Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: +0hgjkfkpHO5MVtmghSS4x6IoSyT9CJQIdWbckCAMGU=
Subject key identifier: B6:9C:3F:26:1C:C6:65:51:9E:0F:47:8A:70:F3:EF:D3:89:39:53:E4
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0194BC3C0738A3AEEF773A3F3427237A828E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0B89
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: M/apRz31gmbJ74eXLTJVmIPnYrWBLT6xYZODztgZz0A=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:38:a3:ae:ef:77:3a:3f:34:27:23:7a:82:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=b69c3f261cc665519e0f478a70f3efd3893953e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:99:0f:01:ec:76:44:4f:ad:b1:db:9b:de:
54:c1:68:a2:a7:a9:15:22:5d:4f:27:45:ab:d6:67:
50:0e:e7:74:87:80:5b:6e:92:e2:97:21:a1:bb:99:
e7:4c:d4:16:d2:ab:c3:e2:38:1d:bf:d6:41:40:4f:
c9:5a:a1:67:b3:10:28:03:5b:9d:5e:7f:5a:15:ee:
a2:9f:b1:f2:4d:b3:37:cb:66:45:df:98:5d:42:50:
78:59:79:56:2f:52:8e:f1:02:29:03:67:c4:26:66:
4e:67:20:80:20:59:6c:46:80:a7:7f:ef:71:2e:c3:
6e:d8:e9:99:6d:a8:42:e5:a7:4d:00:dc:ce:e0:97:
a7:0d:b2:fa:8d:ea:63:13:4a:5a:06:66:ae:e9:ae:
ea:30:6c:00:8d:7c:2e:25:a6:d1:b2:6a:6d:8d:da:
09:ae:aa:67:4d:86:e9:73:35:45:de:2b:57:88:1e:
ef:f9:52:7c:92:2c:50:ad:74:37:15:3f:68:1c:cb:
0e:fa:79:bf:c7:97:3f:39:89:3a:ff:eb:4e:bf:c2:
d0:a7:07:3d:0a:d7:7b:95:66:22:82:03:dc:0b:a5:
81:2a:82:41:b7:ea:23:45:e6:cb:e5:f0:16:f8:93:
bf:ab:26:c0:43:67:7f:4e:9c:ea:18:bc:da:58:a8:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:3F:26:1C:C6:65:51:9E:0F:47:8A:70:F3:EF:D3:89:39:53:E4
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:d0:b3:66:18:ba:67:96:b6:0c:c5:2d:9d:2c:e3:76:87:
d3:16:28:2c:d3:39:41:e4:ae:ed:54:98:45:22:51:67:fd:ed:
0c:02:a0:57:e3:a2:17:04:26:06:e5:4d:ba:1b:ca:f8:73:64:
8c:e5:18:0a:4e:1e:68:19:f5:24:2a:91:4c:51:12:cd:ea:4b:
71:a6:72:ed:3f:ae:d9:e3:78:75:94:66:cc:6d:64:62:86:f8:
70:d8:5a:47:c5:c3:ad:85:d5:c0:51:df:60:49:6f:87:c6:56:
4a:f7:35:85:8f:74:3f:d2:3a:56:f9:54:41:60:e7:c3:54:53:
e6:4b:73:cd:33:03:92:1c:c1:81:c6:56:85:78:05:e1:bb:78:
57:8a:7d:12:9c:1d:90:66:96:f7:ad:b7:cd:70:bb:0c:6b:3a:
26:b4:2e:7b:73:9c:fc:ba:e9:fc:f7:bf:6d:ab:1e:3d:c6:a4:
b2:eb:e6:7f:8a:eb:d5:34:f0:4f:6a:15:a0:d5:f8:fe:af:5a:
d6:96:3b:b3:e7:91:cc:15:2d:68:41:1c:d2:d8:c6:45:2c:c2:
a6:2e:54:69:ad:56:bc:d4:0b:a3:ef:c7:c3:af:3f:f6:83:cd:
89:50:de:9b:07:83:e0:72:06:b9:0b:f1:a2:14:be:d6:15:e9:
b1:f1:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:47 2025 by rpki-client