Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: FW/Xs0YvslML9Qudr3vgfNXGmnPNWKRFX4dgh1FQ0bU=
Subject key identifier: B3:66:34:DC:2C:77:F5:4E:8C:42:AE:6D:D4:36:CE:E7:E4:62:87:2E
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 0194BC3C54914864305E8F968D46E2B1BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: Wx7qEbUjI9Z3ppUcLkxe+WrlHObHcidxQL82tExhvok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:91:48:64:30:5e:8f:96:8d:46:e2:b1:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=b36634dc2c77f54e8c42ae6dd436cee7e462872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:cc:58:c3:dc:cf:95:61:d9:24:b9:c1:93:
79:51:03:71:79:1f:44:64:bc:3b:1d:57:ee:b2:e8:
3e:3a:02:43:40:0d:e7:57:6c:e3:3b:20:43:30:bd:
ca:aa:14:dc:68:47:38:1e:0a:e9:3c:b1:3c:88:ec:
db:4a:f5:63:a0:9d:9d:34:cb:17:87:c9:25:e1:a9:
67:65:6c:b7:03:87:62:41:6d:55:93:f6:9c:eb:f9:
4f:d6:e8:89:b0:6a:94:06:2f:43:ae:35:0e:08:48:
4a:f8:39:9e:00:90:7d:7d:a4:13:73:54:39:a6:e1:
68:9e:9c:6c:3d:ee:e8:cc:12:ff:cb:67:02:df:5a:
dd:2b:e6:11:87:74:61:2d:28:2b:48:0b:ed:77:38:
d6:09:47:bf:e8:c8:f2:6d:69:28:b3:53:31:cf:e1:
a4:a9:82:87:c7:65:11:5a:88:e3:4d:04:eb:58:69:
b8:43:7a:6e:fa:37:5c:b2:c7:2e:2d:98:ca:95:0a:
8b:20:b0:b6:d7:13:d8:17:f9:45:a0:ac:ba:47:94:
a7:34:7f:82:ff:89:4a:4d:2c:95:15:aa:ed:de:47:
3a:a6:7e:6e:41:40:bb:9d:b2:9e:75:7d:15:3e:0e:
3e:9f:3d:b6:29:e2:9c:06:27:3b:50:cb:60:eb:51:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:34:DC:2C:77:F5:4E:8C:42:AE:6D:D4:36:CE:E7:E4:62:87:2E
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4b:4b:40:0a:01:df:05:6a:5d:8c:85:99:00:8d:0a:f1:5c:
4c:7d:a2:54:97:9f:c7:89:a2:e1:ed:83:9a:f6:88:56:63:f8:
30:59:e0:47:1d:78:f1:00:42:9b:c8:b1:08:f3:0f:87:6f:48:
8a:c9:eb:3c:c5:f1:0f:56:b1:48:89:10:0f:45:63:0e:1f:bd:
2e:b3:bc:97:fb:1b:34:4e:5d:0b:cf:92:9b:88:4a:67:9c:c4:
cb:64:7c:65:b1:09:43:70:3f:2a:8a:93:5e:88:cd:91:63:e3:
ae:84:e7:4c:d8:c5:3a:f1:a3:25:ea:f7:61:f9:7d:36:6f:cc:
85:00:16:97:7b:ff:21:c0:12:d0:11:f5:0e:70:34:6d:d7:31:
5c:b0:e2:cb:99:fd:ad:d5:e5:f1:6b:d9:1e:dd:91:08:c7:98:
e5:59:4a:85:b6:d8:b8:bb:ef:02:0f:27:fb:c2:ac:b3:90:ac:
c0:ec:6b:1c:b9:98:f5:ae:9c:f1:03:4d:ba:8c:a3:b9:ff:cb:
ce:60:da:6d:98:7b:54:70:0d:1d:59:70:38:ae:ee:82:23:9d:
5a:0f:12:da:ff:c8:3b:a0:23:45:23:1d:03:15:56:87:28:94:
f5:60:9e:98:60:32:85:05:de:7a:f3:85:6a:65:f7:c3:85:3e:
e4:72:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:22 2025 by rpki-client