Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: RvSIfTbSZUjSOdYYd9FZX49QGA2mwUX1auXV7OrnSvo=
Subject key identifier: 8C:D4:27:08:64:CC:F3:C0:16:84:C3:88:55:CE:C1:DF:6A:3B:A3:9C
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0194BD4EA0F59C3194B4DC9369A494E91841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1382
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: BohTgACwx4zfD1UEjw7uQcqqJcitK455Jwc4g0L4PcM=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:f5:9c:31:94:b4:dc:93:69:a4:94:e9:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=8cd4270864ccf3c01684c38855cec1df6a3ba39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:c3:0a:04:0e:1d:9f:e8:c5:86:31:eb:21:
eb:85:f1:37:d4:6d:42:9f:4f:c8:79:13:33:e4:6f:
e4:fa:60:8c:24:dc:50:7a:91:6c:94:e2:90:02:42:
64:6d:2b:3c:03:a3:b6:b9:73:b1:11:07:19:03:46:
29:3a:cb:d3:61:42:2a:56:ef:68:f1:82:b1:23:26:
92:fb:d1:34:f3:fb:f2:c0:4a:e1:8e:39:a6:70:1f:
9f:0f:27:b9:c4:12:1f:9f:cd:3c:42:7b:4b:4e:3e:
47:6d:61:e9:33:3d:26:54:fa:28:02:3a:7f:1d:f0:
30:dd:87:4c:20:e9:d2:8f:0a:88:d2:7b:25:af:f6:
3a:c3:aa:17:f0:c0:2a:d8:93:35:ab:40:9e:19:83:
d0:45:8c:b4:5b:e3:a4:74:c2:a8:9f:12:4d:73:84:
2b:0d:b0:42:69:ab:b8:4c:d8:a4:16:92:48:9b:47:
b0:d8:9e:ff:29:02:f6:e1:8d:e6:8f:85:81:6c:45:
fa:61:43:50:83:46:19:dd:22:6d:88:83:4c:59:f3:
e6:40:f8:a7:ff:df:25:b1:4a:8f:90:5a:27:b9:c2:
4d:53:09:76:af:cd:92:1b:c3:de:1a:44:33:e0:7c:
10:02:da:cd:f3:8c:24:07:9f:a1:66:98:1e:91:40:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:27:08:64:CC:F3:C0:16:84:C3:88:55:CE:C1:DF:6A:3B:A3:9C
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:56:be:66:31:8f:97:df:66:6b:98:ee:67:dc:37:b3:70:57:
ea:50:3f:7a:7c:33:94:7c:9c:8a:3a:98:0e:30:9a:ea:3c:93:
a0:3c:11:b5:54:fd:18:50:e0:81:4e:dd:e7:28:10:24:5b:f9:
a6:14:46:e2:b8:b3:69:0a:53:e1:1e:c3:de:30:92:9a:5e:b7:
b0:72:16:46:27:34:4a:23:50:33:db:1d:4f:93:eb:c8:a0:d0:
e3:60:6e:50:69:8b:94:3c:96:ed:eb:2e:90:fc:c5:6d:c9:76:
ab:17:a9:7c:96:70:29:c4:bd:27:2a:14:ff:10:0c:bc:3b:86:
ac:e8:70:de:7c:ff:0f:4d:e3:d3:1e:a7:bc:80:6c:13:75:a8:
bb:0d:33:78:47:d3:f9:ea:f7:ba:5e:b6:4a:fe:9f:52:33:15:
b2:1d:28:05:65:21:f6:21:30:77:c5:f8:5c:bb:81:6f:2d:ca:
a4:db:02:86:5d:59:19:2b:a9:4b:09:79:a7:58:cb:71:1a:54:
ec:e8:ad:ae:a0:5c:51:be:43:b4:74:e2:13:a0:fa:a4:ef:6b:
7e:2c:24:72:f3:8c:00:9e:3b:69:b9:72:dc:01:b9:b1:57:9d:
78:50:58:63:a6:66:0e:c8:d0:3f:f0:b0:bf:53:ab:c7:d2:be:
12:f8:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:42 2025 by rpki-client