Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier: QDFnrKw4acOqLta77XQMtXwZ6Tj2bhdRZFjzSp9EtkQ=
Subject key identifier: 9F:D7:35:F6:22:48:CE:E1:22:D5:72:6E:02:43:62:BE:5C:2C:B5:D0
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0194BD85998390BA40EBFA7CF291CAA91831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number: 0D9F
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: YbVjeGKx7L5LpmnVSOoF70pmZSTwPsTakz27obhgb9w=)
2: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:83:90:ba:40:eb:fa:7c:f2:91:ca:a9:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=9fd735f62248cee122d5726e024362be5c2cb5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:34:c5:5a:92:02:a5:71:7f:fc:30:fe:33:02:
24:b6:cc:ec:79:88:93:f5:1a:1a:12:e6:51:8d:e2:
97:36:9c:94:c0:eb:2e:23:46:bf:04:df:77:7e:3b:
88:c6:05:bf:29:e2:0f:18:57:d8:7e:e0:90:37:7d:
93:dd:dc:cb:40:64:23:b6:d5:37:0e:e2:b3:8f:7a:
4f:da:be:38:19:fa:3d:74:67:ff:0f:0b:b7:d4:29:
09:3b:90:16:88:7e:73:41:66:60:00:cf:23:a5:21:
a8:bb:da:5a:4b:d4:5b:3d:0c:73:94:a3:16:9c:24:
de:01:80:34:91:7d:02:9f:34:d2:fe:63:2c:f2:78:
d1:0e:7c:e7:28:bf:2f:40:6e:68:be:49:23:2b:41:
06:11:05:21:26:b9:47:7e:53:b7:f2:28:08:4e:71:
b7:e4:ed:f1:1b:64:d9:d4:3e:81:c9:43:b8:4a:26:
73:01:5c:38:5d:eb:f5:c4:68:e5:56:d9:07:59:25:
fc:44:80:48:b8:04:d6:f6:46:2f:74:95:ff:6f:cd:
88:d8:55:4a:83:d7:b3:e8:82:4a:92:2a:4a:9a:bf:
19:c8:d0:3d:a5:d5:f4:d5:c0:0d:c5:f4:f7:3d:34:
63:24:f0:91:21:9c:57:4e:83:a4:60:d0:a9:26:22:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:35:F6:22:48:CE:E1:22:D5:72:6E:02:43:62:BE:5C:2C:B5:D0
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:70:d6:49:42:2b:6b:1c:c7:72:a6:3a:0a:45:54:51:6a:83:
fa:51:3f:37:d1:17:ca:32:90:c6:68:7c:d6:db:da:b6:76:91:
c1:0e:6f:bb:f2:fe:de:e1:13:1f:40:af:65:df:b8:f0:4c:e0:
84:8e:f9:26:ec:2a:1f:cb:d7:9d:c4:09:09:4d:fd:0b:5f:0b:
a5:68:49:a8:52:b7:0e:be:76:fe:99:11:0f:52:5d:d0:e4:66:
47:e0:39:aa:af:11:1d:6f:44:f8:b0:0b:77:ae:77:28:d7:39:
cd:cf:75:61:f0:17:89:3a:37:3d:42:61:5c:37:67:ee:05:90:
8d:4a:0e:ac:3c:03:b2:9c:38:d9:1b:ec:73:f7:c7:a7:eb:a0:
5e:75:1f:fe:7d:54:23:a3:0d:44:db:17:90:13:df:93:a3:8c:
ea:74:33:1f:0e:f2:cc:06:0a:c2:53:f9:e6:c5:d7:b4:cc:7d:
dd:96:0d:82:43:23:9e:ea:cc:be:cd:ce:36:4b:27:29:7c:57:
2d:5a:5e:3e:47:76:cd:a1:2c:1d:fb:ac:77:3d:85:2a:0b:da:
06:ca:8f:04:b5:e9:e9:15:42:11:11:46:47:f4:6d:49:6e:62:
ab:c8:78:21:d4:38:86:de:e3:57:a1:4d:75:35:4f:77:31:7c:
b0:c5:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:38 2025 by rpki-client