Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: nFQ0FURxirOqJHsMLvAB6ZC8GKjke67i/KAuAJDyr/E=
Subject key identifier: 81:64:66:48:39:80:71:2C:02:85:E8:40:21:72:72:BF:D2:BF:45:E6
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 0194BCE0898E1426C7BAC4E84958493625F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: ZG5CesYs4mhM7CjIimrcNocvXhtKTBjJ2P/09+OdyHA=)
2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:8e:14:26:c7:ba:c4:e8:49:58:49:36:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=816466483980712c0285e840217272bfd2bf45e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:52:69:59:be:2e:8d:55:88:d7:bb:9d:06:
60:bf:74:54:41:0e:63:2f:14:bd:9b:64:75:e3:3b:
0d:be:1f:07:d2:93:63:07:66:55:f2:dd:dd:de:24:
1e:6c:5d:de:75:5d:71:ee:b4:20:e6:0a:9e:22:85:
6e:14:f1:cb:1f:a6:26:71:c0:64:0d:72:83:98:de:
35:57:ee:a8:ac:c7:b8:bd:0c:7f:f1:8e:8d:aa:2f:
6d:e8:77:f4:d9:06:10:e0:e1:45:b2:0e:93:2f:a1:
81:d9:db:d4:db:34:48:f3:98:dc:48:a7:ac:23:42:
82:e2:e1:af:04:75:8d:e8:5d:d7:c4:99:b8:61:90:
dc:76:72:44:cb:86:6d:77:12:f6:7f:a1:9b:0c:74:
12:a2:f9:47:11:94:51:7d:69:28:b0:d2:fa:49:b0:
1d:3b:04:bf:43:27:73:69:e8:05:9f:0e:37:d2:b8:
5c:b3:ae:10:5a:45:10:89:f9:f8:b6:3d:87:40:0d:
24:68:aa:37:c1:bd:66:1d:3d:c6:37:1a:d5:e2:50:
34:8f:1d:55:8e:bc:e6:57:62:1b:da:bf:32:30:cc:
40:0c:79:2a:2c:11:fe:6b:91:6c:2b:00:e2:4e:79:
b9:3d:38:0f:59:ba:7f:2f:00:ca:d9:5e:b7:d9:03:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:66:48:39:80:71:2C:02:85:E8:40:21:72:72:BF:D2:BF:45:E6
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:d0:a7:a1:c6:54:8b:4f:45:33:3c:5c:78:9a:fc:50:09:
3a:0f:5e:77:eb:87:27:8d:2a:8a:3b:e6:a0:33:49:bd:a5:27:
09:5e:ba:91:33:14:10:4d:04:93:9f:7e:4d:2c:0b:de:10:d6:
a1:fb:98:2a:ae:0a:37:66:38:b5:d4:82:48:bc:62:b1:6d:4f:
9b:ec:81:2f:c6:35:f8:06:4f:2e:e3:0d:8a:1c:09:75:c2:83:
57:91:0f:25:74:d8:28:57:21:09:a9:37:94:21:cf:27:f8:ec:
1d:ac:d6:0b:8e:c7:ff:cc:47:0a:be:af:eb:19:23:5c:e9:f6:
7b:eb:e6:8d:63:b5:7f:1f:fc:17:c7:c3:74:3f:2e:e9:6e:9e:
aa:88:13:b7:2d:cd:49:b2:e7:44:8c:14:7d:0f:c5:ea:29:8a:
e4:e1:bf:7f:de:ff:6b:e5:1d:27:b2:72:95:d5:dd:b9:a1:77:
7e:44:b1:77:3b:ce:e2:45:d3:cc:66:4f:36:e6:42:52:cc:6d:
bc:57:4e:57:fa:69:bb:38:c8:bc:62:b1:6e:55:ca:e7:ec:d9:
30:0d:cb:33:26:5e:d9:2a:52:90:4f:e4:74:fe:9f:f2:39:67:
4d:74:f9:eb:84:13:98:98:77:41:9a:c5:e1:b5:22:4d:61:ac:
ee:8c:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:09 2025 by rpki-client