Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: 7IsWdU5X4GlmHX9NhMcVQyTrE/ReZyRkinnT1RVuLgo=
Subject key identifier: 1E:F7:09:08:B4:9A:50:5B:96:04:8C:B7:54:9F:E6:CD:F2:EE:37:A2
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 0194BC3BF7F39D734FC74F216FFDA0992F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: 9i5SHxcNK0oQqs0SA41ELn2w7ZUzXFE/YcK8jfcin34=)
2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:f3:9d:73:4f:c7:4f:21:6f:fd:a0:99:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=1ef70908b49a505b96048cb7549fe6cdf2ee37a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:51:8b:31:44:31:4d:5a:2b:34:db:67:f4:
a4:8e:69:4c:2f:59:81:95:6c:39:d7:96:ec:d2:f8:
ff:bc:71:c1:d5:77:08:9a:70:72:83:0d:9a:c7:20:
eb:4c:a1:19:76:b2:e5:21:2b:77:77:c3:8d:c3:7f:
38:6e:82:23:29:ad:12:ca:74:55:d2:d3:cb:79:f1:
64:68:81:34:59:d5:3c:a3:66:5c:64:a1:36:c7:41:
6c:45:e9:85:6b:6d:6e:bc:0d:2b:cd:fc:cb:c2:b6:
a3:77:e2:89:92:5d:c8:b9:dd:70:77:21:d1:22:1c:
83:16:64:c2:c7:12:31:da:4e:7a:29:48:22:82:27:
c4:c8:20:68:cf:54:e2:7c:89:49:9a:82:c6:37:76:
a8:b6:25:ea:54:ef:d0:6a:e4:14:25:8a:c9:1c:f7:
89:95:86:23:a5:e0:b6:b4:63:b2:e6:f8:1a:e7:b1:
eb:7f:55:61:10:2a:f3:cf:78:c2:89:2b:1c:49:83:
f8:c7:26:4f:79:74:5c:57:10:1f:8a:11:65:96:8b:
8c:1e:9d:e9:c3:53:b5:6a:bb:88:59:af:03:84:65:
55:12:ae:cc:55:5d:cd:f7:52:9e:d3:62:2e:17:44:
6a:77:8b:fd:4d:32:6e:2a:c1:04:38:fc:96:45:76:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:09:08:B4:9A:50:5B:96:04:8C:B7:54:9F:E6:CD:F2:EE:37:A2
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:ae:53:86:3b:1d:d6:82:7d:57:88:eb:5e:d8:d8:20:22:
a9:73:3d:a7:f2:2a:03:47:b9:bd:12:df:47:df:b2:16:6e:33:
a2:9a:c3:d7:36:e9:a9:0e:c7:de:9c:7d:c9:35:cc:80:8b:98:
be:41:28:2a:d1:58:ff:b5:53:aa:f6:65:8c:2c:97:73:d8:49:
23:fc:14:84:b4:81:f1:04:46:46:ca:2a:cc:3d:b4:ce:9b:20:
04:c0:fd:d2:b6:df:c4:53:44:79:cc:59:6d:6b:6f:5f:ce:06:
9e:34:eb:7d:01:25:d3:e0:55:9d:9d:5c:c5:df:4d:3f:89:dd:
cc:38:24:88:6d:df:c2:c2:8a:01:e9:c8:70:e2:7d:48:24:f3:
19:31:9d:d5:99:71:f2:28:99:01:af:37:c0:cf:ed:3f:c3:5b:
6f:2d:7a:0a:06:c6:7c:e4:f1:37:cf:89:8a:d1:78:43:34:59:
af:d2:0d:41:1e:71:03:d2:2b:0e:3a:69:4a:c9:de:d2:20:93:
cc:a7:1f:6b:a3:99:27:2e:8f:2d:cb:ce:92:f7:70:1f:55:86:
07:18:ab:7d:5f:25:8e:72:ec:68:50:e0:7f:a4:ff:14:c2:bc:
b0:10:0b:d9:ae:59:5b:a1:2d:d6:0a:de:78:fc:43:15:95:3a:
39:da:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:31 2025 by rpki-client