Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: MYbpkkG58WpxzeKxz8Tv74zmHxKo2dBb5YufhcDC/ks=
Subject key identifier: C7:9F:50:3A:02:CE:FB:F9:07:EB:B9:FD:49:95:13:32:47:1F:39:13
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 0194BD4E85339FA763DDD090FC62E21DFB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 070B
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: kh1Hc0e3CXr+FjN6bGlgXA25mDOcMPdlEcHSI6qeq8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:33:9f:a7:63:dd:d0:90:fc:62:e2:1d:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=c79f503a02cefbf907ebb9fd49951332471f3913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:0e:fd:5a:75:63:7d:e4:25:c2:d6:92:2a:
03:5d:df:53:97:ec:fc:f5:f5:1c:14:71:39:61:44:
5a:82:63:c3:05:92:50:07:2c:db:df:1e:13:ec:ff:
2f:54:ea:5a:92:be:fc:f4:d8:e5:42:4d:e9:be:8b:
2d:ac:7e:2a:dc:e6:94:e2:7a:ba:5b:54:67:af:f2:
ee:ab:dc:31:f2:2e:1e:8d:f8:83:f4:b1:11:85:99:
4b:f8:0e:39:42:2b:cf:5e:2b:4d:00:3d:ae:ed:34:
53:a3:65:08:05:da:66:0b:53:fc:ad:0b:b8:2a:c1:
71:93:ac:20:96:f1:94:12:b4:f0:21:8d:e2:fa:a5:
3e:2c:57:dd:60:2c:f2:8d:b8:e0:ab:91:95:14:21:
f1:bd:21:e5:fb:d9:a5:5a:8c:c6:fb:ff:e0:5a:65:
6c:0a:cc:f8:3b:c4:dd:00:93:a6:bb:72:b6:4f:a0:
90:4a:5c:bb:16:13:ae:9d:c1:06:27:5a:89:84:93:
03:a0:7c:9f:89:37:a4:f1:46:75:a4:36:f0:e0:bf:
26:2d:74:47:c2:dd:e5:5b:89:d2:cd:81:68:2d:c8:
57:24:da:e7:0b:a4:c9:c8:47:15:11:2f:9a:62:16:
8a:92:d1:53:5f:b6:db:1d:f0:61:dd:a9:d8:8c:9a:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:50:3A:02:CE:FB:F9:07:EB:B9:FD:49:95:13:32:47:1F:39:13
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:c1:57:2a:32:0b:80:37:c1:8d:9f:36:bc:fe:e8:f8:46:
2c:21:bf:1c:59:fa:b4:27:d1:06:45:6a:e7:1b:3e:aa:4a:56:
51:0e:2c:a1:21:ac:f8:c8:19:dd:f0:20:76:5d:a6:b9:b2:4d:
0c:7d:e4:9a:f6:5e:4b:2c:5b:cc:cb:96:9a:4b:af:8c:a4:c4:
98:9a:7f:ad:48:05:1b:8d:c5:47:df:ed:89:21:4b:f0:a1:8f:
3f:3b:b6:1a:13:0a:a7:07:d7:c2:d5:66:56:67:a2:a9:1b:52:
67:0d:8e:c6:49:79:03:d6:00:1c:51:30:25:61:52:19:68:99:
d5:11:2f:30:87:76:c8:95:7c:69:b5:29:b5:d9:20:97:8d:79:
ad:f3:e4:ff:ba:16:61:ea:38:d2:7c:6e:0e:a0:ca:97:82:7e:
7c:65:7d:57:a5:d2:52:de:22:ff:a8:7d:44:b4:53:e3:be:71:
ae:3d:a8:62:15:b5:44:1f:21:05:e4:c9:9e:d3:28:3a:c4:3b:
8f:59:53:a3:9a:df:69:4a:d1:e6:df:e3:31:5f:ef:6f:3f:a1:
8b:c5:fc:8f:e3:57:98:f7:66:bd:93:8e:fb:75:4b:cd:e9:42:
03:3b:91:ec:c6:b8:65:37:e2:78:dd:d3:61:39:5b:7c:a1:aa:
92:95:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:12 2025 by rpki-client