Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: 5Tc4fMTTziySQ9FZDv2aBWYO+0nZ90G6jQmP9G+aUE0=
Subject key identifier: 77:08:33:4B:4F:27:6A:4A:C3:63:6B:54:D9:BD:F8:A3:A0:30:2C:4C
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 0194BD853EFB2E4A9D186A8BA4207E4A5943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1172
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: b2RoNQeELpgodOJGfrXLDHdAeZU7aP1lcOiRCjrm0GA=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:fb:2e:4a:9d:18:6a:8b:a4:20:7e:4a:59:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=7708334b4f276a4ac3636b54d9bdf8a3a0302c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:be:60:3c:6c:8e:9a:c4:bd:b2:10:1b:fd:
69:55:81:77:1d:20:0f:d8:c9:5f:57:cb:78:6c:70:
8d:77:4c:75:37:69:06:55:63:e9:6e:75:da:3f:8c:
4c:b9:cd:ec:e7:6f:6a:47:b8:54:11:3b:ce:ad:ca:
9b:05:bc:26:92:ee:c7:37:87:dc:0a:a4:3f:15:70:
81:24:0c:fe:dd:ca:80:ca:64:ba:4b:56:2a:4c:32:
d1:c0:9c:a4:ef:45:40:ad:63:2b:b6:4a:ab:47:c3:
6d:20:cf:97:3a:86:a8:f7:20:c6:de:97:35:d8:98:
41:84:c8:b1:d7:06:15:82:04:66:c4:58:84:13:bb:
b8:63:c8:a1:a9:bb:33:25:d7:a0:28:f1:f9:2a:66:
bf:88:38:a6:b9:95:10:b0:06:80:bf:3e:01:64:ee:
43:4f:4a:36:e8:9e:79:ac:cd:06:6e:0d:87:df:79:
fc:c5:df:f5:13:7a:96:28:26:38:5c:e2:10:e4:16:
f6:95:5b:86:85:b3:11:4c:53:cc:87:68:4a:b9:c0:
60:cf:e1:1c:4d:fc:33:79:46:55:40:f5:98:42:41:
4a:86:7a:ea:02:06:d2:ac:7b:8e:cb:f9:47:d3:6d:
c7:8b:97:f3:d0:cc:2f:ed:1a:8c:df:e6:9a:29:ba:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:33:4B:4F:27:6A:4A:C3:63:6B:54:D9:BD:F8:A3:A0:30:2C:4C
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:11:48:16:a5:71:27:3c:2d:87:5d:4e:3e:a3:bd:6d:1d:
44:98:e2:8a:38:d2:23:ab:49:de:7d:f8:a7:f9:1a:06:a2:eb:
df:33:b8:9a:22:51:d9:e9:ec:75:ec:86:22:e8:f7:52:d1:6a:
68:98:6d:ee:5f:2f:03:37:c5:1f:82:ee:7d:51:03:37:c2:d7:
58:97:a2:bc:b3:fd:7c:80:72:e3:92:32:5c:4c:bc:41:e5:9e:
22:81:e9:fd:9d:34:86:69:f7:f5:d5:cf:73:e0:8a:92:64:05:
3f:12:7a:de:be:c6:31:11:67:70:11:9e:ed:aa:dc:36:47:48:
84:92:5a:93:ec:22:88:5d:1c:1d:33:87:a2:fc:3b:24:f9:ae:
56:c5:77:ac:bf:07:49:56:2a:94:60:80:5d:c3:8c:94:27:4b:
2d:cf:e9:42:f2:23:f1:13:3d:1a:5f:95:39:87:36:0c:d0:d3:
3b:9c:71:1c:c4:dc:f7:57:04:a9:c0:db:ad:9a:ee:00:0d:50:
12:00:b3:39:23:ff:a6:a0:54:53:cd:ff:27:a7:2f:ba:d6:f3:
75:85:c5:95:0b:91:7a:98:25:2a:64:34:04:83:1e:ea:c5:d1:
3a:68:55:f1:74:9e:13:3b:69:f7:af:95:80:c6:1c:99:7f:b7:
d3:2c:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client