Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: 37WOYFSi0HUm9ew7BWys4ji6Rn3lzJ7vSplAXxTDKkM=
Subject key identifier: 30:CF:EF:A5:33:2D:AB:C4:EA:EF:8A:0F:32:54:5E:49:1B:D4:C3:F1
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 0194BC04B59F43F55793D8B6B02EE6D3309D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 1279
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: ZNZHeNlj39Zpf8Zrr9pIPWVX57F3KZ/O29CL0x5KF7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:9f:43:f5:57:93:d8:b6:b0:2e:e6:d3:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=30cfefa5332dabc4eaef8a0f32545e491bd4c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:16:b8:82:19:a3:2a:38:7e:0f:d3:16:8a:
df:ba:ed:f9:ac:33:fb:03:ca:56:4e:47:bf:05:45:
35:18:24:c4:42:8b:e9:7a:39:96:ff:5f:a2:4e:a7:
74:8a:a5:49:25:df:0e:a5:c9:23:e0:3b:d7:03:2c:
64:fb:de:21:38:6a:7c:14:2b:88:c5:19:bc:fe:00:
70:8e:8a:6d:44:71:b2:5d:d3:df:c8:da:7d:88:01:
97:c3:25:a8:86:a8:fe:24:2a:19:2c:75:fa:09:30:
5b:34:c2:9e:fa:7c:f6:ed:c5:03:23:79:9c:89:00:
7d:b9:b9:4f:66:a3:be:bb:94:e8:52:3d:2a:5a:30:
a1:7e:cc:29:64:c6:b9:a5:e1:75:f9:24:c9:30:64:
c0:23:e6:61:25:04:84:02:9c:b6:ae:2f:42:38:3a:
07:7e:e3:9e:9d:00:96:48:1b:3a:cb:b0:89:2e:e2:
00:f0:f4:2b:56:38:8a:cd:22:9c:27:b4:24:73:29:
ce:a1:31:4d:f2:7e:c9:6b:d4:c7:e3:78:0c:64:c5:
bc:4f:b1:49:ba:0d:08:a8:81:6e:54:8d:2a:c1:af:
23:fa:61:4a:f6:d9:bc:23:c5:d0:dc:d5:51:42:07:
b6:d4:4f:9f:a0:f1:a6:2d:15:4d:b8:20:6e:96:77:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:EF:A5:33:2D:AB:C4:EA:EF:8A:0F:32:54:5E:49:1B:D4:C3:F1
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:90:3f:18:07:56:eb:f5:30:20:3d:25:3b:03:ec:da:a1:63:
c3:a0:03:9e:84:16:75:1c:d6:8a:15:70:50:c6:b6:b0:3e:bf:
94:f1:0c:76:a2:33:a9:c7:77:0e:11:6a:4e:49:b9:03:99:4f:
e6:12:9b:08:7b:9d:54:26:41:df:ff:98:1b:29:e9:e9:ad:7d:
4e:f8:0c:1c:ff:a0:27:dc:21:63:26:76:fd:99:a6:51:91:e2:
84:d5:14:97:df:53:2d:4b:80:3e:9f:5f:22:82:cf:04:da:39:
e1:18:82:d1:5e:48:ee:eb:10:a4:68:c1:f7:ed:b3:0e:cd:ce:
36:16:bf:20:ff:f7:32:b1:65:41:08:9c:8d:33:ea:9b:9f:33:
0b:15:6b:18:14:60:72:ff:8b:03:a4:94:33:6a:c5:25:13:d4:
36:5a:1f:02:28:11:a1:56:33:12:c1:2e:01:1d:e2:f1:cf:79:
b2:92:37:da:2a:98:28:9b:ba:87:40:0f:e4:07:cd:37:a7:77:
87:5f:d6:c3:93:b4:69:13:51:e4:1c:3d:8b:04:ab:13:ce:e9:
b0:2f:3a:8d:61:a6:a8:64:78:00:6d:0e:a1:7d:7f:80:07:a8:
c4:89:4b:26:6f:7a:d2:50:37:eb:ba:80:d0:fd:51:8e:ad:03:
c3:3b:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:32 2025 by rpki-client