Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: C/TBhc3v1bZ1kw9vWxturIamK2MFP8b/gDFBGTEkHnk=
Subject key identifier: 97:BC:02:96:35:2E:7E:18:28:8B:1E:A4:D7:68:DB:F7:88:CF:F4:65
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 0194BC04D0952D247FCAA90A8585D711C94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: Y3ZCMcvlYAPzl5nH4fEdOBamDxZZFzFyiFeO/QNEZJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:95:2d:24:7f:ca:a9:0a:85:85:d7:11:c9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=97bc0296352e7e18288b1ea4d768dbf788cff465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:6b:7e:80:3c:82:61:40:41:37:50:8e:8f:
77:9e:fb:94:44:f2:d6:b4:84:da:52:f9:d0:d4:47:
f6:b4:59:8a:4a:68:9d:50:1d:ba:50:19:3a:c3:9c:
85:59:f1:6d:15:27:14:23:50:24:51:0c:09:3d:77:
0e:d1:fe:e4:a9:1f:80:52:52:f6:3c:a1:7e:74:2e:
a6:43:db:98:4d:2f:76:20:04:c1:38:52:c9:74:3a:
22:5d:09:14:4e:4f:f1:92:b1:f8:50:44:50:fe:a1:
f7:dd:e5:0b:a3:7d:c6:41:50:d0:e1:0e:44:a0:cf:
4e:8d:54:dd:04:d1:d2:df:f4:9d:35:ea:0a:fe:06:
f1:1d:5c:1d:f3:6f:02:fd:1a:8d:2c:97:09:f8:cd:
7a:4e:53:b3:c4:b6:e8:d8:28:15:fe:82:ee:df:1f:
1f:77:be:b2:8f:e4:1d:28:3e:a5:ca:ad:7e:64:35:
1f:1d:c8:00:c1:98:df:3b:e2:6c:f5:ad:55:ea:df:
50:64:95:02:c9:64:83:c7:e3:cd:09:59:60:c0:d6:
2b:2f:b1:49:7c:f9:d6:5a:48:0b:58:23:63:e1:df:
be:e1:4d:a6:1c:9f:86:6b:90:ed:f1:06:b8:f4:2c:
70:86:a9:55:ba:ac:17:9a:94:2f:e4:20:79:48:c2:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BC:02:96:35:2E:7E:18:28:8B:1E:A4:D7:68:DB:F7:88:CF:F4:65
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:19:59:54:f3:75:2b:95:f9:f4:36:93:7d:39:50:70:d8:43:
b4:11:a7:d6:53:93:7c:31:6c:91:98:7d:de:2b:23:70:33:fc:
f4:fe:e1:07:4e:3b:32:15:98:68:5a:36:db:31:db:19:99:35:
13:a1:35:79:cc:4e:ba:eb:47:13:ea:da:f0:64:02:1b:ef:69:
b0:95:70:a4:f5:5b:f8:c0:9b:72:9a:8b:36:43:37:0d:ad:ca:
13:58:a6:50:6b:21:15:b6:54:25:5d:b2:71:b9:0a:c8:57:7c:
71:46:b1:f5:01:79:8f:14:40:92:c8:6a:8b:91:83:9d:0f:b0:
b3:79:bb:8c:18:83:7c:40:4a:61:02:06:3f:52:c8:3e:32:97:
38:df:9a:33:28:3c:f7:83:7e:b2:85:5b:8d:e4:f0:36:45:f6:
d6:a1:e6:83:a5:3e:a6:9d:50:e1:75:db:93:ed:fa:c2:ed:e9:
81:05:e2:d0:4a:21:7d:f8:27:ee:1c:6f:d1:9c:5e:eb:7a:74:
3f:24:fd:c6:6f:9c:12:ce:32:c8:0d:80:bb:c5:bb:b6:b8:ad:
38:32:49:46:a5:1e:cf:de:2f:05:62:62:be:a1:a4:64:70:d0:
23:6c:68:6b:c3:43:cb:12:c4:cd:66:a0:0c:0f:2a:2f:6e:c2:
91:10:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:47 2025 by rpki-client