Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier: PCIzeOY3kp/RO0Y0h6FYzs5pToOJayOuCkLiwTWDZa0=
Subject key identifier: 26:4D:0A:7A:23:21:F7:B1:63:25:40:51:FE:07:B8:8C:DA:05:83:A3
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 0194BD4E550FDE436FB9B89B6550F2AC6AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number: 1242
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: IabZlGGaHqWcSsAKSG+1vBgjGj8uET5v7h+t/p47B7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:55:0f:de:43:6f:b9:b8:9b:65:50:f2:ac:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=264d0a7a2321f7b163254051fe07b88cda0583a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:86:a4:b7:c6:f7:f3:7f:ef:27:b1:e2:6d:
9b:33:73:fe:11:20:9f:83:19:b6:e7:a7:40:44:90:
7d:58:cc:23:60:2d:55:11:90:32:9b:58:25:bf:5a:
f8:d3:13:27:17:70:37:d0:89:7a:a6:b7:ea:28:af:
18:23:23:e4:83:c6:46:6e:1f:72:e3:b3:37:19:b6:
9f:6b:09:95:50:f0:6f:55:8a:a3:28:48:e0:0f:d2:
af:cb:b8:ae:a4:8d:30:b1:e1:d2:73:06:e3:26:e3:
29:4a:10:f1:5d:4d:4b:60:c5:85:f7:96:8d:36:8c:
54:79:79:8b:7d:0a:41:07:93:8e:b9:55:af:fe:b4:
ce:80:40:9a:a7:1b:bf:20:fe:91:52:c2:e7:80:3e:
3f:73:d7:03:6f:6c:50:13:87:f6:b1:7a:8a:16:d2:
15:c8:b4:08:74:21:17:7c:8b:09:cd:ee:30:74:c9:
21:94:cb:92:de:a6:a5:ec:3e:a1:79:d2:a2:f0:af:
55:26:98:b3:ec:fd:ed:85:cd:85:c4:28:86:73:31:
d9:79:2c:e1:0a:c4:2e:03:77:a8:52:97:da:28:95:
33:a1:cd:2f:b2:f6:42:fb:d6:1a:7e:99:c4:c1:99:
10:3e:ae:34:57:86:51:52:93:7f:69:73:27:ae:17:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:0A:7A:23:21:F7:B1:63:25:40:51:FE:07:B8:8C:DA:05:83:A3
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6b:ce:3f:a4:b0:56:f9:8b:d1:cd:7f:21:56:d0:0a:6a:04:
03:61:ac:36:b7:ac:2e:9e:7e:68:f4:c3:6e:26:57:cc:ad:1e:
b4:b8:34:fb:67:50:e3:ff:08:9d:7d:f8:ab:09:26:49:77:16:
70:ec:99:e5:1c:c3:30:0d:34:e4:00:c5:42:6f:04:05:e2:96:
e5:2d:63:17:23:79:52:48:47:27:99:c5:55:a2:47:db:7f:9f:
61:55:90:b9:e5:dc:ae:2f:c2:cc:b8:8f:3f:7a:74:cd:a6:f0:
8d:f3:e4:53:9c:47:15:85:2a:ba:14:12:d7:6a:74:26:c9:fd:
a5:a8:19:ff:13:68:a8:a2:9a:c8:9f:be:63:dd:81:2e:8f:3e:
f9:1f:1c:01:e8:e9:07:62:a9:82:b4:70:2f:b8:22:8a:26:30:
b0:25:36:54:25:bb:2c:78:3d:9f:37:23:5c:7f:be:10:85:f2:
f8:07:d9:17:dc:ed:16:87:8d:f8:98:37:49:e9:03:43:c0:7f:
a7:5a:5b:10:43:69:0e:32:90:01:3e:e7:0b:0f:7a:d2:17:0f:
e6:52:60:9b:6b:af:f0:8d:f6:da:d2:7c:4c:0b:6e:f2:fb:ea:
b5:f4:1b:2c:ee:6a:88:b3:e3:7d:ec:cd:6c:53:38:6b:00:d8:
a4:0f:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:42 2025 by rpki-client