Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: melTMqK+x5xHsOd+un8cOn7EM/V/evYPzksJrVVI+Nw=
Subject key identifier: 51:1F:7B:7E:B6:4D:59:2D:63:6F:32:40:83:25:F4:C3:16:7D:AB:66
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0194BC3C929B438514C1AB362D75A401796F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 137C
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: Q5c2qkQmmoeOYspeqgWLyo6y2cqVAVKBXUKx/MASkGc=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:9b:43:85:14:c1:ab:36:2d:75:a4:01:79:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=511f7b7eb64d592d636f32408325f4c3167dab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:ec:e8:4f:b2:9e:b5:a4:65:9e:21:9f:45:
33:49:05:24:86:e0:1e:00:68:73:4c:46:13:f3:0f:
ac:87:27:f4:ed:6a:56:a1:23:64:38:da:db:8f:57:
6c:9c:c7:c9:d0:b9:4d:d6:f6:e3:5b:ff:ac:b4:90:
41:89:f5:ed:e8:3a:23:95:2b:4f:6c:f3:ac:95:d5:
08:59:55:3c:30:68:79:9b:d8:22:45:b2:49:2a:5e:
e4:d3:29:61:69:67:10:f9:61:cc:e1:9a:ef:58:56:
e0:3f:d5:4e:ed:c7:c4:ed:51:2c:61:45:c6:d9:1c:
a2:c6:d6:03:99:04:13:c5:eb:db:8e:c1:8d:22:d0:
35:6e:44:19:05:07:80:d7:9a:49:33:8c:0e:6b:96:
f5:63:b1:ff:2c:55:75:47:84:5e:ef:3c:52:94:f9:
f0:a6:76:d7:d1:8f:67:af:89:65:75:6c:98:ca:39:
f2:ba:5b:fe:35:ad:22:9e:66:d9:55:4b:48:7e:6e:
ec:c2:b2:27:f6:f7:32:a2:11:92:be:7a:68:36:0a:
08:d3:38:7e:89:6e:5c:4c:f0:e5:89:fb:3b:6d:44:
bc:54:88:7b:05:46:74:df:fd:38:41:54:11:8f:b3:
12:a3:c9:28:61:50:08:cf:00:ae:30:31:b6:36:9b:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:7B:7E:B6:4D:59:2D:63:6F:32:40:83:25:F4:C3:16:7D:AB:66
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:e7:26:e1:e8:86:5d:87:8b:08:20:89:43:2a:e7:1d:70:
15:b7:c1:c5:1b:f8:4f:a5:0e:df:f0:f5:0b:81:bb:5e:63:de:
df:69:7e:5c:74:cf:92:30:c3:83:09:f3:83:3b:09:95:28:4c:
fd:6d:e5:a5:87:43:e3:17:a8:a4:cb:db:3b:22:30:0c:a0:31:
a2:b2:6f:7d:f6:63:74:c2:10:f7:49:52:54:e0:4a:77:39:6a:
7f:83:fc:ed:1c:d2:d6:30:76:a4:0e:5c:61:74:7a:2a:a5:54:
0b:fd:16:71:e0:9d:0f:05:fd:21:7d:5c:6f:c9:d2:1b:4f:1d:
76:02:4f:3f:c3:49:19:29:e4:e8:4a:01:fc:5c:98:26:5a:7d:
c2:25:b5:47:f1:07:5f:ae:4f:71:b6:81:e1:fb:3c:ad:aa:6a:
18:68:40:5c:ff:27:39:a5:d8:fd:31:7f:59:79:b4:af:4e:17:
cf:c6:ac:29:53:08:d1:86:3b:d0:c9:ca:34:f6:d9:84:88:08:
d8:3c:71:32:b2:27:a8:28:0e:47:ce:12:e4:35:bf:aa:6b:63:
cd:1e:2f:97:a5:4a:58:fb:2a:e1:a7:00:16:a9:71:19:89:63:
8e:6a:52:ce:c3:7d:ed:ec:48:ea:38:a7:8c:5b:9c:9f:87:ff:
d5:e9:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:02 2025 by rpki-client