Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
File: jNFQ_x-81CqT603fQ8pxx748cog.mft (raw, json)
Hash identifier: 4zN5YN099YqA9IZMoMS2TWL2kLrw58/2CUReMNZ4+Pw=
Subject key identifier: 4A:83:E5:E5:FC:C7:CF:5C:9B:C4:9F:8C:A9:25:9C:69:5E:AC:45:04
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Certificate issuer: /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial: 0195CBAD4122836390B1B9A3ED4725647A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
Manifest number: 04C0
Signing time: Tue 25 Mar 2025 05:01:24 +0000
Manifest this update: Tue 25 Mar 2025 05:01:24 +0000
Manifest next update: Wed 26 Mar 2025 05:01:24 +0000
Files and hashes: 1: 7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa (hash: TxbKQ6YqJPrLysV+NWU+TpSYoKbOqzVVz5RnT6KXSRE=)
2: jNFQ_x-81CqT603fQ8pxx748cog.crl (hash: ECuyAdi0/doKaxYSdCIq7zQ9T7ArvuoqEJESJAVIPnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:ad:41:22:83:63:90:b1:b9:a3:ed:47:25:64:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Validity
Not Before: Mar 25 05:01:24 2025 GMT
Not After : Mar 26 05:01:24 2025 GMT
Subject: CN=4a83e5e5fcc7cf5c9bc49f8ca9259c695eac4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:16:8d:aa:67:db:d0:12:9f:71:9c:70:46:
3c:ba:c1:5d:0a:78:2e:ae:29:e5:94:7b:cf:93:9a:
8e:cd:7a:20:a9:d3:fd:b5:44:36:9c:e8:7b:ad:bd:
be:dd:db:24:1d:a1:29:38:16:6d:8e:1c:fb:fe:ac:
ea:04:4b:1e:6f:f3:17:0c:20:25:3e:3e:70:d8:5e:
29:d5:f4:2b:32:7c:44:a9:d0:35:29:ab:1b:51:71:
aa:2f:32:92:31:9a:2a:67:0a:ec:af:8d:3e:51:e7:
65:36:3e:95:09:58:82:c4:75:71:7a:6f:0c:b9:eb:
1e:d3:27:d9:56:6b:c6:d1:be:79:5b:fe:ad:ed:93:
4f:6a:54:ae:f0:f2:67:e1:3d:54:c9:58:3c:e4:db:
0c:42:30:14:4e:4f:de:b5:c4:5b:64:7a:83:9b:7a:
e3:77:1c:48:36:f4:5c:c9:0e:25:4a:74:e1:f5:63:
f1:12:71:e9:d9:38:b1:b0:c1:f6:fb:0d:fe:7b:6d:
54:ad:5d:a1:64:61:34:10:d0:a2:05:dd:61:0c:91:
21:e8:fe:59:6d:7d:dd:65:24:10:93:4f:83:43:dc:
6d:ce:81:be:6e:d6:7a:d8:87:7b:b7:35:73:71:f5:
36:c1:6c:b2:81:92:4e:87:22:73:fe:e4:f7:ec:47:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:E5:E5:FC:C7:CF:5C:9B:C4:9F:8C:A9:25:9C:69:5E:AC:45:04
X509v3 Authority Key Identifier:
keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c8:6e:be:08:d3:c5:72:ab:be:61:b8:36:71:9b:df:cb:4d:
f6:4d:52:63:e3:ae:39:80:7c:3e:05:7f:e7:73:6e:60:72:e9:
9b:9e:14:f4:07:88:03:1e:a8:32:a1:3b:03:8c:71:e2:1b:10:
d7:a4:fa:5c:16:5f:6d:b8:f4:be:81:f9:2a:d5:5b:21:70:49:
f1:5f:73:e7:e9:ae:cd:b5:4b:b3:44:71:d5:82:b9:d7:af:92:
be:78:b6:2e:5f:77:a4:e9:c9:4f:36:86:3b:4d:14:3a:b0:53:
06:9e:32:61:93:65:75:4b:a1:72:59:3d:12:b0:7b:34:c0:25:
ba:e6:7e:5d:3a:d9:7c:32:57:7c:72:de:01:63:9b:57:65:90:
49:8e:e7:ce:55:6c:89:5d:a6:bb:4e:29:91:a5:c7:ed:6b:9d:
5d:61:e9:83:3c:dd:07:0c:8e:c8:70:00:9e:57:bd:79:59:59:
68:65:fb:40:87:9f:4d:96:cf:9c:1f:a8:31:2b:ed:b8:1f:fb:
09:27:66:50:0a:c6:d8:b3:66:00:a5:9e:33:02:ed:ba:f0:7e:
6d:a1:af:af:a0:43:10:79:35:fe:41:11:72:75:19:bd:05:bf:
10:7e:e5:70:e3:82:5a:ad:f3:e4:3d:62:41:0d:2a:7e:ce:12:
66:00:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:18:09 2025 by rpki-client