Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: 7QDho7iFqqtiyX5YwEEalFDkWQwo5HP4rVmjONcbwXw=
Subject key identifier: FD:2A:20:BA:18:2D:86:57:78:D4:F5:92:99:7B:E0:18:F5:16:15:43
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 0194BBCED7EB7117169E9AD5A324FA19753B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: NyLyq2UP4Zfke4dFx6W9tEUllgwFSzRc7VtbRGWLSiM=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d7:eb:71:17:16:9e:9a:d5:a3:24:fa:19:75:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=fd2a20ba182d865778d4f592997be018f5161543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:11:62:f9:c9:52:03:6b:b6:80:3e:2d:1d:
2a:0d:96:8f:26:e3:54:04:d5:6b:aa:ae:ae:fb:15:
03:92:b0:6a:b4:62:bb:0e:fd:fe:f7:a2:37:74:41:
2a:27:60:5e:c9:2a:44:1e:02:9f:40:49:fa:3c:3f:
36:06:d3:15:ef:b5:2e:0f:0b:d7:45:32:9a:76:e2:
c0:0c:e1:5b:75:40:46:a8:ac:d5:cd:65:fa:b3:75:
5d:ea:24:d4:02:52:71:a1:b2:ce:a7:19:2c:b2:7c:
a0:28:29:c1:92:5d:86:4d:c4:fc:e7:94:f4:82:46:
57:4c:79:01:3b:4c:cf:28:06:78:db:fc:4a:47:d7:
b6:c1:35:94:74:9a:ca:3c:22:ee:2f:3e:59:3e:16:
d6:27:ac:d6:c7:42:59:86:f0:b3:6b:51:ff:31:01:
de:9d:85:3c:4c:99:0b:a2:26:cb:26:5b:aa:ea:5d:
ca:13:4b:ff:b6:71:8a:4e:9b:df:2a:46:9c:e0:98:
d8:72:91:ed:98:58:21:a3:76:d7:c4:01:45:49:28:
9d:a7:3d:e2:2c:c9:e2:9c:d8:71:9c:ed:65:22:fa:
6b:61:ed:4d:ad:f7:10:67:b8:08:6d:53:a4:53:43:
d5:5c:5f:4d:3a:99:33:6a:85:21:76:cc:f1:36:f0:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2A:20:BA:18:2D:86:57:78:D4:F5:92:99:7B:E0:18:F5:16:15:43
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c2:62:5a:c8:47:b1:9b:fd:2f:1a:34:3a:be:6b:47:ee:c0:
15:fd:ef:9c:f1:48:2b:06:bf:98:1a:22:b8:af:f9:b5:54:38:
c8:ae:c5:8e:36:ce:db:f0:34:bb:2b:b4:39:f7:82:41:36:71:
ba:af:08:e5:d3:fe:be:1b:14:b0:a9:5d:00:8d:0e:4d:21:4e:
d5:8e:57:b6:dd:d3:d7:63:60:d5:bb:de:1f:60:fc:c0:c8:6f:
d7:c5:ee:61:18:a9:3f:32:24:5c:c6:a1:a7:64:85:84:f1:06:
d8:5c:36:dd:09:ca:92:0b:c9:a0:59:e1:47:9c:01:50:ef:58:
8a:b5:5f:21:fe:21:36:59:00:64:9c:e9:ec:74:43:36:e9:c1:
b8:97:46:95:8b:68:7a:4f:c6:19:fb:dc:31:2d:8e:24:f9:fa:
ff:95:e8:57:de:7e:ce:cf:b6:cd:47:3e:fd:93:85:d5:63:a3:
ce:0a:8e:04:32:f6:82:eb:dd:97:bf:67:d6:46:87:6e:4e:09:
24:92:7d:a5:77:58:9d:89:f9:27:97:80:85:df:9e:86:d3:0f:
01:e7:12:ef:27:f0:7c:77:bb:d8:a7:9e:f9:19:12:5c:a8:26:
bf:7e:c4:74:17:35:4b:2a:8e:b8:03:d3:e5:00:9b:09:a7:3c:
99:80:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:23 2025 by rpki-client