Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: gu+oc32+GeNd6L8Pej33qltvHWc/V/5c92rV6TbWMbw=
Subject key identifier: 75:23:38:E1:88:BC:CA:65:CD:0F:3D:DA:64:44:CB:96:51:69:32:68
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 0194BD17AA54D5DF7D1349A0CB1CD03BDA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: tHNGmljBsajaQSSeObPut2/gdHRZe2/3e+O0/QaXOSE=)
2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:54:d5:df:7d:13:49:a0:cb:1c:d0:3b:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=752338e188bcca65cd0f3dda6444cb9651693268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:93:3e:3d:90:92:14:1d:65:5d:d9:4c:55:
4c:df:e7:71:b0:0b:93:32:ba:5d:a2:88:c2:78:bd:
78:b9:04:c5:27:68:a5:f9:37:bc:08:78:c4:99:ae:
f7:f3:ca:c9:bc:3c:8b:91:ba:0c:5a:e3:38:9a:25:
ea:15:41:11:58:08:38:67:16:c5:1a:04:22:f1:5e:
6e:c3:03:99:98:49:51:f4:cc:47:b1:51:66:7d:6d:
b7:f4:5f:ed:24:af:41:35:d9:f9:d3:5d:bd:4c:d5:
c9:8d:9e:f3:cd:ae:5e:58:81:87:82:33:de:c0:27:
fe:9f:11:ab:fd:ca:45:a6:ed:31:e4:01:fd:87:18:
5a:ff:05:b6:8d:22:3b:50:32:27:3c:b7:88:5e:70:
5c:27:40:05:5b:c8:df:76:70:b2:88:0f:c2:61:cc:
b8:ef:06:1b:82:51:3f:45:fc:55:24:98:77:8c:d9:
dd:35:7e:a7:63:0d:e6:54:7f:31:18:e6:6f:60:43:
f8:ac:95:5a:eb:38:be:6c:ef:4b:26:5d:e5:03:20:
3c:de:8c:4e:b4:fc:e4:e6:ee:ce:69:24:64:f5:55:
8a:16:44:a1:ca:5d:f1:4a:38:85:d1:a7:5f:c8:c3:
78:45:be:54:53:9a:77:d9:64:d9:8b:4d:6f:30:a5:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:38:E1:88:BC:CA:65:CD:0F:3D:DA:64:44:CB:96:51:69:32:68
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:bc:fd:17:1f:91:4e:b0:dd:35:0e:7f:ec:45:a7:f4:d1:
d0:4a:49:08:08:1b:18:74:2e:cc:cd:98:2c:77:43:5e:e3:35:
41:34:38:7b:ec:bb:85:ff:f7:1c:83:de:ba:dd:7b:f6:b9:a4:
4b:90:4b:e3:ce:77:0a:cc:a0:62:eb:cc:5e:21:db:b6:47:e3:
78:8d:16:d0:5f:2f:f6:a1:db:98:a7:36:77:66:93:bb:28:2f:
a6:8d:bf:5b:b7:df:66:d3:f2:0a:77:11:a6:84:84:f9:3a:53:
9b:9a:ca:61:25:25:05:ca:50:6d:2c:90:a2:d6:e9:6c:58:db:
10:2b:d0:62:ab:72:7f:13:ea:96:6a:50:ae:c4:10:cf:bc:10:
45:52:86:43:b7:c9:1e:2d:e8:13:61:70:59:22:17:5b:cb:8d:
ea:6e:a1:e1:32:c2:24:9f:c5:79:71:f6:ab:1a:e5:0c:d3:46:
c7:21:c9:66:da:ec:50:7c:0b:94:f4:55:9a:c4:c1:c3:24:24:
fb:8a:b4:4e:3a:6e:ed:9c:2f:79:92:db:ea:a1:3e:72:cc:52:
c6:b6:27:5e:80:d7:c5:91:f5:5c:0d:ad:18:cd:db:51:ed:99:
40:db:70:75:a0:0d:50:f1:a4:0f:9c:52:1a:bd:57:da:1f:ba:
8b:44:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client