Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: obW2vJQwxwVDrf4dmhChTCnXYLqDFc6X3m/zTv7eQTw=
Subject key identifier: 21:A1:22:7A:2F:4B:E8:59:00:83:3F:0C:8D:0D:1F:D7:0D:45:EB:D8
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0194BD177FE62961378E1C0634D378E3C663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 0FE2
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 4erEoDX06hBUIFHFNOAs2PQMc86bHaEKzWSZSKmyw24=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7f:e6:29:61:37:8e:1c:06:34:d3:78:e3:c6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=21a1227a2f4be85900833f0c8d0d1fd70d45ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:92:c8:9d:b4:a2:1d:fb:61:29:15:3c:61:
4a:4b:28:51:57:32:0a:33:5e:73:e9:ca:2e:69:1a:
44:06:0d:37:14:a5:80:df:7d:90:7b:2f:cc:3b:f5:
43:1c:87:22:5d:61:d2:4b:c3:ad:7a:8a:0f:4d:37:
3e:10:1b:4c:e8:67:2f:4e:a4:48:f6:bf:6a:4f:a9:
43:bb:9c:34:8e:be:33:70:bf:c9:2a:f0:6f:68:ed:
6b:21:a7:8b:c9:67:09:c8:fc:e5:0f:59:4b:c5:d9:
ad:21:3a:dd:a4:42:0a:98:10:e3:79:54:ad:63:90:
2b:e7:57:ce:1c:ff:5a:f7:18:0e:c1:ef:32:9c:42:
25:3e:60:77:ad:95:41:1d:a8:bc:40:88:2a:f8:7b:
09:e8:ff:6b:5d:45:8b:1d:68:f0:e8:ec:34:13:49:
a1:3e:f4:67:01:b5:a3:4a:20:c6:00:00:77:4a:ce:
76:c4:ca:23:ba:14:98:47:d4:a1:e4:9b:3a:16:7e:
5b:cf:83:50:c8:b8:73:3d:ce:6a:bf:af:82:80:e0:
c9:3c:0c:78:77:c7:c1:de:41:76:fc:12:e5:8c:70:
1f:89:80:a6:ff:ba:19:04:89:96:34:69:18:94:37:
e5:6e:10:6c:76:6d:4f:d9:bb:80:f4:e7:86:49:b1:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:22:7A:2F:4B:E8:59:00:83:3F:0C:8D:0D:1F:D7:0D:45:EB:D8
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a6:25:1f:5c:f4:f5:14:e2:88:66:63:10:08:dd:47:56:4c:
80:f6:2a:4e:11:28:e3:ed:d4:36:78:e4:67:ff:3f:11:6a:6d:
c0:d3:da:e1:84:6b:b8:7f:8c:a9:50:b6:18:c4:25:c4:32:fb:
ff:83:55:18:05:d0:12:c6:35:1c:bf:93:59:b6:68:d7:81:85:
b4:9e:f2:c6:3d:48:e8:21:e0:19:66:82:b9:a1:c3:97:92:f5:
0a:28:8f:0f:9c:e0:f7:e1:37:1e:10:60:8c:7e:a8:80:a3:ff:
f0:5b:d6:59:66:f8:5d:7a:52:59:55:9a:ec:aa:af:b5:90:43:
9e:89:e6:33:a8:08:45:5c:bc:a8:18:d2:bb:e0:42:17:5a:30:
57:01:20:af:87:ef:0d:2b:1b:b4:9c:2a:59:d9:65:08:e0:3c:
51:78:f5:f5:40:b6:fd:2e:2d:ce:41:30:bc:34:b1:cb:3b:07:
c5:0b:bf:28:aa:e3:96:90:4c:10:5e:e7:80:c2:2f:15:e4:3d:
4f:b7:80:10:5a:02:1d:fb:95:2f:47:04:75:89:34:9b:a1:c0:
06:f7:33:9a:d1:fc:cb:61:6d:12:ee:64:e1:3f:0e:a5:04:bc:
1e:42:cf:3f:8b:bb:34:2f:22:a1:76:70:e2:d1:82:8c:58:62:
c9:9d:2f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:47 2025 by rpki-client