Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: a6dyfuhGoqB/8dGXw86/nb1YNiCOqmFarVivqv5TMtM=
Subject key identifier: BC:AD:ED:46:2D:1A:89:63:BC:41:D8:FA:91:DF:EA:0A:24:A3:7C:0C
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 0194BCE09A473E18191028AB439FCA226D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: OUB69bKTe8vGwEjo1PcbKhQv/3w72BN40CMFMw/4XGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9a:47:3e:18:19:10:28:ab:43:9f:ca:22:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=bcaded462d1a8963bc41d8fa91dfea0a24a37c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:1c:89:05:06:fc:04:80:2b:b4:af:10:5f:
ad:26:cd:6c:b0:7c:0a:7f:f1:01:b4:bc:e9:f7:f0:
f4:04:5f:86:bc:fe:09:1b:82:3e:fd:d6:62:2a:03:
0b:ce:3b:24:5e:96:c5:f8:19:2a:35:1c:68:80:c6:
57:f4:1f:5e:9f:bb:6b:f4:12:bb:49:c9:e3:21:fa:
24:39:16:0d:db:b7:d7:77:60:2d:82:84:98:86:f4:
41:67:52:17:ac:88:b3:27:33:4d:79:58:2b:32:53:
a6:8c:22:02:bd:e9:25:10:20:61:9b:ae:1f:57:7c:
77:d2:5a:c7:49:59:6d:83:04:27:6f:5f:20:04:e4:
c2:3d:59:8d:c3:2e:10:92:fc:e2:50:26:ba:cd:09:
2a:18:a8:b6:c8:17:d9:f0:ff:83:1f:70:ce:c4:57:
90:d8:8a:66:5f:dd:c0:9c:65:cc:b1:6a:94:b2:a4:
36:94:80:e8:a7:f5:f4:94:5c:dd:71:0b:33:d5:7c:
f5:b6:98:31:77:fe:3b:6c:b7:ee:9a:2f:fc:53:d9:
bd:ac:f9:63:38:45:18:16:40:1a:b5:59:02:81:65:
93:1a:6c:ef:10:ed:24:db:9e:12:2a:ac:d1:3f:b1:
15:95:f2:ad:d5:6c:82:e5:ee:05:9d:dc:f2:4a:9d:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:ED:46:2D:1A:89:63:BC:41:D8:FA:91:DF:EA:0A:24:A3:7C:0C
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0e:61:f2:66:5b:bd:5f:c1:ae:98:f9:cc:16:84:ef:63:5a:
49:c5:7d:c9:3f:6d:b3:5c:9f:5a:82:0c:60:7f:0e:48:fe:a7:
a6:43:f4:13:08:6e:0b:f1:9c:d1:03:bb:ab:63:b0:10:98:61:
7d:6f:bd:dc:c6:d7:10:61:e6:9f:19:33:ad:57:2d:7c:0e:22:
5f:dd:37:02:9e:d9:d2:98:09:65:4c:cb:e0:6e:7f:d4:c8:6a:
10:e1:4d:3a:55:1c:73:c1:51:b2:ef:1e:79:19:66:5a:5d:37:
8f:e2:c0:04:6d:1d:d8:83:a4:45:0c:79:7d:23:11:7e:24:1b:
e2:e5:e8:17:cf:72:fd:40:c7:8d:5b:1e:45:e6:4e:17:5a:31:
3a:20:3a:5f:06:09:d0:e0:e7:af:80:fb:17:5e:fd:63:18:83:
a0:fa:bc:15:03:f4:ae:38:a3:ea:69:db:88:04:18:88:fe:bd:
0c:c5:48:28:ad:16:c1:2b:25:88:93:5d:10:0f:e4:03:90:5a:
39:51:9b:9e:8b:1b:6c:79:fb:65:99:3c:b1:07:6f:f6:b6:7c:
2b:f6:51:a9:8b:51:45:a6:b2:71:7b:2c:d9:3f:27:7b:b5:52:
dd:81:c6:9b:15:f2:82:01:58:0c:ed:73:c5:00:3d:7b:f0:e0:
55:7c:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client