Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: 0Ii7XFGx0ZaIegGaQsYzOltMFAPJXsyGbYRE1fS7Wmo=
Subject key identifier: 2B:17:71:4A:60:2B:E8:2C:B6:8F:AC:43:5F:72:53:50:72:1E:15:3F
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 0194BC3C55EECBEC47712482229774676E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 0514
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: 3zHko9Vi0SRBrzATrlE7sKR97DQnPKZMre9KtIMuj/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:ee:cb:ec:47:71:24:82:22:97:74:67:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=2b17714a602be82cb68fac435f725350721e153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:ef:e9:35:13:08:b6:25:8b:f0:50:b3:bc:
92:de:8e:1b:98:0f:ae:a1:23:6a:8a:9e:55:ad:9c:
3e:09:22:23:b5:43:bf:5f:f8:54:cb:a0:d1:c9:a1:
45:7e:c9:75:19:46:85:02:3e:4d:1f:54:12:23:c0:
f2:6d:7d:97:d3:88:54:22:46:74:40:49:89:9a:90:
66:4c:5b:6b:7e:5b:b3:e1:02:e3:f3:19:e3:f8:0e:
e1:87:ee:dc:be:44:7a:79:a2:eb:4b:59:ef:f8:b2:
36:6b:d5:09:69:fd:07:11:d3:b9:94:9b:c8:84:22:
af:c8:b5:37:f1:4d:b4:02:41:8f:74:fb:a9:c9:52:
c8:8e:51:69:a9:88:c8:dd:00:27:d3:e9:b6:ad:6f:
8a:2c:fe:5d:9b:0b:16:ab:00:7a:d3:84:4d:2e:ce:
53:86:05:08:3f:46:02:b5:1c:2a:4e:c1:0e:03:16:
39:9f:88:37:9a:fd:4a:ea:ee:47:6e:ee:cf:7d:e8:
71:e5:5e:50:b9:32:73:5b:52:91:df:cf:7d:96:97:
db:38:09:a0:e6:b7:a9:5e:0c:26:62:7a:90:5e:a7:
6c:f1:de:fd:9f:33:35:16:28:8f:a3:af:23:f2:db:
23:54:5a:d8:72:cf:ad:7e:0f:87:31:57:2e:ca:67:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:71:4A:60:2B:E8:2C:B6:8F:AC:43:5F:72:53:50:72:1E:15:3F
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:a0:d1:e5:66:28:30:c3:9b:00:96:12:38:a7:e9:eb:29:
77:b1:86:af:40:85:78:04:1d:10:f2:3c:95:97:eb:c6:18:8b:
02:2e:54:92:df:06:1f:76:e3:0f:cd:86:c2:60:02:ca:47:f2:
b0:f5:37:b2:2f:da:b9:27:b9:29:c7:83:45:74:59:2f:46:b5:
84:49:20:c9:5d:dc:b6:8d:e7:9e:44:b3:a6:46:65:10:7e:38:
2c:34:8a:45:4c:56:dd:50:5c:e2:53:b9:92:0d:19:65:8e:92:
2e:2a:65:41:96:4f:73:3a:52:82:99:d9:22:2b:7d:e5:f1:62:
1c:42:e6:7e:95:56:5f:35:88:ce:32:46:9d:9e:fd:0b:2d:7f:
b0:47:5e:71:42:62:82:28:65:06:75:08:37:2b:44:d8:dd:9f:
e7:45:39:22:42:e5:bd:ce:f3:bb:33:0c:73:e0:7a:30:cc:90:
56:2a:95:31:83:93:ee:dd:ec:a9:70:49:34:42:5f:2d:d1:8c:
01:c4:9b:c0:d5:aa:78:9a:3f:7a:e4:1f:44:5f:ce:2b:b3:15:
0f:43:c4:2f:a2:37:b7:57:cf:3a:ca:c6:0c:5f:19:4a:5a:2a:
7b:4e:cb:00:76:04:dc:df:86:26:6e:be:2b:b2:01:d9:8c:7e:
f6:e0:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:53 2025 by rpki-client