Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: t11I9FZGLIJLdwVCcZzgQAHPw+ZGIOA/aWRx6hE/+l8=
Subject key identifier: B6:FF:18:6A:49:7C:F2:25:B7:20:34:02:E2:C9:A6:83:1D:49:97:CA
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 0194BCA9D6E4551F93929BF8613CD0F18FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: 8bSeNBN7q3C6wqaP2VAKFeR+7UdyL06J+5I5T8+Hr6k=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:e4:55:1f:93:92:9b:f8:61:3c:d0:f1:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=b6ff186a497cf225b7203402e2c9a6831d4997ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:02:6e:4f:d6:ec:42:87:14:9e:da:69:15:
cc:bf:dc:8f:78:67:69:c3:13:6a:43:d9:41:3e:08:
9b:a4:6a:dc:c6:8f:30:10:97:ed:4b:de:e2:72:13:
9a:da:b0:6e:09:2f:2e:74:cc:a2:75:ac:e7:e3:a7:
a9:bc:3a:ad:5c:f0:44:a6:a0:60:23:e5:09:e6:5e:
cc:8f:d5:9d:ba:86:2a:a8:6a:38:1b:00:32:14:7b:
78:ce:7c:23:f6:b8:83:1a:3a:4b:e4:18:54:af:b4:
b8:c6:cc:d2:06:34:8f:11:1f:f3:82:58:96:1f:1d:
b4:2d:73:ba:15:76:b3:71:48:c9:6f:bc:97:be:dd:
a3:91:95:3c:4d:7c:d7:19:b9:eb:c9:f3:60:e5:83:
86:cd:0b:82:b7:0a:60:0f:74:8b:8d:db:29:4f:1e:
93:c0:2c:ca:c9:88:15:6e:28:0c:9e:ed:f7:7b:c7:
e3:be:33:72:26:cf:12:7c:f8:f6:74:04:09:04:49:
a0:23:f2:45:7f:90:67:88:3f:ae:82:4e:4e:87:b4:
86:b3:d3:42:59:ec:fc:76:60:90:f1:ef:05:0f:0f:
66:0d:65:46:27:9b:3a:a6:00:bc:64:3c:54:fc:d3:
89:0f:e4:4e:8b:4e:95:68:d2:e6:10:bb:d3:e0:fd:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:18:6A:49:7C:F2:25:B7:20:34:02:E2:C9:A6:83:1D:49:97:CA
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:63:4b:43:2f:4f:ca:97:19:7e:a0:96:8f:ac:9f:a8:db:1e:
c7:6a:34:3e:ca:9c:a7:f7:b1:bb:72:10:11:14:9a:e3:30:fa:
63:c4:71:5d:47:88:85:c0:83:9a:03:46:91:f7:64:26:1f:9f:
8b:43:9d:77:82:c6:58:ce:6f:eb:57:da:cc:83:d2:ba:b7:6c:
ec:de:70:74:96:a4:cd:ab:6a:95:81:f0:ba:d8:eb:47:47:60:
a4:86:54:31:97:5a:11:99:bf:52:2e:04:a3:f5:6a:84:78:76:
ca:45:03:84:e1:a6:c4:dd:0c:44:57:7d:d6:20:5f:4d:1c:c0:
29:1a:e1:a2:89:70:c7:10:bb:d2:23:c3:eb:24:b9:4f:ad:85:
c6:dc:38:31:21:92:f7:7e:68:de:e1:85:64:cf:4d:5e:8c:b3:
4a:48:80:d8:92:e9:eb:19:3c:7d:34:b3:2c:2b:ec:97:8e:b8:
a7:40:fb:b8:dd:1a:02:d9:3d:28:25:96:a9:3c:ef:e8:de:23:
26:a7:14:36:92:51:32:ac:53:31:4a:95:48:f6:5f:68:4b:1a:
80:9b:07:36:2d:59:54:bb:d6:e7:92:11:40:47:b9:e0:9d:db:
e2:b4:4c:8a:21:da:43:5c:c0:32:ff:dd:96:12:7c:98:4b:09:
ca:b9:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client