Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: W6Ze8uKL5V/VDGE3tFiJ2OhACh9U2mlSA6O8CsrxHlg=
Subject key identifier: F3:1C:76:DF:A1:F7:D2:0E:15:25:0C:5B:94:C9:C6:70:20:D7:13:92
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0195DFD8E2A5E3E455C8F4751ED82875AE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 03:01:27 +0000
Manifest this update: Sat 29 Mar 2025 03:01:27 +0000
Manifest next update: Sun 30 Mar 2025 03:01:27 +0000
Files and hashes: 1: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: frcPRz8PUIkXq2unCIaoWCxlTT/5EOWAM6ZWo+sIviI=)
2: jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa (hash: /NFHrfrRwaEoNjeXwP4NglQKiFA3Q/YP75U6J0hU51w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:e2:a5:e3:e4:55:c8:f4:75:1e:d8:28:75:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Mar 29 03:01:27 2025 GMT
Not After : Mar 30 03:01:27 2025 GMT
Subject: CN=f31c76dfa1f7d20e15250c5b94c9c67020d71392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:98:85:65:4e:fa:67:3b:d2:07:b7:d7:ad:
cb:fe:ef:6b:c4:11:b1:6d:49:5c:8c:60:32:04:16:
ee:36:de:bf:59:a3:5f:01:55:9b:9f:f3:74:84:07:
ca:c6:a9:b9:4e:64:d6:1c:ab:2b:4b:1b:b9:f1:f0:
7d:31:48:9b:01:8b:ea:52:c2:5f:1f:92:35:86:a1:
3f:eb:dd:b6:9d:dd:6f:75:00:b7:c5:5e:6e:db:33:
5b:8c:10:b6:62:93:6d:47:2f:45:43:e2:cf:aa:4e:
6c:a1:18:03:02:24:18:85:76:eb:65:da:4f:f2:56:
85:86:58:02:c0:9d:6f:f0:9a:d2:e7:87:2e:af:04:
e2:9b:73:9f:0a:d7:15:19:d8:4b:46:de:ee:91:52:
fe:ef:53:94:8e:f5:57:ca:f7:68:ac:8b:e0:88:c1:
f2:8d:7e:a0:5f:5e:2a:60:c9:72:a3:7e:8b:fb:b0:
39:55:54:bd:ff:3a:21:28:18:4c:88:aa:73:4c:59:
13:6b:a2:74:8c:83:9b:d3:da:e5:70:bf:80:f5:bc:
93:96:db:3f:64:4c:a6:79:14:f2:b5:f9:c2:af:86:
44:43:cc:93:53:be:fe:ac:89:97:77:c2:78:94:2a:
a6:87:18:14:4c:28:54:a4:76:96:69:0c:2b:b5:fc:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:76:DF:A1:F7:D2:0E:15:25:0C:5B:94:C9:C6:70:20:D7:13:92
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fc:e4:e2:5d:ab:a1:90:4c:3f:96:6d:a2:73:73:21:18:55:
07:80:5e:22:6a:3b:d1:f8:0d:55:44:38:78:ad:0f:10:30:f1:
9a:09:b2:b6:90:36:0a:14:6a:58:b0:a9:f6:7b:8a:b6:77:e0:
01:78:20:39:69:31:51:83:36:46:ea:fc:aa:e4:3b:f7:57:b0:
4b:7b:5b:7f:a9:cf:c6:34:2b:ce:97:92:fb:97:65:9a:6e:51:
87:a9:68:36:91:00:5e:a6:6b:14:2b:5c:47:6f:a5:a6:4b:f8:
f1:2a:c0:74:d6:63:87:fb:18:25:89:53:6d:b2:0f:c8:12:20:
88:e8:3f:71:8b:9d:5f:ae:8f:59:b2:4f:cf:67:56:17:83:79:
0d:27:aa:da:bd:73:77:bb:2a:ac:58:9b:1b:14:19:82:e2:ad:
61:d9:4a:8a:19:28:9f:82:a7:c4:c0:34:5a:1b:f2:87:0a:6c:
eb:24:41:37:3e:3b:48:ac:79:98:da:4d:c9:47:eb:d2:98:8a:
9c:38:3a:b8:1a:29:11:10:f6:6f:cc:b8:87:fc:25:05:f1:6a:
f0:0f:f9:9a:0b:16:03:79:cb:33:eb:51:40:95:5b:7a:4d:96:
20:7c:24:1f:ff:cc:1f:79:4a:c6:78:a2:b0:a8:8e:80:14:bf:
2a:86:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:40:01 2025 by rpki-client