C4:E7:B9:35:41:06:33:5B:D8:67:66:95:78:ED:76:B2
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:82:3e:fc:d3:9d:d8:3b:5f:ea:31:38:ca:4b:0b:35:e0:
34:f3:88:3f:b4:40:f2:4c:d6:b4:6b:f4:67:98:9c:56:66:a8:
3f:41:c4:c2:f2:73:5f:4c:3f:b5:e2:4c:9f:fe:1a:02:cb:01:
53:43:6f:21:a8:82:d6:81:2a:bb:af:55:8a:17:42:7a:9e:c4:
55:0e:b9:c8:f0:fa:43:ce:49:91:76:32:e4:a3:3e:89:56:dc:
a9:31:c4:91:d7:d5:4c:16:c3:4a:50:93:73:ef:c1:9f:8e:51:
7e:dd:36:4e:4a:58:b3:71:2a:dc:50:7f:35:5c:8c:1a:bb:ea:
13:ba:27:86:70:eb:6d:6d:ea:32:11:a5:81:c5:ab:61:fa:12:
e0:b9:fd:b3:57:66:e7:c1:c6:e7:a9:e5:95:30:af:af:c6:b4:
de:e7:e4:d3:ef:29:8e:56:89:f1:41:97:1c:46:73:95:72:29:
16:3e:4a:ac:eb:b8:27:e4:59:08:1a:33:80:f3:5f:16:55:cc:
37:bc:17:a9:3b:d3:1f:82:14:12:fd:da:36:22:0e:7f:0f:0c:
7e:3b:0d:48:21:a0:49:9b:b1:18:8d:b8:58:c3:35:27:33:20:
27:50:22:ab:94:f9:d2:fa:c7:1e:db:ee:ac:21:45:d7:21:4e:
e3:f3:8d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client