Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: N2OzGKq6RbOcSe4P9T+W1IVUSSwMSHMBAhkYMdQiSBk=
Subject key identifier: 89:6B:5F:8C:05:BA:34:72:D4:57:37:E5:67:DE:50:86:F9:87:A7:84
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 0194BBCE808E8F8921526B11EBC50980E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 097A
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: zdFhuIujCXtupYCM226BCLM6+Sz9ZNq0sTyERRcCy/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:8e:8f:89:21:52:6b:11:eb:c5:09:80:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=896b5f8c05ba3472d45737e567de5086f987a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:bc:9e:f4:37:4b:93:56:f2:ff:96:19:22:
5c:f6:b4:ea:9a:1a:4c:18:c9:bb:dd:c9:4f:6d:9d:
84:39:e8:39:4e:66:c4:67:55:4a:88:25:b0:a7:97:
a7:4d:c2:d0:db:da:a1:b4:52:1c:98:bc:13:4b:fa:
94:49:f9:c3:f9:ca:54:cd:3c:34:64:3f:c3:3b:a1:
6f:97:7c:07:7f:bf:38:14:da:63:53:ca:5d:af:14:
b7:27:c4:09:62:e6:e6:54:c7:04:f1:7d:79:a9:a0:
ce:1b:7f:fb:78:e4:a6:62:52:05:1e:c3:76:b3:b4:
e8:65:c0:db:e1:d9:ca:39:23:ce:83:dc:0c:94:b5:
f4:81:1b:e2:fe:d5:b5:29:2c:de:65:9d:9a:1a:e4:
d8:f9:e2:1b:35:2c:2a:78:34:97:e5:f3:db:2b:9b:
c4:7a:54:28:8f:af:ce:2b:6c:ef:14:c9:b4:98:f8:
f4:b4:a2:f2:61:9e:55:36:e8:ef:e9:cc:96:b9:7f:
7e:33:34:21:ae:7c:87:84:f8:cc:0a:df:ec:37:f3:
d5:ad:b1:96:2b:0f:c8:a9:03:de:03:ee:26:47:1d:
15:30:0a:75:0b:38:94:54:87:ac:ca:b9:fd:6c:ad:
4a:80:dc:ec:35:a4:8a:8a:6f:8d:67:8d:5c:05:67:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:5F:8C:05:BA:34:72:D4:57:37:E5:67:DE:50:86:F9:87:A7:84
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:40:8e:50:23:5b:ab:c9:99:59:38:b5:f0:5d:53:7d:e5:1e:
18:fc:12:00:89:e5:73:d2:99:bf:0c:99:d0:bb:eb:ad:27:86:
af:0a:de:6e:d5:de:0d:5e:5b:63:51:31:ee:b0:8c:0d:75:c5:
1d:fc:2b:22:f6:6f:3b:7d:2b:59:b3:ac:6e:85:b7:d6:24:78:
17:7e:61:74:39:13:86:bd:ac:b9:85:f9:a3:11:b0:40:34:e8:
f7:e9:01:56:5e:db:8c:f5:09:1e:2c:d2:73:ca:e1:6a:f5:22:
ec:3c:61:2c:41:16:7e:31:78:65:85:6c:c0:bb:48:9a:60:96:
81:54:c6:b3:9c:3e:ef:9a:0e:67:7c:f0:4a:d8:34:09:6a:f4:
ad:51:f5:85:51:96:07:22:8b:f4:bf:d7:42:1e:af:2f:35:22:
db:19:15:ea:75:18:f3:60:fa:25:30:56:ae:3a:c6:58:be:ce:
98:3d:f7:9f:75:3a:f1:80:38:6e:8c:af:72:8f:3b:f3:38:5f:
42:8c:96:a2:0e:36:5b:c8:33:d5:36:d1:ff:d9:4a:09:ce:38:
41:6b:1a:3b:af:97:38:36:07:e1:57:bd:78:c9:59:8a:30:70:
df:9d:24:c5:f5:bd:3b:5e:17:4d:2f:94:a1:e6:44:be:9e:39:
39:9a:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:07 2025 by rpki-client