Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: AGStlXiqXHXmRayCU/ntjadp+r7cublqGqRXPsBujWs=
Subject key identifier: 3C:42:88:01:20:13:5D:E2:82:02:A3:7B:6F:B0:4B:88:AD:BA:0C:7F
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 0194BC731496E357B8CC729A94511E1AEE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: NX/YPwJmeY4QM0ZK1SLsi0l7xuG6KP1/3k9c9SZRgCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:96:e3:57:b8:cc:72:9a:94:51:1e:1a:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=3c42880120135de28202a37b6fb04b88adba0c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:28:f3:16:10:d6:5e:d3:d0:88:77:16:2d:
88:9a:e9:09:a6:5f:10:8d:bb:0a:10:67:7a:45:ab:
c5:28:80:7b:ab:2e:e8:d0:c1:1d:40:b3:89:f7:ea:
3d:bd:3e:b8:01:1a:09:b6:8a:e3:21:0a:c4:d1:0c:
45:29:c7:ac:1e:16:5a:d9:f0:dd:c6:7e:2d:75:3e:
1d:44:22:a4:9f:06:93:d8:ac:23:b4:9d:28:7f:9f:
fe:f7:45:a7:3d:f8:58:d9:03:84:56:f0:1c:51:79:
78:86:0a:e6:82:05:0c:32:f5:1b:5e:a3:69:05:23:
a2:91:f3:19:db:c0:c2:45:03:38:42:95:d2:46:48:
b2:6c:c6:62:d5:8c:a8:59:2d:c2:95:5c:a9:d9:86:
f7:a0:a4:37:4d:90:cc:24:f6:3f:13:f0:35:ae:6e:
1b:7f:91:28:40:7d:dd:df:ad:3b:7d:c2:a1:71:b6:
3c:b6:65:7f:38:09:df:93:a4:ba:84:e1:9b:35:e9:
66:41:f0:39:51:b5:4b:36:e8:e5:e5:69:1c:fd:b4:
b0:ae:28:f7:7d:e5:d1:72:a5:34:25:67:65:db:a4:
f8:45:46:73:cc:01:c0:b4:06:74:9d:02:70:c9:6c:
6f:8c:2d:72:85:af:8d:9e:fb:f7:3e:98:ea:21:3b:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:88:01:20:13:5D:E2:82:02:A3:7B:6F:B0:4B:88:AD:BA:0C:7F
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:b8:76:a7:e3:21:54:95:ef:f7:5c:29:bf:35:49:6d:59:
e5:60:23:5d:28:5c:71:37:5a:1e:8a:de:ba:f3:fc:fb:65:5d:
4d:e9:e4:3f:c1:af:c7:04:36:56:88:de:6e:b5:e1:a0:28:33:
0c:2f:0f:f5:35:37:a1:ab:88:19:9f:d4:c5:9c:8f:8c:2d:1a:
8a:ca:af:b8:f4:ce:34:46:e6:c0:ee:0e:5e:c1:41:ff:d2:b4:
39:04:50:80:61:93:4b:84:99:ac:7f:c7:52:85:e6:36:e5:62:
75:d3:0e:ee:23:e7:5f:53:81:b4:23:34:08:81:d6:03:3a:fd:
da:b7:26:61:0b:51:c6:05:13:72:a2:77:b2:25:b8:d4:a9:13:
f7:0e:d8:53:44:f5:46:22:aa:9d:52:5e:d4:46:e8:49:4f:ad:
c8:8b:71:78:9f:e7:85:e5:39:6c:48:a1:75:34:45:30:73:41:
4c:fd:6f:56:da:be:3e:55:fc:af:20:64:a6:26:e2:c3:ba:b7:
ab:7b:f6:82:dc:be:73:20:12:7f:56:1e:77:3a:08:45:94:8d:
b7:93:62:5c:7d:5c:3d:9e:55:3d:07:52:77:70:72:c7:9d:12:
47:b4:08:cd:4c:ef:b1:c5:ec:71:30:d8:96:6e:c8:a8:2f:9b:
18:40:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client