Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: Qa7P0RvdC6xueljAPd09jbOnWsMBKtUg8gK/pAqodEk=
Subject key identifier: D2:ED:A5:33:D0:41:84:A4:31:44:8B:D0:A5:2F:69:FD:1D:1B:41:07
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 0195E1904F2C223A56866390D8F836F6CE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 13E9
Signing time: Sat 29 Mar 2025 11:01:25 +0000
Manifest this update: Sat 29 Mar 2025 11:01:25 +0000
Manifest next update: Sun 30 Mar 2025 11:01:25 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: FGmsCzmkNAnvcc2S8mevOdfdLTev63huBzrffBvqHiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:4f:2c:22:3a:56:86:63:90:d8:f8:36:f6:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Mar 29 11:01:25 2025 GMT
Not After : Mar 30 11:01:25 2025 GMT
Subject: CN=d2eda533d04184a431448bd0a52f69fd1d1b4107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:df:3b:9e:bf:67:ea:4d:a4:41:af:f0:36:
64:6c:2c:4f:2c:13:d9:c8:3b:50:3c:06:dc:b7:c3:
a9:93:80:28:df:9f:c2:1a:6a:ef:46:53:42:0e:78:
7b:1f:95:c9:42:ca:a6:40:26:dc:aa:11:54:f8:9a:
a4:09:be:c0:a1:4f:01:47:10:98:79:39:ca:62:99:
e2:cc:45:5b:25:ee:06:9f:25:14:cb:e2:da:c0:2e:
c0:27:f1:44:53:1e:1a:36:ce:75:ed:be:ba:e2:eb:
3e:a7:fb:2d:74:3c:37:c1:26:45:85:24:fa:c7:12:
7c:99:ab:e4:05:07:a7:39:9e:0b:cf:bd:1f:cb:05:
f9:26:97:ed:f1:c4:e9:83:97:46:37:34:49:9f:92:
4c:d7:dc:4c:25:50:5b:35:31:7a:0f:b1:7f:53:52:
6c:4f:2c:5d:a2:7a:c3:df:17:1d:a3:01:b5:71:8d:
04:1d:15:f2:39:38:ea:e8:c6:3c:37:b2:71:e3:e6:
6d:93:be:7a:7d:8a:5a:d0:f4:92:bf:c0:8b:c5:fa:
38:cb:63:30:4c:a1:b6:b3:d2:49:3e:c7:8a:45:72:
46:88:f2:da:36:cc:28:23:d7:15:a5:70:a8:db:df:
af:98:37:9f:ad:6c:4c:28:4f:d5:5a:0c:4d:52:1a:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:A5:33:D0:41:84:A4:31:44:8B:D0:A5:2F:69:FD:1D:1B:41:07
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:d6:74:84:48:f2:0e:07:e4:49:f1:af:69:0f:54:ba:77:
70:22:db:92:f9:0b:7e:3c:de:3f:80:04:ac:a8:eb:2a:15:29:
87:32:28:a9:32:22:9a:54:67:13:f7:14:9b:7d:b0:0a:1f:32:
36:96:f6:20:7a:f2:83:1d:08:64:6b:4a:07:13:a7:0d:65:0d:
c3:7a:04:13:86:8e:8e:f5:b0:92:28:1c:f8:a6:bc:2e:54:6a:
da:d9:d5:c4:fd:82:21:d7:26:98:14:eb:21:97:e6:c6:da:b0:
a7:ad:7b:d4:b7:92:29:01:ba:d7:6a:37:36:1a:1a:b1:54:33:
a9:f7:c8:76:5b:8f:1d:d3:a0:05:91:5a:ef:16:50:97:30:7a:
de:15:33:87:ca:81:8a:9a:e3:75:42:ed:33:8d:e6:fd:f5:90:
83:f7:70:a1:f9:b3:99:c5:55:48:39:a5:a4:9a:be:cd:6b:bb:
b4:56:b0:36:fd:84:d1:f2:24:4f:28:6d:ab:e6:f0:0f:ed:95:
62:ef:9e:34:07:8b:cd:eb:08:a4:31:c6:18:fa:1f:16:d3:22:
a4:fa:d2:b9:45:bf:17:fc:b8:56:99:89:d3:d7:9e:e9:87:cf:
51:4e:f8:48:3b:e1:e5:ae:26:32:2f:bf:b6:31:9d:f0:e4:66:
64:1a:b8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:49 2025 by rpki-client