Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: P+6zkdxiqIZADulNu6X/qp1fByNx0BnSzQpJcmRLZoM=
Subject key identifier: 5F:2C:CE:B2:59:18:8F:C5:B9:5E:75:DF:8A:21:20:46:3C:6B:FF:A7
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 0194BBCEF058165F3B8AA97ACA4ACC71083E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 01FE
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: 7n9MRCuFVTQkbYNN6uHcT9jBJRIvP+maQQgj29ofQuk=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:58:16:5f:3b:8a:a9:7a:ca:4a:cc:71:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=5f2cceb259188fc5b95e75df8a2120463c6bffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:85:02:03:83:3d:d7:ca:79:29:af:1e:c4:
c0:48:18:80:74:8e:1f:35:12:f6:74:ec:de:52:00:
de:89:fe:28:ff:3b:27:d8:4e:3e:91:3b:c0:76:68:
2d:89:b1:43:62:7e:ff:6c:4b:7a:2a:67:87:e9:03:
22:fe:ac:f5:d0:94:f9:6a:48:9d:11:26:3b:b1:76:
c5:76:dd:08:90:18:9f:62:af:13:71:d1:c8:dd:25:
c0:1a:1b:91:02:44:11:66:cd:fe:33:fc:46:be:cf:
ef:1b:78:86:82:86:03:1d:e7:64:3c:87:f1:7a:f0:
c6:de:0c:cb:dc:c7:e8:cd:02:76:89:2f:61:6c:3a:
d5:a5:d1:e5:a8:2c:c7:d5:59:76:74:f5:ef:41:ff:
49:e2:97:00:b9:97:65:ff:80:a3:3a:79:a4:4c:74:
c2:2f:b4:1b:48:69:e1:26:6a:a6:77:5d:a7:7d:81:
31:18:5c:3e:9c:d6:2b:7a:2c:2d:14:11:e4:f4:9f:
f7:88:d2:fe:80:18:29:06:38:4a:5d:75:4a:45:1c:
b4:20:8c:59:8e:b2:a5:3d:e1:5a:de:04:ef:3e:eb:
6c:83:60:cf:0f:91:f3:44:12:a1:67:6e:ae:56:d4:
e7:a8:44:9c:c0:71:b4:a4:4f:26:2f:eb:e7:b7:b7:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:CE:B2:59:18:8F:C5:B9:5E:75:DF:8A:21:20:46:3C:6B:FF:A7
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2c:e3:09:f5:ea:06:59:5a:7e:01:80:a0:25:b7:7d:08:9a:
91:22:3d:6e:ed:f0:3f:29:11:56:53:5d:fb:1a:05:10:ad:8c:
bf:2d:00:0e:63:97:42:f5:bc:a7:f2:5c:62:4d:e9:8b:88:0c:
ee:16:8c:cf:47:60:4a:5b:34:20:4e:fd:ba:b1:9c:2e:99:b8:
82:51:bf:a6:c1:3d:d0:08:ad:34:14:3e:94:54:78:6c:14:9d:
35:55:89:88:77:ea:02:30:26:07:63:31:cb:f3:84:aa:e6:5c:
01:bf:80:ea:db:1b:8b:af:f0:cd:52:c2:21:ec:9b:dd:e0:54:
23:71:ec:2e:14:cc:11:8f:82:a3:e1:24:6a:ff:f7:b9:c5:9b:
29:4d:66:12:86:ee:bf:17:b7:cc:ff:e7:eb:a5:5d:c6:b9:a3:
22:91:36:30:e6:2e:ce:26:1b:12:0e:2c:ad:85:e1:b1:f9:5a:
94:82:fe:2d:49:61:f8:ee:fe:91:f2:08:cf:27:47:d6:96:9f:
88:4b:ae:fa:9f:a9:66:73:0f:fe:57:da:e3:dd:11:34:66:04:
61:d5:53:5f:47:6b:f1:19:f0:05:c1:e2:e0:38:5a:0f:93:e1:
d1:a7:6e:39:22:37:eb:c1:31:2e:50:50:90:31:90:f1:96:24:
49:16:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client