Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
File: jnqSzEub2N43j34iGKYlF9msVrw.mft (raw, json)
Hash identifier: 2agYChiIpz/MssURA9e7lBWi/hE0FysmpFZ4ZJ79Rhg=
Subject key identifier: 40:C3:B4:84:7B:D0:60:E6:1A:24:AA:37:71:C1:E7:FA:7A:AF:C0:90
Authority key identifier: 8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC
Certificate issuer: /CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
Certificate serial: 01940758833355DD22FDFAAA46DB8686039D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
Manifest number: 0F71
Signing time: Fri 27 Dec 2024 09:00:28 +0000
Manifest this update: Fri 27 Dec 2024 09:00:28 +0000
Manifest next update: Sat 28 Dec 2024 09:00:28 +0000
Files and hashes: 1: S25kZ6al-ctwb8BPTOUFZUwkye0.roa (hash: yeFPo6DxiHCXYF9YQ1UuN4S//oeWU2z9m/NapFi5Irg=)
2: jnqSzEub2N43j34iGKYlF9msVrw.crl (hash: ytbaGNYRXEeq9HVz1oKWKuP7uQpQnHAyj5NFV4n4Rdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:58:83:33:55:dd:22:fd:fa:aa:46:db:86:86:03:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
Validity
Not Before: Dec 27 09:00:28 2024 GMT
Not After : Dec 28 09:00:28 2024 GMT
Subject: CN=40c3b4847bd060e61a24aa3771c1e7fa7aafc090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:0d:d0:c8:43:6e:7d:4e:00:3e:62:13:e9:
2a:30:11:3c:8f:30:79:d7:ee:96:76:05:51:71:9b:
df:bd:e6:05:3f:02:bf:c5:a0:42:39:2b:6a:a7:05:
77:77:95:dc:70:1c:59:91:71:72:d0:ac:80:2c:a5:
27:a6:e2:c6:96:1a:48:ae:01:5a:43:24:aa:9b:14:
35:f9:5b:88:9a:68:48:b7:a6:de:79:3f:5d:28:18:
b9:80:94:8d:a1:1d:b2:74:10:eb:c0:f1:e4:9f:df:
b7:9c:bc:22:2e:bb:fb:18:46:59:4e:30:2c:c7:44:
b4:94:aa:6d:4f:ae:03:c3:eb:51:b6:83:0d:00:18:
a3:53:dd:39:12:c7:14:a2:ab:5e:ea:23:ce:08:fe:
3f:20:a5:8d:9b:68:49:10:49:9d:2e:08:8c:7f:1f:
01:cf:dd:5b:4c:f8:d6:48:fb:52:37:d1:4c:9e:01:
3d:a6:c9:a8:65:a5:8b:08:b3:50:14:aa:67:04:41:
18:49:cd:f7:95:c5:d8:3a:54:b6:2f:61:df:a6:ad:
73:b5:23:66:21:13:50:4f:fb:d8:e7:e7:fe:ba:af:
ce:2e:1c:b1:67:97:0a:79:15:83:ae:54:89:2a:6e:
df:0c:e3:fb:fd:98:44:9b:ad:8f:8f:88:4e:62:4f:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:B4:84:7B:D0:60:E6:1A:24:AA:37:71:C1:E7:FA:7A:AF:C0:90
X509v3 Authority Key Identifier:
keyid:8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7a:fa:6c:8b:82:68:0f:c8:c4:22:8e:3d:53:35:66:9d:00:
c4:c7:9a:80:c9:ab:ae:9a:aa:9c:29:50:c2:62:f4:85:2c:04:
9a:1a:78:d8:61:81:90:92:93:c6:8d:a6:4f:38:2d:e9:38:23:
b5:74:0e:f9:07:f8:56:51:f3:54:63:bc:1f:8d:1d:1b:e8:f4:
71:3e:c9:0a:f1:6c:50:d5:6a:15:4b:7a:ad:09:23:ea:3f:dc:
d4:f3:fb:61:9b:cb:f0:de:5a:6c:1b:08:1b:1b:05:4a:ae:cf:
81:ba:0b:10:67:45:b7:30:a1:18:d8:8e:24:cd:08:7b:1a:0d:
03:7d:83:17:ca:57:e9:f8:9c:30:af:6c:a8:4a:7a:23:55:71:
fa:49:9c:47:a0:ff:ac:91:b8:9e:e7:44:53:f1:7a:8a:36:94:
59:c2:65:a5:0a:ff:d8:32:40:c0:9b:e5:30:a6:5b:03:8b:22:
ca:9c:2e:df:8e:1a:8a:34:f0:47:36:fa:03:34:15:8e:b7:58:
c6:7f:ef:50:62:7c:9f:0f:39:02:21:d9:5e:86:a8:5e:76:de:
c9:26:78:1e:44:96:5a:28:06:a3:ae:70:62:c4:5f:1f:83:05:
d1:0b:c7:96:f2:e1:6a:a0:53:3b:ac:e6:3f:d8:18:05:06:7a:
65:c4:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:44 2025 by rpki-client