Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: spAntto4a0RLoCe5/sBCBTJlhXOr5wsGLMJq69VJ8l0=
Subject key identifier: D9:A6:CF:0B:0C:C2:34:8D:E4:B7:B1:60:C6:7A:06:6A:81:26:0C:A8
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 0194BD85A7677198C2ED1492A59EE4B74261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0AFD
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: cvQvnB1o87bYzBC6kt3hTPSSkwMoq61VZKGooI7JYs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:67:71:98:c2:ed:14:92:a5:9e:e4:b7:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=d9a6cf0b0cc2348de4b7b160c67a066a81260ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c8:45:12:e0:df:cf:57:7a:8d:f1:9c:c5:84:
cb:27:b1:68:48:5c:e5:4d:a2:9b:05:85:e1:8a:07:
51:e3:5d:59:44:3e:6b:d1:69:5d:d6:3e:7c:c9:45:
48:80:08:d6:0d:d6:8b:bf:66:93:7c:58:d3:92:ae:
a2:29:13:13:cb:67:df:18:4a:9e:4b:43:fa:db:1e:
4d:3f:e7:15:84:0c:88:a2:be:1b:6e:e3:59:1d:b2:
8d:1e:84:28:26:32:e2:4f:b2:76:6f:d1:8a:f0:41:
0c:63:68:f0:41:eb:a0:29:b5:5a:3a:2e:ef:bc:55:
1c:5d:6e:9a:b8:14:6f:0a:1a:e6:4f:0c:be:90:55:
72:3d:38:72:3c:0c:9f:fa:f6:ff:8c:6e:2f:ec:8d:
5b:01:6a:c7:a5:b2:94:2a:d4:3d:7e:77:0b:c5:2c:
9d:75:8d:57:84:c3:b0:e2:87:3a:2d:5c:46:9c:84:
b3:e0:e2:62:1e:74:9f:18:df:1e:79:37:f0:49:68:
09:51:e7:af:4c:f4:01:a0:78:f1:46:ef:54:57:37:
35:42:85:0a:2c:b7:e7:6c:88:33:68:5e:bb:1f:bb:
b0:dc:b7:44:49:33:a0:aa:64:65:a1:57:75:48:a5:
b0:b8:f9:0e:64:9b:43:be:3b:55:47:42:f6:f1:97:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:CF:0B:0C:C2:34:8D:E4:B7:B1:60:C6:7A:06:6A:81:26:0C:A8
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:9b:d9:37:3a:83:7a:d1:1e:93:65:1d:a5:71:1f:03:61:
4b:a3:24:f8:53:b5:26:02:f5:01:0e:dc:72:1c:26:db:51:72:
bc:a0:3d:51:56:e8:b3:ea:75:1d:0c:6f:a7:26:f9:49:23:db:
2c:cd:65:22:a2:e4:42:31:6f:65:b1:75:ac:79:bb:35:32:cd:
e1:a3:89:e7:88:de:01:c0:0e:4a:1d:30:24:61:c8:d3:9d:c4:
3b:65:d3:b6:ff:9c:6e:4a:f3:13:61:c4:53:ab:88:8c:21:d9:
21:9e:55:92:ff:d3:93:bb:11:9d:97:dc:40:02:04:2d:fe:b5:
1f:a2:3e:fb:db:6f:dc:79:92:f3:69:2c:e6:65:33:f2:a4:be:
d3:ec:f2:75:26:0c:a6:9f:01:15:c4:82:0d:cd:57:49:17:e7:
0d:7f:67:10:0b:b0:b1:32:6a:a4:52:bb:7e:3a:a0:38:15:f7:
38:7b:dd:27:bd:55:ee:b3:48:cd:f6:a4:c2:8e:dc:c4:ec:9d:
62:04:99:78:17:a2:32:d1:f6:3b:9b:d8:f6:b9:b4:d8:57:e3:
0d:2a:27:31:56:53:f0:03:d4:d9:a2:f9:9c:cb:87:e2:fe:4d:
07:0d:a0:b6:e9:1b:2b:24:4e:16:53:2e:c5:80:b0:48:13:e8:
cb:5b:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:07 2025 by rpki-client