Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
File: jsGCA8JVodC_FYdULHYm8mc41sE.mft (raw, json)
Hash identifier: oStqD1FSd7rMqb10O9zUcplk/cz/SMVcavvX3nXno+Y=
Subject key identifier: 38:35:38:D3:5A:76:AC:7C:93:24:76:00:64:9F:55:9F:5E:A1:F5:A6
Authority key identifier: 8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
Certificate issuer: /CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Certificate serial: 019546D9F41028686DA086668D4D8C7CEC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
Manifest number: 1403
Signing time: Thu 27 Feb 2025 10:00:43 +0000
Manifest this update: Thu 27 Feb 2025 10:00:43 +0000
Manifest next update: Fri 28 Feb 2025 10:00:43 +0000
Files and hashes: 1: 1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa (hash: ZhrTMhUV4sHhyoVsR9aF9HG/oIRN8p5N/Yf6Wavtxpk=)
2: jsGCA8JVodC_FYdULHYm8mc41sE.crl (hash: cEoMxmYFEUCflnndLZ3exSX7LJhAgB8Q8DkoNf5hWWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:d9:f4:10:28:68:6d:a0:86:66:8d:4d:8c:7c:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Validity
Not Before: Feb 27 10:00:43 2025 GMT
Not After : Feb 28 10:00:43 2025 GMT
Subject: CN=383538d35a76ac7c93247600649f559f5ea1f5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:5e:e5:08:b4:1c:a0:8f:5e:a3:1d:bc:e5:
4d:1d:29:4c:f6:60:a0:d6:93:24:92:cb:59:28:5e:
11:6c:ed:a1:28:10:68:0e:8f:d1:7d:18:6c:ed:75:
bc:ba:c3:31:50:77:60:1c:9f:2e:24:b3:ab:50:24:
3f:2d:14:6f:57:21:c9:62:f0:cc:98:05:f4:9e:93:
60:dc:98:ab:0b:76:2a:1c:72:68:f2:4b:7e:43:c3:
8d:9b:e7:1d:83:d8:b5:bd:53:c3:09:a6:ec:89:a2:
4a:e1:87:38:a6:bb:2b:1c:47:89:33:91:82:a5:dc:
31:24:a1:fa:90:d0:c7:97:89:6b:71:6a:e8:6d:c1:
96:3f:7e:de:d5:7d:f7:23:1f:34:71:84:cd:07:41:
00:46:6d:3e:77:b2:7a:63:87:82:28:fd:34:91:b9:
6d:52:5d:b5:1d:c7:09:19:97:55:93:56:01:d4:75:
50:d7:92:17:b7:64:b2:a3:b1:fe:f0:14:fc:0d:da:
8a:1c:b1:b3:77:39:34:62:46:c7:22:9c:97:27:95:
c1:db:61:f7:c2:7e:1f:ca:86:57:9f:c2:60:77:d8:
10:78:32:9e:d1:9e:72:9a:81:46:44:67:7f:e7:39:
2f:b8:e1:4e:3b:22:0c:5b:16:b4:14:3a:78:ed:42:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:38:D3:5A:76:AC:7C:93:24:76:00:64:9F:55:9F:5E:A1:F5:A6
X509v3 Authority Key Identifier:
keyid:8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:92:3d:27:4b:72:73:d9:66:b0:98:83:54:16:bb:9c:0a:
cf:a0:99:f1:03:62:fe:81:e0:77:eb:9c:a5:22:4c:47:7b:f8:
9e:e5:66:f9:06:41:86:5b:b4:43:0e:db:f1:57:5f:d3:66:22:
9e:2d:d2:81:84:78:72:d7:d3:d6:2a:cd:6e:3c:a9:b3:d2:c1:
ed:6b:19:ad:ab:c0:8e:8c:4e:96:3a:79:97:cb:95:8e:e4:08:
13:65:2a:2b:1e:e1:c8:78:ed:62:4e:59:75:44:96:f3:04:ce:
26:3d:2a:af:56:42:a1:9f:15:18:65:66:c9:99:1d:24:44:2c:
95:d2:f7:17:d1:ab:63:cf:58:cb:99:eb:44:4d:b1:32:12:51:
c3:df:a3:8f:5f:63:04:59:9e:30:9b:17:a4:96:8f:cf:56:52:
78:ce:88:15:85:0a:7c:c1:24:f9:ef:b7:ed:57:18:87:c3:c4:
cc:b3:5b:e1:e3:1e:32:63:d1:b0:9f:33:bb:34:b0:09:dc:b5:
f0:06:ab:71:6c:c1:7d:d7:45:41:ac:d8:bf:0b:66:b2:70:d3:
bd:2e:e8:78:c6:4f:6b:55:82:5d:ac:19:3e:57:03:fd:46:0c:
42:ed:4f:e2:15:8f:97:83:27:73:b4:07:31:93:2d:b4:81:c6:
bf:00:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:31:13 2025 by rpki-client