Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: uMLEAHWAMVqrtTVfM3BiWQPQCdF1tWeirvAQXDOmT/4=
Subject key identifier: EA:12:C6:1F:C7:3B:C1:F7:81:A8:A3:3C:80:74:7C:05:50:65:92:06
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 0194BC727F69A37BBB79E6AE288792DE7A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 0DF5
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: zDj31VBgC8jUnR3jGRCsij3LIBGbxD8ONdD8K9U/Z+U=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7f:69:a3:7b:bb:79:e6:ae:28:87:92:de:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=ea12c61fc73bc1f781a8a33c80747c0550659206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:d8:30:9e:81:ea:e4:3b:7e:16:22:5a:8a:
96:c1:d6:d9:2a:12:5d:5b:af:9b:7b:f8:fe:5d:c3:
5f:eb:5b:38:12:3f:d2:48:eb:9d:b1:36:b3:d2:34:
f7:be:a1:4a:8f:45:5b:92:8c:71:fa:75:57:ad:ac:
23:5e:69:1d:f5:fa:6a:41:01:b9:92:a7:88:c5:41:
e3:37:48:cc:92:5f:9d:bf:5d:70:3c:4f:b7:53:15:
3a:b4:fd:ac:81:d9:ed:28:db:89:57:7b:a8:4a:91:
66:9c:6a:a5:42:da:39:c3:b3:f7:26:42:09:6c:f7:
d7:6b:43:d1:87:66:8c:89:22:d0:d8:e5:cc:0a:29:
54:c3:12:c5:29:19:69:f2:84:db:d4:07:70:e8:1f:
6d:cf:9b:3f:11:56:f6:24:12:6b:b2:c6:4e:8f:67:
46:6b:e5:af:27:a6:91:36:91:4e:93:50:dc:1d:94:
ef:64:19:36:df:bb:d2:0f:d4:e6:f4:39:b7:03:9b:
78:a7:c8:ef:f8:e0:b9:82:1c:4a:9a:b0:d9:0f:33:
8f:0f:e6:ce:c8:a6:00:ce:e7:d3:5d:42:59:62:b3:
25:ad:06:74:6c:59:94:cd:fc:ea:99:be:c2:88:b6:
c1:5a:23:db:00:58:cd:f7:7d:b7:7a:11:50:74:69:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:12:C6:1F:C7:3B:C1:F7:81:A8:A3:3C:80:74:7C:05:50:65:92:06
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:66:78:18:6e:e9:bc:17:23:5c:ce:8a:96:ce:4b:b9:14:
bb:5f:63:5f:64:c8:a2:f3:5a:87:93:db:fd:7f:16:b4:36:64:
b9:74:f0:32:a4:c8:05:62:1d:bf:3c:52:69:13:70:df:a3:ed:
ef:00:9c:fb:32:05:ab:79:c8:bf:45:3c:b7:14:5f:b4:ce:66:
a7:95:e9:e3:f9:14:b0:27:ef:0f:08:ce:a7:81:ff:fe:22:7a:
65:fa:77:12:8b:3d:e6:3d:41:c0:ce:ea:6c:7d:99:da:41:7f:
8d:7d:43:2f:5c:9e:74:8e:dc:90:23:ff:d4:89:2f:4e:77:9d:
52:1c:60:18:8d:cb:f2:26:44:e2:15:ce:0e:6d:15:22:d7:e6:
fb:d6:75:e8:65:39:35:d8:62:0d:26:54:63:5c:04:5b:c2:b8:
49:fb:20:30:0e:c6:24:4c:eb:f9:d6:2b:ce:9d:4d:a4:49:d2:
27:73:a4:9d:fe:88:d7:aa:54:e5:58:f0:e8:2c:eb:be:cd:57:
6b:60:27:4d:62:9f:09:2e:a8:c6:17:06:59:57:4c:c1:32:ba:
1d:25:88:08:70:8e:c4:36:0d:90:33:96:7c:62:b3:9d:eb:73:
96:0a:e8:50:67:8a:59:ea:0f:1b:2d:46:c4:7e:b2:88:97:52:
f3:fe:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:48 2025 by rpki-client