Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: cdNFDWRD0fsGQkvPyv7+hpicUsTKNi4d/LBGBjxeP4A=
Subject key identifier: FF:01:A1:80:0B:42:0F:E8:E6:C2:ED:CC:CC:4A:BE:6A:33:85:C5:8A
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0194BD17917D9231CD4155E165B911DCF510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: isMKoJ9D5IFA0KEVWfkc218cgjZSlPNTetYstalD1v4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:91:7d:92:31:cd:41:55:e1:65:b9:11:dc:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=ff01a1800b420fe8e6c2edcccc4abe6a3385c58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:a0:23:a2:65:ad:42:20:af:d0:63:5f:81:
72:12:ad:80:aa:ca:cd:eb:7b:78:58:84:88:e0:cc:
fa:fc:23:f6:fe:0f:45:f5:5f:af:06:0b:6b:48:41:
90:d5:c6:57:d3:fa:6c:31:2d:c6:83:63:eb:91:ff:
9c:ac:86:3d:9d:ee:5d:a7:35:d5:b2:a9:33:5c:c1:
16:a9:c4:23:04:9f:f5:98:78:d7:f3:ec:47:fa:ef:
ca:17:0d:9b:80:4d:77:ca:a7:70:4c:da:b2:25:47:
28:c1:2e:ca:13:72:72:25:98:29:bd:b6:b8:e6:33:
2d:66:0b:3e:09:78:b2:9d:d3:30:8e:67:2a:d4:37:
35:75:6d:27:5e:55:1b:c7:3c:42:b9:d6:37:64:83:
df:bc:a4:a0:27:ca:76:09:31:ed:8c:f8:b9:54:37:
aa:cd:44:73:57:49:4d:e6:3a:fb:da:a9:f6:d2:f0:
d8:92:4a:25:e2:21:9a:50:f1:57:b2:8d:98:b3:d2:
f2:4d:b4:b3:06:99:3e:64:d7:0e:06:cf:e2:59:3c:
6f:c6:72:e7:0b:54:96:3e:61:23:85:78:94:0c:84:
e1:22:37:52:62:f2:29:0f:62:ba:42:1f:3a:ca:91:
d9:5e:76:e4:15:4f:4d:fb:63:96:f0:b7:37:4d:65:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:A1:80:0B:42:0F:E8:E6:C2:ED:CC:CC:4A:BE:6A:33:85:C5:8A
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:45:f2:c7:6e:fc:63:b5:6f:ed:bb:6d:52:d1:de:7a:3a:
a1:98:cb:84:39:96:62:77:51:99:b6:1e:eb:15:8b:64:24:6a:
cd:28:f9:7c:62:5b:a5:f2:10:8c:5c:e6:d5:28:7a:eb:b7:df:
c2:2a:fc:47:7a:f8:19:0d:de:1d:7f:5b:83:2e:7f:64:47:aa:
df:9c:6b:ee:49:de:62:31:26:55:47:9c:99:6f:b7:47:0d:e6:
a3:c3:05:cd:3b:21:a6:60:d3:68:34:27:4d:bb:95:7a:ac:02:
ef:df:f8:de:bc:b2:de:88:17:e8:4f:94:e6:9b:f6:c2:06:e9:
25:e6:2b:d6:7c:06:c4:67:cd:5d:34:b0:36:8a:9a:dc:93:fb:
c4:49:ab:ed:43:69:27:ed:c7:41:37:50:16:96:12:70:09:70:
bc:03:72:5c:8a:15:e8:6a:0d:eb:3b:3c:6f:4a:37:95:6e:c8:
68:6d:98:ce:31:61:5a:4f:33:d3:b4:e1:df:fa:db:b2:01:2b:
79:0d:56:e1:73:73:17:26:16:8d:5f:a5:94:cd:3d:6a:3d:d1:
00:45:ca:7b:f8:96:1d:9a:4a:d2:1d:d1:11:42:ab:81:87:2f:
ce:9f:ec:b6:f4:92:2c:49:44:86:9d:5b:5e:80:21:d0:97:2d:
02:a4:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:34:20 2025 by rpki-client