Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: DxE169Z5iu5DjblomfkA2C+ezogbIXagOpdJf5E2/0k=
Subject key identifier: 2C:2B:6E:B1:B1:70:BD:44:D2:F6:05:80:13:D6:AB:DF:F0:78:E2:DD
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0194BCA9D32301572B54CBDFB6083CD61015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 41
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 8XhThhOcX1CKXJ7ybF+s7MVSIpoh/vB1HcxA/PJcf1E=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:23:01:57:2b:54:cb:df:b6:08:3c:d6:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=2c2b6eb1b170bd44d2f6058013d6abdff078e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:34:40:76:f2:37:c9:bf:10:1c:1d:f7:c2:
5b:7d:16:15:44:78:b2:3d:80:6b:24:94:d9:8e:e0:
96:52:c3:72:b1:21:bd:07:34:64:da:78:ca:dc:30:
61:49:0a:78:e6:b4:77:fe:54:64:0e:55:a0:e5:32:
a8:d4:36:01:2c:6d:9c:9c:dd:ed:13:f8:9e:40:e4:
36:ba:0d:d5:9a:5c:61:a8:e8:a0:6d:ef:9f:e8:e3:
70:39:17:52:64:c5:47:2e:ba:60:45:1a:ad:64:6b:
2c:2b:10:4d:f3:de:d1:bf:dd:69:dc:96:8e:37:a8:
56:d0:02:aa:92:a5:12:e1:d7:38:08:ff:fd:7c:dd:
f3:26:aa:08:b7:bb:f1:32:12:2d:90:a0:b6:69:fa:
89:98:b2:f7:69:d8:68:c0:4d:33:28:4c:ff:86:34:
f2:1a:0f:3c:8f:bb:22:5d:de:d6:e0:a4:f9:12:f4:
ae:f7:e7:15:fb:63:7f:cc:44:87:99:db:a7:b6:cc:
82:d7:36:54:ec:01:b1:ff:1d:9b:25:8e:82:c9:7e:
93:8c:00:c9:fa:03:d8:fe:df:ee:8a:28:0f:b5:38:
01:3c:57:dd:e9:72:88:89:97:bf:c6:1d:86:c9:ec:
7c:e4:61:16:7d:06:ba:63:27:33:c8:d2:53:2a:cc:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:6E:B1:B1:70:BD:44:D2:F6:05:80:13:D6:AB:DF:F0:78:E2:DD
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:5d:c0:4a:f9:08:98:04:e1:4d:1d:67:2c:3a:36:db:c6:
91:7e:3c:7b:1c:2c:c0:00:87:4a:60:58:e8:b4:0c:f8:72:ef:
c6:34:c2:92:76:57:9c:01:20:9f:d4:14:fa:83:e8:69:1c:59:
e2:50:98:9c:bd:61:cb:61:ca:71:60:6c:4e:70:1d:20:ff:96:
cb:9b:24:9f:68:d5:22:b8:3a:19:19:78:0a:bd:6f:9e:7b:05:
f9:a3:6a:29:dc:6b:1a:a4:c7:25:49:3d:e9:4b:47:b1:8d:19:
9e:86:45:c3:e2:21:d5:d1:73:48:fe:89:74:42:c4:fa:bb:31:
50:3c:52:ab:9d:cd:5e:a7:51:0c:52:94:69:8e:d3:37:72:b3:
e3:51:08:aa:da:c7:dd:73:d5:91:35:61:2d:97:71:9c:84:0d:
1c:19:ab:39:9e:01:d5:5a:cf:a0:82:36:8c:8d:74:97:7d:7b:
49:31:d6:03:bb:3f:6f:07:04:e3:c3:26:21:c7:a5:43:d7:46:
32:d2:59:31:23:71:ba:38:8d:c8:0c:c3:16:00:43:3c:c0:32:
79:85:56:51:95:eb:8e:e4:52:7a:20:96:ec:66:40:7a:74:31:
ce:6c:ac:60:06:59:44:7d:47:48:ca:b6:7a:43:7f:d0:36:58:
c6:1a:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client