Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.mft
File: JWS-gey8FNh0AnvyO53sP38ggOs.mft (raw, json)
Hash identifier: tDFZptKj/xauAD0uGAF0opP6a5KlzEmakehwuE+U7Uc=
Subject key identifier: 35:C8:62:CD:51:3E:58:B8:12:CA:5A:E8:97:10:EE:42:97:6F:76:0B
Authority key identifier: 25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
Certificate issuer: /CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Certificate serial: 01882D6B1CAE4959A04D5646AB559CE49604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.mft
Manifest number: CD
Signing time: Thu 18 May 2023 05:52:54 +0000
Manifest this update: Thu 18 May 2023 05:52:54 +0000
Manifest next update: Fri 19 May 2023 05:52:54 +0000
Files and hashes: 1: JWS-gey8FNh0AnvyO53sP38ggOs.crl (hash: rcSvzEQBZsuai4bbKPj9vLKo0wpi3xE1zUnWg8I6YW8=)
2: e30RmJq-5yCHHNM35T9oggWppcQ.roa (hash: wnj9KkvdyLLfAPIL0LW1fB7wrWjdgjwrPyBl4Q/xV5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:6b:1c:ae:49:59:a0:4d:56:46:ab:55:9c:e4:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Validity
Not Before: May 18 05:52:54 2023 GMT
Not After : May 19 05:52:54 2023 GMT
Subject: CN=35c862cd513e58b812ca5ae89710ee42976f760b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:dc:2a:22:0c:cb:7d:af:b0:cb:c1:fa:75:
47:2f:09:a1:39:ab:b5:44:f4:51:57:ae:42:83:da:
38:da:8b:72:02:68:71:d7:c2:19:0d:ba:81:9f:6d:
ca:6c:49:fc:21:c3:3d:2c:ac:c5:f1:10:a6:87:38:
bb:69:b2:32:58:14:cb:31:fc:5d:7b:a1:d6:a6:81:
2a:cb:ca:f9:ef:db:a3:cf:6a:27:58:e2:60:27:15:
dd:3c:6c:c7:91:45:27:2b:b5:27:4e:17:ac:86:72:
23:a5:24:03:41:9f:99:28:82:90:5d:d6:2a:29:12:
96:88:ee:72:11:f6:8f:a5:dd:1b:1f:7c:5e:d5:13:
6b:1a:41:e1:cb:02:84:4a:28:d3:a5:75:a6:19:be:
e4:c9:3e:9e:3e:9a:93:ca:ab:5d:42:8d:f5:64:44:
08:a5:3d:15:e9:d6:ef:91:18:8f:70:69:b9:43:88:
83:41:5b:e5:11:79:21:bd:86:89:f8:f3:21:5a:0d:
58:ca:cc:98:a7:4b:13:f7:b2:eb:f2:0e:50:d6:d7:
1b:59:8a:55:9a:c2:4d:96:41:b2:6f:8a:d7:09:95:
f9:f6:d9:b5:3d:2e:4f:ff:ad:63:f5:9d:5b:54:04:
2b:93:c4:81:86:55:1e:98:fe:f0:6c:26:4a:22:05:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:62:CD:51:3E:58:B8:12:CA:5A:E8:97:10:EE:42:97:6F:76:0B
X509v3 Authority Key Identifier:
keyid:25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:10:89:48:f6:d8:43:e7:26:89:8f:89:43:7c:08:c4:13:
df:e3:d9:0a:a8:65:b1:65:8e:41:af:9e:37:35:66:3f:86:2a:
a9:cf:31:09:e9:2d:f1:66:8e:b9:29:51:c1:48:58:ad:07:42:
f8:5d:d7:8f:aa:d3:b2:75:3a:ca:fa:e9:85:e4:13:23:64:2e:
aa:14:9e:55:c2:bf:56:de:e2:ea:63:e7:55:3c:28:9f:05:2c:
8f:a5:ec:c7:14:12:59:f0:0b:bd:fb:35:e3:1a:d2:22:77:23:
15:af:93:34:e1:91:ba:1c:66:0b:e9:37:44:2b:44:6b:10:ce:
08:12:3d:05:af:30:aa:08:a7:d8:ec:ea:f7:47:91:50:30:62:
55:cb:26:ac:da:05:d1:d2:48:24:a3:28:29:38:61:13:3b:2f:
d1:b3:ce:33:32:82:a4:71:f6:c4:7f:7b:85:a0:4e:9c:f6:02:
c5:77:7a:85:64:01:bb:53:a3:ae:07:97:1d:03:f6:06:ad:75:
b3:53:57:e4:97:ac:01:c7:2a:d0:82:d6:16:27:22:b5:d4:34:
34:d3:fe:ed:d7:d9:4a:86:a1:3d:ee:0e:f6:64:57:07:9d:36:
0f:12:95:b2:41:9b:af:32:c2:e9:de:04:a2:3a:72:d2:d1:35:
5e:51:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:07 2025 by rpki-client