Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: JaN6Xh1IPcz4uvAbbGBu4cw7k/dSmfLIyZpeuodKxFs=
Subject key identifier: 60:EF:36:20:00:76:AE:DC:72:46:BC:EA:6E:D2:75:1C:B7:B6:50:11
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0194BCA9D2F0B6EBDDCC0E2500256333A134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0652
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: 0971+T6o07LUD2mc9eewnE76tglP5Xu2ra2wR/GuFQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:f0:b6:eb:dd:cc:0e:25:00:25:63:33:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=60ef36200076aedc7246bcea6ed2751cb7b65011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:c1:53:5f:87:d0:3d:67:30:71:17:2b:94:
61:6e:47:c6:9b:11:6b:94:ab:5f:40:2c:0e:07:47:
f1:ae:12:1a:a2:4b:29:3d:83:93:fa:68:1f:d9:e2:
21:fb:70:90:29:c2:b8:c1:8a:52:89:dd:11:3c:9b:
ea:b6:78:42:68:52:43:52:f3:9a:7a:5b:3b:f0:4b:
59:30:7c:2f:6d:88:8e:b4:b8:db:98:80:a8:1e:64:
a6:f4:9b:d4:7c:27:f1:ff:6e:6a:3a:4e:95:c9:f6:
56:5c:14:11:79:42:05:10:55:3e:d9:62:fc:17:94:
42:b8:20:76:71:75:60:ef:75:7d:0c:ba:49:ce:0d:
d2:0f:b3:ca:75:50:61:b9:f8:dc:65:11:3e:b4:da:
f4:e3:fa:4b:2a:b5:d9:7f:27:47:19:49:c6:d5:27:
8f:1e:5d:4f:7f:1e:8e:2e:11:00:32:cd:29:0f:03:
77:39:64:b7:7e:a4:1c:04:78:8f:f8:17:3a:a0:6c:
a5:9f:30:80:9f:07:fd:6e:a1:d4:8c:37:53:c0:30:
72:6c:3b:99:e2:02:00:52:10:05:a2:1e:a3:91:28:
d4:e8:25:b3:ec:8d:d1:2b:af:69:f8:e2:fc:be:89:
8d:d1:84:dc:77:76:b0:6e:83:11:ca:3d:ce:a1:9f:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:36:20:00:76:AE:DC:72:46:BC:EA:6E:D2:75:1C:B7:B6:50:11
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:58:0f:a6:21:99:bd:0a:f9:eb:19:f5:ab:c1:71:59:54:
bb:57:f0:90:c1:3d:89:d0:1a:ce:33:28:65:9b:21:36:ee:9e:
c7:03:6d:50:a1:8a:f9:c9:a8:36:a6:65:20:2e:8f:58:ec:f3:
8d:c5:42:75:06:86:b0:06:3b:5f:81:fb:cc:cd:bd:9e:ea:89:
9e:b6:3c:ff:24:34:c0:a8:28:4e:0e:06:fb:f9:6e:85:d1:0d:
fb:e3:17:ce:61:49:4b:8c:32:0a:7a:5b:a0:fd:27:b4:08:54:
bd:60:08:e1:a8:75:a3:02:3d:23:6e:e8:3b:a8:57:24:31:9f:
41:56:98:bb:28:eb:27:05:cf:bb:7c:bb:03:11:7d:36:c9:15:
82:2f:13:e1:c4:d9:05:05:2b:20:36:2f:1c:d9:34:b5:d5:23:
9a:04:24:c1:2e:b8:d2:3c:19:16:34:fb:89:5b:ae:30:14:90:
7f:9c:00:ff:0c:db:97:2c:6a:7c:2c:b1:5a:b0:f6:f7:c5:0e:
38:e2:90:41:00:9f:e7:92:b1:23:2f:03:e5:5f:ac:95:e6:24:
20:bb:09:ec:f1:8f:8f:54:af:07:ca:91:7d:74:0e:23:74:92:
95:97:71:5f:d6:91:48:61:ae:41:76:38:ce:a5:e7:c5:1d:25:
83:6e:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:58 2025 by rpki-client