Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: SJbuFi+ES8A8GiULkCCoB0+rNfR3RLHGjx4PZ9fA/nY=
Subject key identifier: 60:87:5D:AD:7A:35:1F:2C:1D:53:95:07:2E:A8:8D:2B:6A:CF:52:C3
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0195E1901A18E0369E6BF0266A993261F49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0936
Signing time: Sat 29 Mar 2025 11:01:12 +0000
Manifest this update: Sat 29 Mar 2025 11:01:12 +0000
Manifest next update: Sun 30 Mar 2025 11:01:12 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: MLkEpKEnHqPrgDxwAAJiSrY6X8No6wOTaK+J0pVnZ6A=)
2: Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa (hash: rByHn6YmBo2+AfIQ5f6f0MI7t8+wl3rDT7243r2K7f4=)
3: wyMVR4dEtlYqNcQNudWP-vZ9cs4.roa (hash: 9/Au8AXYJlANsGCX+KV4wLuBFADmhxnPsp4Mf5t4/BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:1a:18:e0:36:9e:6b:f0:26:6a:99:32:61:f4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Mar 29 11:01:12 2025 GMT
Not After : Mar 30 11:01:12 2025 GMT
Subject: CN=60875dad7a351f2c1d5395072ea88d2b6acf52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:25:d5:cf:a2:36:01:af:85:38:b2:57:25:
aa:13:7c:ca:79:0b:55:1b:b9:c3:8f:24:d7:8d:2c:
6b:ca:ac:0c:1f:cc:a8:04:5a:5c:64:e3:86:a5:5c:
93:f6:f2:ab:20:e1:82:6d:e9:2f:71:7b:d1:9d:9c:
ee:a3:e7:05:01:73:99:71:a7:d8:16:dd:9a:ef:68:
ab:8f:ed:32:89:a5:b3:85:c9:b6:34:95:36:d6:68:
20:11:99:ea:df:67:a8:03:05:0b:24:08:32:6c:5d:
16:ee:46:f4:3b:6d:56:1d:48:15:c0:a4:07:d6:7c:
d3:6d:97:eb:bf:67:a1:bf:de:65:47:29:e2:23:51:
94:bb:1a:75:f4:91:de:e8:82:fb:25:90:1b:7d:c4:
29:a8:40:6e:14:ec:cc:3c:5c:55:a0:8c:0b:2c:9a:
a0:2a:7a:7a:b7:96:6e:93:36:80:d9:61:67:48:f9:
b8:9d:c2:75:0c:88:00:57:c2:b7:31:4f:73:79:86:
9e:9b:8b:3c:4a:69:57:f1:6a:8c:26:08:a8:36:4f:
c3:67:81:a5:88:0b:30:56:62:24:ce:77:96:89:2f:
12:fd:03:19:56:54:93:a7:a1:31:bf:3c:88:dc:94:
6d:58:ee:fe:58:d8:d1:d6:e5:49:6e:b9:54:75:ee:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:5D:AD:7A:35:1F:2C:1D:53:95:07:2E:A8:8D:2B:6A:CF:52:C3
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:a1:9a:bb:76:25:41:01:a3:31:9a:42:6e:4b:b6:f1:a8:
70:3a:30:85:80:24:2b:2c:e5:55:d4:22:65:42:38:69:53:69:
21:0a:25:7d:f0:46:8b:74:59:03:11:2b:bd:91:74:cd:ff:35:
80:32:25:f6:ca:57:44:6d:92:3c:1f:01:b8:22:50:49:95:90:
c2:83:ee:ef:84:da:6f:a9:6e:41:4d:04:ab:7d:b9:0c:ec:85:
c9:60:4c:79:f8:10:97:62:ea:4b:f3:a9:b5:03:90:50:29:d1:
ea:6b:89:85:c7:e9:63:c0:18:04:af:46:41:6c:d5:8a:2e:9c:
d8:63:41:ae:b0:be:cc:66:cb:7b:ac:13:75:00:68:b9:53:60:
41:d2:26:33:58:b0:ad:9a:82:80:24:fb:7a:dc:ce:d1:0c:6a:
3e:d8:00:ef:bf:d1:df:b4:a1:2e:40:8f:40:e3:51:8a:71:3c:
82:43:80:f7:29:02:0a:5b:16:1c:7a:0e:21:84:eb:04:ed:ab:
3a:bc:96:3b:b7:6e:70:3b:10:06:6d:60:86:a2:b6:d5:6f:dc:
d6:74:27:f5:09:3c:0e:2d:34:85:64:32:36:3c:38:8e:92:4c:
68:20:2a:dd:55:62:29:7b:45:15:3c:51:70:8d:31:bd:30:75:
d8:8d:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:44 2025 by rpki-client