Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: Wb12GA6Pa8iuTBgT2Eo1BzWSiLtjCX4j0dnb4+sIy3Y=
Subject key identifier: D5:DF:D4:68:F3:95:06:68:2A:6F:DD:95:B0:A4:A2:0E:33:EC:1A:4B
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 0194BC3BECDDF36A788B8222DE237DE706C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0D04
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: 2JzsmWg76WT9V7vJVFZ0NtS4ioWf6xPrMTH2VCJp668=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:dd:f3:6a:78:8b:82:22:de:23:7d:e7:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=d5dfd468f39506682a6fdd95b0a4a20e33ec1a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:70:43:cf:51:32:7a:b7:f2:7e:47:59:14:
8e:ec:ca:7e:56:69:ab:75:bf:d4:43:6d:06:4f:a0:
73:9f:90:22:e1:e3:9d:5d:ed:95:4c:5d:1b:1d:ae:
52:1e:5b:73:e4:b6:ca:4e:1f:48:8e:b8:6f:11:88:
39:30:a7:20:ad:88:f6:cc:10:bd:dc:5c:b2:c6:e6:
49:5c:e5:b0:8b:a7:68:df:ef:60:d3:55:68:53:b2:
8f:9d:b4:38:e7:3b:fd:4d:41:f2:03:da:31:94:1d:
98:59:0f:dd:b0:9e:dc:6d:d6:3b:54:4e:81:71:27:
8f:86:71:54:fc:e5:95:44:90:eb:7a:af:e7:1d:bc:
7f:58:b3:2f:da:7f:71:0b:d2:38:49:83:33:b9:d4:
74:25:89:41:36:71:51:cb:2a:fd:d6:2c:9c:17:41:
bc:73:d6:0a:60:22:2b:5d:12:15:d8:d3:6e:32:7c:
12:d7:9a:48:10:97:b4:74:29:01:16:9d:dd:4f:5d:
1a:59:cd:5f:3d:aa:09:70:9f:ba:c2:df:85:1e:bf:
44:c6:e0:54:ec:38:ab:25:07:a2:07:fa:bc:9e:9c:
65:6c:2f:70:e9:ea:d5:56:d7:94:5c:71:e3:4b:c6:
73:2b:d3:9f:91:0f:bc:5e:77:31:31:06:1d:53:ac:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:D4:68:F3:95:06:68:2A:6F:DD:95:B0:A4:A2:0E:33:EC:1A:4B
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:14:f7:d7:3e:fd:9d:ee:56:14:6b:49:90:d8:9a:ab:03:
38:d9:11:78:fa:7c:ec:28:16:d2:b4:aa:d1:e8:f8:93:14:d4:
08:eb:99:f1:1a:d8:37:45:e6:53:e4:82:b7:36:09:c7:10:fb:
25:47:00:8c:6d:48:61:9b:24:ec:b4:36:25:cf:9c:ef:50:0d:
d1:c3:44:64:0c:f2:7f:c3:54:cf:72:80:c7:b1:c7:3e:fe:bb:
65:f4:6c:61:a0:88:b8:85:91:87:9b:9f:5f:cf:7c:56:cf:37:
9f:d2:65:c8:5e:be:c1:71:ad:b1:3e:2e:e7:49:6e:6d:94:84:
05:36:94:1e:df:c4:4c:11:0d:89:53:9f:92:73:d6:ef:a0:68:
4e:1c:4c:02:72:b3:fe:44:a2:1f:14:0e:9c:db:e5:c5:e4:4d:
10:96:f2:4c:43:41:f5:cd:10:b8:9f:10:59:35:99:a9:6f:2c:
4c:1f:92:4f:99:4a:63:e4:8b:63:9a:e0:4d:1e:f5:02:58:78:
0e:cb:ad:f5:a0:b5:2b:60:d4:b5:e3:39:89:2d:9d:00:a8:8b:
26:1b:6e:97:4a:b2:c0:ff:c6:1d:b0:57:e2:1c:03:87:a5:ad:
01:0e:e1:41:95:19:73:c8:ad:ee:76:e7:31:03:9c:6d:be:b5:
ff:4b:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client