Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: U1+4AKE+Z/HA2r7H20xi1vPxawn17iNMbx0ROQlJYsw=
Subject key identifier: 2C:2B:98:D6:3A:52:5F:8C:7E:96:FD:2A:D7:3C:82:A7:75:BC:E5:58
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 0194BC04DE9881B64A1824652620C27ADEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 0108
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: +lnDCVhi1Dz4i1LxNl+r7aMR7M4lzu1KSxWZW/EFCDU=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:98:81:b6:4a:18:24:65:26:20:c2:7a:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=2c2b98d63a525f8c7e96fd2ad73c82a775bce558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:45:57:6d:ac:f3:80:47:8b:f9:68:fb:65:8c:
07:4a:78:c0:cc:29:f2:4e:0c:f7:bd:27:b4:f3:33:
61:d7:c2:fc:67:29:38:7d:5a:05:3c:21:c2:80:1a:
e9:02:30:52:6b:05:8b:d3:bc:3b:1f:4a:81:5f:3e:
30:e9:d5:4e:33:cb:9d:f8:47:e6:88:77:51:ea:b9:
b8:69:df:3c:c0:ad:3a:3c:88:77:11:1a:92:5f:e6:
3f:aa:71:a5:a8:7e:5b:d0:50:bd:29:9b:ba:c3:6d:
ac:b3:71:42:69:2d:35:a9:0a:f4:e9:f6:83:13:45:
7b:89:41:48:e9:28:50:18:2a:6c:2b:c6:2f:32:54:
3c:12:24:a3:33:21:6c:11:d9:07:3b:5b:63:57:58:
a9:84:26:04:d1:96:fc:01:21:d0:f1:0f:42:51:fb:
56:fb:c7:29:9d:77:28:3b:50:a4:68:bf:92:68:80:
5c:77:ff:58:8f:bf:f9:39:f8:89:59:e8:54:f5:85:
a8:9a:2a:54:d0:27:2d:6f:3c:54:84:a8:e2:3f:7d:
ff:e4:17:65:bc:0d:cf:3f:b3:e3:c2:d5:e2:06:29:
42:70:a6:0d:1f:a2:fb:5b:06:d8:05:72:56:fd:2b:
18:c2:10:31:7c:01:b4:63:1d:70:26:64:48:d4:71:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:98:D6:3A:52:5F:8C:7E:96:FD:2A:D7:3C:82:A7:75:BC:E5:58
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:ca:0f:b2:b4:6b:99:11:ea:6c:9b:42:6d:21:b5:fd:53:
8e:0a:c3:64:f5:e7:48:c5:1b:86:aa:19:3a:a5:4a:d7:db:b3:
2c:80:16:f8:d5:33:c0:5f:f6:ee:9d:0c:13:42:c9:3a:28:dc:
74:b6:b9:32:29:f6:d7:ce:6c:cf:2c:6e:4e:75:b9:5a:f4:ec:
69:b9:c7:d7:94:be:9b:0f:92:3a:44:3d:47:40:1d:d6:be:28:
25:ae:2b:0a:c1:12:c0:2d:ea:3a:58:45:69:55:e0:5a:c8:96:
11:35:86:25:41:9d:63:2e:db:98:bc:1a:fd:2c:b8:62:4e:97:
6b:ee:10:2e:d4:13:f2:a4:94:c8:a0:fd:09:d2:b2:dc:8a:ce:
ee:a3:da:c3:0f:16:a0:f4:0e:98:51:3b:89:69:30:02:72:b9:
5a:15:f2:61:a3:a3:3b:ac:79:61:84:31:94:11:f5:1f:8e:2f:
21:52:8f:f5:55:cc:aa:67:5f:da:6f:1a:c9:b4:64:e3:a2:fd:
30:68:ae:07:17:b7:dc:90:7e:bd:5a:a3:7e:72:74:41:24:2a:
dc:e3:e8:e6:c4:b9:72:03:f4:b5:44:5a:18:11:42:19:3c:79:
87:ef:82:39:b2:a1:dd:c4:c1:d5:c4:67:5e:ef:70:ce:01:66:
f6:13:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:40 2025 by rpki-client