Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: CNCCXRPgW5Qx8BLq846oRmKgTu3g9/HUsG5Xv98yl7s=
Subject key identifier: 5C:B2:21:0D:D5:21:A5:A1:CF:4A:E6:07:00:4E:1C:37:8F:40:A5:79
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 0194BC049F6CDEE16A41F4FEBDE825EC8D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: M54V80+gfVXWNXJz7yuxx0HcTy2tjQ0gDcwULGprZi8=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:6c:de:e1:6a:41:f4:fe:bd:e8:25:ec:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=5cb2210dd521a5a1cf4ae607004e1c378f40a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:ec:7b:14:6d:59:2a:6a:17:3f:4b:bf:3d:
c9:12:cc:b7:ad:c1:58:3f:63:3d:7b:0a:e6:21:73:
80:c5:8f:b5:e4:b4:ac:fe:eb:77:29:1f:59:0e:e3:
c6:dd:b4:fa:53:e6:4a:24:1f:53:15:8b:31:04:5b:
99:c4:52:99:c2:a7:96:f2:59:63:d9:0d:b6:7c:a8:
00:36:3f:57:c2:46:36:2e:58:1b:b6:87:04:47:b8:
d4:11:37:07:de:b8:a9:d8:ca:d1:bc:24:55:3f:00:
ee:a1:9a:bd:77:46:2d:5f:0c:57:e8:48:be:e6:7d:
94:6c:19:4a:07:3f:04:13:bb:94:be:43:f5:d8:18:
fc:cf:77:8a:54:b6:95:31:71:66:47:3d:cc:1b:5c:
62:5b:bd:36:14:46:ff:cc:0e:cd:e0:2c:2d:aa:9a:
d5:f0:59:8c:96:d4:f1:ed:dc:03:2a:54:10:ab:65:
44:52:d4:a6:35:34:da:65:db:3d:da:44:f7:30:80:
67:c1:f5:dd:8f:35:13:12:1d:8d:2c:ef:6e:ed:29:
ca:3e:8d:cd:b5:e9:c4:3e:0e:e9:6d:b5:95:ce:d1:
06:ff:12:15:22:d1:c4:92:34:d6:0d:f1:da:ca:e6:
4c:2f:45:23:79:18:ab:9d:a9:a7:ed:cb:51:7d:cd:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:21:0D:D5:21:A5:A1:CF:4A:E6:07:00:4E:1C:37:8F:40:A5:79
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:fd:7d:03:4a:50:b6:13:3b:57:8f:ce:d1:47:58:f0:fc:
d2:54:42:11:4f:97:4b:dd:7e:fd:8c:14:02:f7:48:d9:6d:01:
59:f2:86:97:d3:4c:b2:f1:49:e4:3e:56:03:22:60:3b:86:32:
0d:4c:06:7d:b2:d7:09:da:12:3c:75:b4:69:28:58:a6:a3:3b:
cc:1d:10:90:60:35:27:91:69:96:d6:ef:fc:8a:05:02:60:90:
32:21:31:0f:fe:a9:51:49:6c:8b:7d:ac:45:9e:54:bc:d3:ac:
ad:84:a5:11:fc:6d:03:3c:fb:1f:8f:b6:56:8d:74:c3:09:81:
46:6b:ce:93:a1:2e:a2:a0:7f:60:80:80:7c:e0:02:b7:7b:2a:
30:7a:7e:ce:ef:b4:24:e5:cc:f4:80:90:70:5f:2a:17:9d:8f:
31:d6:9a:e0:cc:e0:c6:6e:f5:f9:d6:cb:aa:04:38:03:c6:93:
92:d8:c4:4c:df:cb:11:83:0f:a8:03:6b:72:3f:71:07:c2:9e:
08:14:25:63:9e:c5:b2:28:34:43:86:6f:93:5f:c0:68:01:0b:
be:8d:f4:b6:2e:d4:b9:85:bc:98:9c:90:59:46:b1:2d:42:8e:
16:93:01:e1:1d:11:4a:82:2a:2a:ec:cd:fe:b3:3b:e8:47:b4:
44:2e:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:10 2025 by rpki-client