Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: YBfaI1kQf+teGaXBCPCMvPkcNw6OWgEeQbLDE/UlaR4=
Subject key identifier: 47:0F:AC:89:70:16:3C:22:F1:E4:2B:69:2E:9B:5E:46:91:F0:BD:3F
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 0194BD4E8D3461181340345599D50BEA8AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: cof4OajiJ/0K5cAiql16yYQ1Y2sONS7OKmdVY+GumzQ=)
2: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
3: uEHKHGYpS2KvUkesU8pcDof-YA8.roa (hash: 0K5xoA85UHkcMnN3W22ATj/hyZFWzrQ7V/CmhuM4D7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:34:61:18:13:40:34:55:99:d5:0b:ea:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=470fac8970163c22f1e42b692e9b5e4691f0bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:c0:38:d8:1d:2b:b7:e0:04:fa:1d:ed:c4:
6e:78:1e:db:4a:f3:ae:a9:14:ae:64:3a:02:a1:85:
79:6d:1e:98:d4:79:00:1b:3a:67:14:4f:5f:43:24:
2c:64:d7:d0:17:d5:36:65:8d:8e:b6:33:06:5d:eb:
f2:29:fa:2e:cb:25:dd:67:62:7d:7a:0c:79:a7:15:
76:6c:61:7c:79:a2:43:a6:17:60:67:7b:81:57:ea:
a6:fe:4d:c2:4c:62:ce:bd:39:e8:ba:aa:b0:d9:ed:
eb:3e:04:4c:e1:2b:c4:1b:d0:33:19:7e:fb:60:20:
72:54:d2:57:e0:1f:e8:cd:63:c1:5c:b4:1a:88:0d:
d1:7a:f5:7a:91:a5:ab:81:8c:d3:f1:d3:a7:17:15:
30:4f:01:8c:61:aa:c2:65:e8:01:4d:b1:e8:af:56:
06:e6:f7:3c:56:51:cf:91:f4:99:47:97:c6:6f:2f:
20:a3:65:31:6f:e6:77:1b:9b:48:ff:50:3b:5d:f4:
4d:ee:b4:e3:0c:51:20:c2:46:a0:7e:a5:25:0d:1d:
70:4b:89:4a:1c:d6:bb:b7:2d:32:64:04:45:c3:c7:
90:dd:5e:01:fd:b9:d1:fb:c9:b1:37:11:f6:19:65:
97:d5:50:1c:8d:5d:77:67:68:ed:b5:53:8a:9c:34:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:AC:89:70:16:3C:22:F1:E4:2B:69:2E:9B:5E:46:91:F0:BD:3F
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:c2:26:15:ca:12:90:e7:72:e7:9e:ab:06:5c:a6:51:fe:
d6:8e:f2:52:a7:38:7d:59:79:40:e2:b7:9e:0a:56:7b:ac:b0:
a0:35:79:87:ad:ae:99:f7:e4:bc:34:57:c5:54:3a:b3:c6:59:
11:02:21:b8:36:bd:8a:37:59:fd:1e:e5:e5:e7:0e:67:6f:be:
be:be:04:f3:02:d5:4d:7c:f5:f2:b7:e9:9f:bc:0c:70:04:8f:
ff:84:58:93:cc:ea:c0:3d:b6:13:ed:16:b6:50:b2:69:78:1b:
4b:b0:fc:0c:15:f0:85:d5:cf:3d:81:19:3e:85:01:22:55:09:
8d:7a:e6:95:fb:b3:c1:4f:72:d3:72:04:55:e7:70:d4:d1:67:
8e:90:6f:bb:90:12:55:c3:6a:31:71:fa:9f:25:e4:e7:c0:8a:
82:fe:c8:70:4e:42:51:bc:96:5f:4b:30:db:41:9c:f5:2a:fe:
80:5c:d9:44:5a:5d:1f:1c:45:33:7f:15:62:c3:55:88:c9:01:
fb:07:1a:bc:7c:45:a9:2f:9f:38:a3:39:4c:67:d9:39:b0:85:
35:8b:98:94:71:d4:c3:50:ab:f3:1f:52:7f:46:48:c3:59:da:
2f:26:55:4c:7e:75:11:d0:a8:d3:c3:09:00:cb:b4:78:45:2b:
36:5b:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:48 2025 by rpki-client