Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: Y3PjyQDyKNZG9Tt+31HrMNqpkBW/Bb2TsMsZQwZn79Q=
Subject key identifier: 5C:94:99:5C:28:42:6F:72:60:6C:E3:B4:44:8A:F5:BA:A2:B5:CD:E0
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0195E1908F61ACCD76BF203F0440017B400C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 0F27
Signing time: Sat 29 Mar 2025 11:01:42 +0000
Manifest this update: Sat 29 Mar 2025 11:01:42 +0000
Manifest next update: Sun 30 Mar 2025 11:01:42 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: Rljf1Ok3uKXUloIoLa2rDzGPWgjud19pGtCsmMPgvUo=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:8f:61:ac:cd:76:bf:20:3f:04:40:01:7b:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Mar 29 11:01:42 2025 GMT
Not After : Mar 30 11:01:42 2025 GMT
Subject: CN=5c94995c28426f72606ce3b4448af5baa2b5cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:78:b2:e0:74:4e:82:a5:49:b6:5e:27:da:
47:ae:ef:08:c7:81:bb:72:f0:65:66:50:19:1b:62:
28:81:54:a3:fc:6c:6c:b5:d6:fe:e3:ac:7a:03:48:
ab:37:f4:58:df:0d:28:69:d7:97:38:ca:07:ab:03:
e1:26:c6:70:c7:82:aa:a4:5e:02:6a:92:61:2c:c4:
d6:60:92:70:aa:73:b7:fd:53:b2:3c:92:a9:89:0e:
6b:18:99:65:58:dd:21:67:ac:a8:d9:32:6e:26:3d:
f1:4d:96:2e:8a:13:00:fa:3e:5c:8a:4e:ad:78:5d:
41:db:bf:7a:9d:59:38:26:e8:93:42:24:5a:34:2c:
f2:f3:1c:e7:4d:52:bc:59:79:a8:b8:9d:a5:9f:c4:
3f:43:4e:99:2c:13:80:d8:08:b9:13:7d:7d:a5:69:
c8:83:41:f6:d6:2b:87:ed:e2:0b:ed:6f:29:2d:b4:
2d:33:bd:4c:a5:dd:bc:5d:e8:ed:38:4d:00:b1:67:
f9:90:cf:c8:01:27:0c:b1:bd:06:62:e6:3f:89:ed:
0a:00:d9:af:22:20:63:8e:d4:d6:98:ed:dc:10:c6:
90:34:69:5f:53:55:8d:9d:df:16:fb:90:7a:3f:d0:
a5:bd:ac:47:0e:cf:8f:1d:db:e1:27:77:72:fe:56:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:99:5C:28:42:6F:72:60:6C:E3:B4:44:8A:F5:BA:A2:B5:CD:E0
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:78:a8:8a:48:1a:b6:d3:c0:60:06:a1:e9:09:31:88:3b:
1c:8d:72:87:27:cf:8e:51:63:d4:52:c6:e3:63:4c:77:7c:63:
9f:ca:78:6b:fe:53:bd:79:99:28:bd:b2:dc:ed:b3:5b:25:06:
e4:2b:d9:c5:a6:1f:25:9c:89:c2:c8:ce:5d:d9:18:18:30:2b:
27:a4:89:cc:03:50:01:53:31:4c:43:f8:a4:25:78:ce:97:8b:
2a:a8:03:cb:47:42:d6:6f:cf:af:f2:14:c9:88:6b:67:c9:04:
1f:6e:86:47:cd:f0:ae:e0:e5:da:89:6b:77:a7:06:2b:2d:d4:
a5:b1:c5:c0:76:f3:50:b6:3f:a5:ed:18:27:5e:92:89:de:b5:
83:9f:60:99:ac:02:21:d2:39:2a:f0:b8:7f:93:3f:72:37:e9:
08:76:21:c6:89:01:b8:91:55:ee:0b:3a:bc:38:44:20:eb:56:
e5:9c:63:3e:a3:66:f8:cf:3e:6c:41:69:f4:4f:1f:33:7d:37:
81:06:5e:fa:3b:9e:2f:d4:4e:a3:95:a3:0a:43:1b:6c:ae:0f:
ae:8a:5f:a3:65:ad:51:02:e8:1d:cf:7a:68:7a:bb:6f:f5:6c:
c2:48:a8:1d:3f:7c:0d:01:82:14:ea:2d:c9:77:8a:41:78:bd:
24:3e:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:03 2025 by rpki-client