Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: ZLRYGAPShU5sUtmaKAUcSr0O+RB/2ThFi9rzFAry+dQ=
Subject key identifier: A2:A8:1D:4F:CE:CB:55:62:34:4A:5A:B7:5F:E0:6E:A2:C9:A8:75:4A
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 0194BBCE3D91D4B791B8BE835B3D519FC75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: GIaDKjef3+SeQIgN/EurqIDLEs36pwBrG7eD8h6v9Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:91:d4:b7:91:b8:be:83:5b:3d:51:9f:c7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=a2a81d4fcecb5562344a5ab75fe06ea2c9a8754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:10:77:3b:b3:56:d1:66:33:29:f8:ce:ff:
fb:c8:6d:e5:02:d0:13:3d:69:ae:6b:8b:fc:b3:60:
59:2d:01:55:43:52:67:ca:9e:44:67:47:6c:fe:67:
de:7a:c1:90:7c:7b:e4:7b:02:f5:61:0f:4c:6f:1c:
0e:e1:e8:c4:0d:5f:b7:95:ec:80:33:8b:03:db:ce:
da:16:09:05:88:ff:25:f5:0e:14:d9:14:92:3d:7b:
79:1c:09:93:1d:d1:06:17:45:22:40:bb:5d:f8:19:
35:54:22:ad:f6:fd:42:c8:1e:41:46:18:39:f9:08:
1f:ce:1d:7a:b7:cb:25:ac:e1:78:3f:dc:36:e2:27:
2a:e4:b4:73:19:46:1a:f8:d3:fd:2c:84:c2:07:41:
99:d1:95:40:87:87:d7:40:7e:42:54:00:1e:0e:5c:
0c:8d:c3:b5:73:f0:cf:2d:9b:05:cf:ab:52:ec:8c:
7a:f3:b9:54:4b:f0:2a:28:fa:d7:1c:54:de:02:46:
39:b2:ef:67:b9:26:c2:df:db:a7:ba:a4:48:bb:8c:
fc:32:bb:03:2d:5e:d9:4a:e7:99:07:f3:3f:3d:1d:
e4:08:c9:3a:61:ad:30:6c:0c:f8:d6:63:b2:97:ed:
2b:d6:f3:5b:75:52:ab:85:f0:6c:ee:1c:c1:95:95:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:1D:4F:CE:CB:55:62:34:4A:5A:B7:5F:E0:6E:A2:C9:A8:75:4A
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:d2:93:f3:45:43:c0:d9:58:3e:0d:5d:21:0c:49:ca:be:
80:36:82:72:c9:83:86:bb:b7:be:b3:14:e6:b6:99:8c:10:c6:
79:73:56:40:e1:31:fc:45:81:6f:88:2e:6d:08:09:3d:a1:e2:
d0:7e:89:a3:17:04:be:72:a4:e7:6e:ff:31:96:13:50:4f:12:
40:64:c8:28:46:30:5d:8f:10:9f:fc:4b:51:26:01:11:11:3d:
67:fd:99:65:ab:68:dd:73:a6:22:d6:12:16:d8:4e:ef:0b:ed:
aa:8b:a6:d3:da:8c:f0:9f:22:51:4a:a7:f5:58:5d:89:3e:52:
7f:30:ee:9b:ae:34:62:34:b5:a9:7a:e1:ae:4c:90:96:0a:88:
a1:6d:28:33:4c:d0:65:ef:9c:a9:d6:8f:37:60:4e:11:68:ac:
98:92:cd:80:92:34:f2:25:6d:0f:01:0c:33:be:8c:f8:27:de:
c7:56:03:40:a7:ce:da:65:1c:d5:b5:14:7c:5a:9a:7a:b5:bd:
a3:2f:30:aa:0b:77:b2:33:1b:e1:82:3a:61:8f:7b:3c:09:7a:
fc:f8:5a:5c:82:7b:bb:27:15:1b:91:9b:e3:a9:a5:c5:b3:a6:
fd:a6:84:25:af:58:a9:8e:4c:16:40:79:be:52:28:1d:41:92:
57:0f:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:40 2025 by rpki-client