Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: hBULDIgV3uz3VlBOPW0CcON/2li2SDtv0VeQ8q4q8cc=
Subject key identifier: 51:35:81:4E:AB:6E:5F:96:01:9A:AF:D9:6D:C7:5B:3A:FA:B4:DF:C1
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 0194BC04C937F443EF7CF62371670E60433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: bdbuijXWGUpNpx1lF2GNWNSkNzt2WqdQq+nxzpEQydI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:37:f4:43:ef:7c:f6:23:71:67:0e:60:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=5135814eab6e5f96019aafd96dc75b3afab4dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:fc:9f:e1:45:52:87:66:36:04:fe:be:21:
de:b6:27:1b:0d:e1:6f:31:1f:26:c8:ec:a7:a6:e8:
e9:58:fa:4b:94:43:4a:67:29:24:33:84:5b:14:f9:
0f:f0:c6:a0:7d:37:82:aa:dd:0a:9a:37:ac:c4:73:
18:8c:7b:f1:c0:a7:52:6f:ab:68:54:a1:e5:32:e2:
15:af:f2:02:26:df:31:78:57:40:a2:ca:f5:17:50:
c5:7f:c7:b7:e9:54:24:14:9c:17:0d:6e:6f:fc:11:
d7:a6:fd:94:81:a6:a6:7a:a5:7f:e4:a1:bf:2a:a5:
56:c3:bf:25:73:20:b5:e5:aa:ed:e3:45:cd:05:85:
72:e4:75:53:6a:d0:cd:c6:68:1c:8a:40:fa:98:b8:
72:e7:b8:04:13:68:80:aa:13:cb:65:ca:e4:b8:c7:
81:7b:48:8e:f9:72:cd:78:ed:13:7a:0d:42:c1:c2:
71:91:18:49:0b:c2:e6:03:e5:15:d2:b9:d5:2f:44:
eb:32:21:3e:0c:a6:28:33:16:a1:62:d9:59:c0:c0:
7c:9b:fd:21:11:3c:69:31:72:b6:25:8a:40:00:b2:
51:6a:59:38:04:d6:db:6c:0d:41:e5:e7:2c:9e:8a:
cc:8a:7e:30:52:fc:36:c2:93:99:a9:59:e9:af:2b:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:81:4E:AB:6E:5F:96:01:9A:AF:D9:6D:C7:5B:3A:FA:B4:DF:C1
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:eb:ae:42:bf:c4:a5:40:62:69:89:37:c2:cd:cb:4f:6b:
46:cf:7a:b1:83:da:a9:21:f2:f7:f7:52:b1:af:4a:66:4b:14:
1d:4d:f3:99:a2:ea:f8:95:da:9f:8e:47:21:66:10:d6:00:c6:
96:00:05:d6:ba:7f:6c:e1:1d:39:a3:90:2d:fc:a6:4a:d6:8e:
b4:f8:a0:82:28:df:18:0f:31:ec:6d:60:1b:87:3b:95:d9:9e:
e1:77:69:fc:02:f3:9a:fc:00:9e:e8:d7:9d:36:f5:6f:9c:a2:
08:26:1b:48:61:3a:9b:2a:86:f0:50:80:58:a4:ad:e0:ef:89:
c9:8c:7d:00:82:3c:40:be:4c:97:f7:34:91:c4:4e:18:c9:00:
93:45:d4:21:37:3d:cd:bf:b7:af:4d:25:d1:38:71:4b:8e:ca:
65:57:b5:3f:a9:11:39:ff:bd:31:82:85:1f:3c:b4:d4:f3:3e:
7c:e4:de:6e:fd:cf:e3:cf:22:02:66:d0:99:30:8f:06:70:3c:
79:f3:11:18:e3:c7:d8:3e:6e:21:38:b3:07:f8:79:cb:37:e7:
8a:79:a0:d4:e3:7c:9e:27:5e:16:6d:5c:8f:04:5c:7a:e0:b8:
5d:31:43:22:91:96:39:d7:26:5c:7a:db:18:81:e4:03:8f:07:
82:e2:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:02 2025 by rpki-client