Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: j9mUJmsd7cJaU4FN94mzlpNCUwstlA4mJN86l/eGwNc=
Subject key identifier: B6:46:B1:54:05:91:F0:4E:14:36:5B:57:A5:C6:89:27:55:34:50:78
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 0195E0B4BD7C3A028F607CF758562C052B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 07:01:36 +0000
Manifest this update: Sat 29 Mar 2025 07:01:36 +0000
Manifest next update: Sun 30 Mar 2025 07:01:36 +0000
Files and hashes: 1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=)
2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: RZ/gg14KnBY3dhG2HqyuNxNsTGnBcjzEYFs9jCRcl5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:bd:7c:3a:02:8f:60:7c:f7:58:56:2c:05:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Mar 29 07:01:36 2025 GMT
Not After : Mar 30 07:01:36 2025 GMT
Subject: CN=b646b1540591f04e14365b57a5c6892755345078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:c6:76:0d:af:92:89:0f:1c:20:53:5d:27:
42:c6:54:2f:65:91:13:15:d0:71:05:51:15:d1:97:
7f:97:11:27:44:95:65:7e:8a:2d:84:f4:06:6c:4e:
9a:97:25:0a:9e:17:a7:d6:cb:33:70:f9:27:6e:10:
b4:e3:14:2b:c1:b5:e9:2e:7a:c2:1b:fc:26:33:f9:
6a:18:37:b3:45:3f:96:d6:d8:e3:19:d0:cf:52:19:
fe:ee:59:3e:75:df:4a:64:20:ce:ea:c0:ee:c5:23:
96:e9:fc:7f:28:c3:0a:48:81:57:fa:86:eb:58:bd:
50:d8:87:c4:3c:c3:3a:d5:7c:08:a8:20:82:f5:c5:
a6:54:1b:ac:da:b5:35:ee:e3:76:18:1f:77:3f:d0:
e2:e3:db:6d:25:20:98:af:dd:29:17:06:9e:2d:f1:
96:ff:ef:5a:e0:cc:da:7c:89:9a:32:cd:42:2a:b4:
bc:5f:db:e5:04:64:47:36:6f:96:13:92:01:64:b0:
b7:55:75:2e:e5:23:e1:07:fe:f5:bc:13:61:a3:42:
db:18:7a:f3:6b:b2:45:bc:db:ef:ac:68:3b:bc:34:
dc:52:48:ba:82:f7:02:c2:b3:e3:2f:7c:46:cc:0f:
99:82:80:e3:e7:da:8e:5e:37:2d:17:ed:1b:f7:09:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:B1:54:05:91:F0:4E:14:36:5B:57:A5:C6:89:27:55:34:50:78
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:2e:fe:1f:07:a1:f7:72:82:ed:76:ef:7e:14:3e:5f:0e:
4d:d0:4a:bd:4b:6c:2d:79:b9:d0:08:86:eb:16:a6:be:39:cc:
81:24:8b:ac:54:02:e5:67:09:12:d4:04:e8:83:a6:ac:c9:ef:
32:ad:a9:2a:02:86:3d:9f:e9:97:93:b0:6a:17:25:9d:c6:ed:
11:d3:64:3d:97:64:53:a4:0d:dc:62:c3:fc:00:e4:c0:69:41:
1c:c8:83:df:a5:27:89:c3:3f:db:ec:5a:4b:2f:67:27:c3:58:
dc:55:13:77:0f:59:52:5b:3c:f4:ff:89:44:32:76:10:0e:06:
25:93:a9:29:ee:10:b1:3e:9c:93:5b:6b:92:4c:a4:7f:f2:49:
a6:f7:e5:5c:ba:72:96:a6:10:84:ed:25:13:1c:36:5c:c2:74:
4b:5d:9c:72:f4:17:f7:08:5e:dc:fe:9e:bd:dc:57:19:e3:1c:
7c:55:bc:36:88:1b:a4:c4:28:f8:df:ad:54:2a:a4:f3:8b:b2:
98:76:cc:50:f8:e2:0d:c5:1e:b8:36:12:89:7a:46:26:3e:05:
56:fa:10:50:a0:07:5e:24:22:9f:79:06:2f:be:25:99:92:51:
a5:2b:95:57:c4:75:5c:6e:7e:a8:7c:c7:26:fb:de:74:1f:b4:
a4:49:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:26 2025 by rpki-client