Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: HGcIa/McYrqeBeVqQjzLn4mwo1W87aTh9e9YXryXM50=
Subject key identifier: E4:F7:9D:B3:2D:90:24:A7:3A:FE:A5:CC:6D:C1:6F:9E:D0:0A:FE:EB
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 0194BC3C0CD4383F94EBC18AE4422E88D586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: fuf4MkDIpW8zfHQ6pzicy+9kyEBRsdWwY+YQUO5px9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0c:d4:38:3f:94:eb:c1:8a:e4:42:2e:88:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=e4f79db32d9024a73afea5cc6dc16f9ed00afeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:5a:61:24:4a:17:71:29:68:ec:cc:b5:04:
4b:a5:97:21:dc:41:3c:09:0b:bf:30:89:56:cb:2f:
43:ab:f5:04:a6:9b:2e:b9:8e:44:11:98:f5:13:ad:
a1:7d:c1:ce:23:40:8e:89:03:21:30:2c:df:3f:4a:
83:80:86:94:ca:03:68:77:b7:ff:04:e0:8d:4f:78:
15:4e:c2:a0:dc:91:68:03:d5:7d:e5:b6:a7:1a:81:
eb:15:6b:3d:58:3c:24:ab:23:3f:65:99:ee:b0:01:
09:4d:39:02:9d:05:2d:f3:25:6f:76:64:c7:03:17:
2a:f7:34:33:45:23:39:18:90:27:2a:86:92:b1:19:
34:03:12:8e:1f:93:97:20:6c:1f:7c:9e:a2:1a:fc:
1e:9a:1e:12:25:fc:0d:90:4a:a5:75:16:8c:80:95:
14:61:8b:db:37:36:92:8f:77:13:f4:4e:bd:9c:f5:
58:08:1c:1b:06:0b:d8:8d:b0:d1:ca:30:55:ef:85:
d1:63:a9:73:ef:96:69:6f:0b:46:f3:30:e3:37:2e:
88:f2:65:c8:ea:bb:75:f1:e4:de:5a:aa:6f:c6:d1:
cb:9a:41:e5:6d:bc:f2:77:a8:74:34:ab:04:50:c7:
58:1a:bd:df:09:94:43:6c:2f:bb:1a:9c:8b:e3:63:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:9D:B3:2D:90:24:A7:3A:FE:A5:CC:6D:C1:6F:9E:D0:0A:FE:EB
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:66:12:8d:05:fa:00:19:b8:a7:f9:9c:87:c0:46:ac:08:7f:
24:b3:b3:6d:5a:b0:e0:d0:49:6b:d6:ea:50:75:da:a7:3b:50:
61:54:fd:f3:f3:1e:8a:b6:75:b5:71:a2:85:80:1e:18:18:c6:
6d:3c:e5:ea:0c:e0:ab:18:89:57:10:2b:32:3f:6b:32:73:13:
0a:2b:fc:c8:f4:cd:ec:39:43:ee:f4:95:4e:2e:63:74:55:df:
14:3c:fe:99:fa:61:21:1b:35:ff:52:01:d9:d3:ad:a8:3f:52:
02:0e:ee:ba:c2:cc:77:33:d4:3f:23:5a:c5:ba:f0:07:21:a9:
19:38:99:a7:49:22:f0:7f:15:1b:c6:84:02:7d:5d:13:ce:7d:
3a:35:cb:61:cb:62:f8:92:d2:35:f8:ed:ac:5a:51:34:37:53:
29:f3:88:f7:e6:eb:1c:06:2e:43:a4:1d:a4:58:69:bb:82:61:
82:8a:17:f7:a0:12:11:3d:17:b8:70:d0:c8:5c:a5:c8:70:6b:
82:41:d4:72:3a:a5:7e:18:2e:1c:3e:05:dd:d3:2c:2a:a3:1b:
6b:ec:7c:e0:94:25:7a:81:c6:ff:38:48:af:52:ec:05:37:b3:
e8:cf:89:b5:30:36:86:7d:35:91:4d:e2:1f:37:12:e9:41:a1:
a9:00:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:04 2025 by rpki-client