Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: amEw+N0gYV6pQTgwdvDdGiqwcZZmNd7wmj0+4kFVHXc=
Subject key identifier: B8:54:7E:C8:B3:48:71:BF:10:5F:AF:CC:36:57:BA:B3:DE:58:83:18
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 0194BC04DA6E55930211B8D1C4DE7A032FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: 9vnNWKMmv52CFHXEo4c1YgvqEjkVS7cHUHJwjL5JJ1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:6e:55:93:02:11:b8:d1:c4:de:7a:03:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=b8547ec8b34871bf105fafcc3657bab3de588318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:59:26:8c:b5:4f:39:9b:44:9e:14:f3:de:fe:
14:f6:ec:e1:42:f6:ee:fd:51:3f:ae:c4:de:5d:20:
bc:16:46:04:b8:94:aa:bd:9f:36:75:7a:27:04:42:
10:61:7f:15:b6:41:88:f8:1b:dc:05:dc:a5:28:d8:
f8:e2:a3:f0:ea:79:fb:32:4b:e1:7f:95:6b:f5:d4:
10:cf:c0:c6:c4:4b:99:93:bd:6c:1c:b9:6f:f4:af:
b0:0c:06:be:3e:09:1f:02:73:f1:09:2f:d6:fa:be:
a3:2c:3c:69:db:8a:53:f5:9d:c4:f6:4d:9f:a1:9f:
26:23:23:57:15:ab:57:5e:40:37:bb:55:d5:90:3f:
d4:8e:2d:c0:d0:e5:7e:04:ce:77:7b:bc:4f:35:a7:
63:14:50:aa:a9:ed:40:5d:62:6a:c2:6c:b2:53:14:
2a:d7:c4:d6:48:35:c9:25:d4:e0:82:44:1f:68:c9:
2f:28:b6:a4:78:10:0b:af:be:57:f1:f9:fa:11:46:
27:ce:33:f1:32:b6:e2:79:ad:d3:4f:24:a1:8c:e1:
6a:29:70:70:b1:20:20:c5:f6:fd:94:5d:02:3c:43:
e7:89:1b:49:14:3c:79:15:4f:8e:c1:9d:58:36:e6:
9a:29:e0:c5:ee:25:b5:c8:d0:84:d4:11:ca:de:98:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:7E:C8:B3:48:71:BF:10:5F:AF:CC:36:57:BA:B3:DE:58:83:18
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7d:eb:2d:32:7b:67:ed:23:7f:d6:02:b8:d1:7d:6c:b5:cf:
ff:fa:a7:67:3b:66:95:e6:85:f7:7c:60:a1:d8:ae:28:70:ef:
e8:bf:45:b2:1a:c4:b7:09:d9:f9:7e:be:ef:64:c0:4a:b6:3f:
b2:85:fa:ec:31:bf:d7:dd:fa:28:5e:c1:02:f8:d2:24:85:bb:
8c:18:06:16:a2:ff:89:b1:c5:c2:f4:0a:76:02:4f:97:ad:19:
a6:52:89:21:42:d4:e0:ef:67:aa:3f:df:f2:bc:91:a1:7a:7b:
df:c1:bf:7f:a9:f8:34:57:aa:67:e1:e5:42:b8:19:a9:55:7a:
fc:74:79:79:5b:0b:10:cd:44:aa:2a:d0:13:e5:1e:9c:b1:ac:
31:46:b5:b8:99:5f:32:98:af:2f:d4:fa:00:7c:71:04:80:a2:
70:49:33:0c:18:56:47:c8:89:35:b6:2f:f8:33:4a:ef:6c:61:
04:01:d9:ac:66:22:91:f6:26:68:7d:2d:5c:82:a3:43:fa:1b:
79:4d:e7:50:83:d9:4e:c6:33:8f:da:dd:1b:b0:d1:9d:74:7d:
ca:91:9b:98:33:90:1a:2d:93:f8:5e:ca:ae:16:e0:32:b9:cd:
00:9b:3a:95:8b:e5:b5:77:e7:7c:c9:1e:1c:c9:ae:f6:50:60:
a5:16:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:48 2025 by rpki-client