Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: KOXj1KZ3Mm1Y2C7j6ZvPRpQBmflbuW1B8gqHafLxeU0=
Subject key identifier: BD:F4:7C:01:AD:5C:26:79:68:45:46:53:3B:EB:3C:26:C6:25:66:65
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0194BD1764B41B37D36053242012AEB866EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 11FF
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: dv9zxCibCCIWRMStwVvGzjNszhrBWNOIxz3U+VP+bEQ=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:b4:1b:37:d3:60:53:24:20:12:ae:b8:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=bdf47c01ad5c2679684546533beb3c26c6256665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:ff:e4:b0:ec:28:78:bd:47:2c:f3:6e:64:
04:c5:6f:05:dc:a3:88:21:cf:7d:46:12:51:5e:82:
cf:32:49:b5:67:e6:95:c8:00:68:91:34:da:99:f6:
ae:67:19:9b:e1:f1:fd:4c:b5:83:7b:72:d9:b8:2f:
3e:e3:33:b6:d3:2e:59:e1:b3:f5:76:d2:da:1c:39:
7a:27:b2:35:93:69:69:5c:33:18:08:4b:60:f0:71:
9e:95:c2:4f:1e:cf:b5:7f:92:f0:5d:67:60:c8:c5:
ab:1c:cb:c6:50:42:ab:65:30:7d:d2:d8:b5:c5:f5:
78:19:80:22:54:5d:16:23:55:b7:59:72:ff:71:ae:
65:e2:45:8a:94:09:66:92:5f:4b:83:ca:be:61:fa:
30:12:d3:b1:59:10:d3:e9:f5:f1:20:d4:40:ad:9f:
49:20:3e:fa:a6:af:d5:67:45:bc:eb:12:cb:b4:d2:
66:ad:f5:89:96:1c:00:cb:2b:66:ea:69:de:f3:71:
b7:99:73:e5:26:e7:2b:43:c7:ce:67:07:e3:be:3d:
35:1d:06:31:bd:c6:02:e1:0d:a5:af:5b:17:c7:d2:
17:8e:e3:18:c4:d6:fc:eb:35:42:74:68:0d:e1:34:
45:0b:ae:07:6c:d5:3b:3e:10:18:7c:e2:56:dd:e9:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:7C:01:AD:5C:26:79:68:45:46:53:3B:EB:3C:26:C6:25:66:65
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:37:29:5d:db:94:76:c0:aa:85:9f:4b:a7:34:f4:18:61:
0a:8d:f2:0e:8f:51:06:de:55:0e:9f:b5:96:5f:5c:2f:79:c8:
0e:1f:e0:c7:3d:05:64:c0:00:d7:6a:e9:48:a5:54:29:4c:ea:
3b:44:c3:f5:7d:ca:12:fc:15:d1:e5:d5:80:a4:d7:79:55:e4:
aa:7a:b5:eb:81:98:33:aa:d9:2e:0a:7b:cd:ea:c7:f7:00:ff:
17:aa:71:81:7f:a8:86:67:0b:5a:3e:b3:16:83:80:90:9f:2f:
7c:79:17:9a:d8:d2:61:88:16:cd:31:82:74:2c:9a:0a:af:de:
76:14:22:29:c6:c3:51:94:d7:b1:d0:fb:ae:72:84:0e:f9:9f:
7a:d0:f6:d9:c5:f5:4f:7f:49:fd:ad:41:d2:54:56:ce:67:cc:
01:62:9e:b3:f7:f6:03:23:41:3c:a7:44:10:a1:e1:21:79:4a:
a8:86:69:92:84:5d:86:ec:de:57:ac:b6:f1:89:6b:ab:7a:7c:
a8:71:a4:49:a8:3f:8d:61:7b:76:48:ad:ce:6f:49:5e:64:ce:
dc:5b:7e:24:c3:26:c1:50:34:6a:66:69:ba:fc:aa:c9:e1:94:
74:f5:ae:d3:b7:f9:e5:15:fd:31:9d:df:dc:ea:02:ba:29:4f:
ac:cc:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:13 2025 by rpki-client