Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft
File: jWTrFZEI4_ilA0wZav_OBMenJG4.mft (raw, json)
Hash identifier: jItCelXFoRHvDKS2NBNy6bN5eeuku5BckdEMEZQOuaI=
Subject key identifier: 62:D1:F8:51:D5:93:9B:22:18:C9:5C:B0:EC:65:6F:89:30:17:AC:BA
Authority key identifier: 8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
Certificate issuer: /CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Certificate serial: 0194A68FB59DF7BA853D0133A6B85AC712DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft
Manifest number: 1347
Signing time: Mon 27 Jan 2025 07:00:23 +0000
Manifest this update: Mon 27 Jan 2025 07:00:23 +0000
Manifest next update: Tue 28 Jan 2025 07:00:23 +0000
Files and hashes: 1: jWTrFZEI4_ilA0wZav_OBMenJG4.crl (hash: zSwO+oM8UP4p3/3MPvn6NYbfBRNmXIbCjWcXLqWWwd0=)
2: mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa (hash: i7Q9ASK+O8BQwChA7pz5kBCQUK9uUpFz6WgMTZ80wP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:8f:b5:9d:f7:ba:85:3d:01:33:a6:b8:5a:c7:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Validity
Not Before: Jan 27 07:00:23 2025 GMT
Not After : Jan 28 07:00:23 2025 GMT
Subject: CN=62d1f851d5939b2218c95cb0ec656f893017acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:15:a3:23:b3:4b:5c:3c:aa:8a:3d:34:24:
7b:a0:ce:c3:6a:d7:dd:02:d3:c1:69:7c:f5:a9:98:
7d:e6:d2:70:7f:53:bd:a8:bd:04:ad:2c:5d:db:1e:
2b:2c:55:97:0a:68:63:d9:a4:4c:2a:47:54:aa:19:
48:51:e6:a9:b6:4c:ad:bb:0d:23:f2:75:95:41:58:
0e:ac:b3:8b:68:73:4f:a6:26:24:c1:19:bb:f9:ea:
2a:1d:d0:7f:34:53:89:00:d3:06:b8:0d:ae:5a:02:
bc:de:4e:f2:10:44:9e:48:68:e6:6c:7b:f8:6f:8d:
4f:07:dd:86:42:93:7a:89:7d:7a:2e:dd:60:42:59:
3e:20:17:49:38:6d:98:f0:51:b1:ba:6b:d1:1a:d8:
c7:ab:47:ff:31:a1:46:b7:0d:b5:bc:78:43:85:a4:
92:48:e2:1d:95:c4:a9:b2:c9:67:ac:75:46:2d:57:
b3:f2:40:3a:9b:b5:6f:fb:3e:36:86:5f:dd:63:47:
09:d9:85:c2:f8:5c:43:7d:ca:d5:42:91:59:bf:b8:
ff:08:47:f6:f8:c7:27:a0:e9:6f:07:ba:c6:e1:25:
0d:af:23:83:7d:42:5e:e0:d6:be:27:24:d9:21:1d:
28:97:90:0f:c8:cb:71:59:07:ca:c3:ad:eb:7f:59:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:F8:51:D5:93:9B:22:18:C9:5C:B0:EC:65:6F:89:30:17:AC:BA
X509v3 Authority Key Identifier:
keyid:8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:16:e3:49:61:b8:4e:22:c4:f7:d2:28:f9:ec:a0:b6:d0:
21:e8:54:4f:cb:8c:d6:7c:14:14:ef:75:2f:58:cc:dd:8f:9b:
db:87:2d:41:35:16:63:bc:ff:63:48:9b:5a:c3:b6:fc:bc:bb:
a5:ad:f3:14:03:ce:eb:fb:20:fa:25:08:fd:76:9e:dc:13:0d:
f0:ff:01:f5:f1:1f:12:4a:c5:e1:3f:47:de:f3:16:56:22:c5:
8b:c6:82:2e:93:ad:3f:e4:e9:78:d6:cd:33:51:ca:28:ae:ef:
1c:5f:81:ba:42:ec:57:58:05:d9:ef:3e:55:46:1e:36:14:9f:
f8:8e:17:0f:3a:c7:d7:f0:af:5f:47:53:2c:35:5b:25:9b:dc:
16:38:8f:da:cc:ee:84:8d:48:83:94:f5:1b:a0:95:ae:80:d1:
0c:e6:d9:6b:6d:64:a6:33:17:31:f1:4e:25:7a:d7:40:48:57:
23:82:06:5a:6e:23:ac:22:79:0b:61:d9:72:3d:eb:2a:c0:a6:
97:3c:45:9e:a7:78:21:94:48:16:96:73:13:0f:a0:87:f0:58:
29:e4:06:5b:c8:57:77:1f:45:c8:d4:72:d6:14:1e:cc:87:83:
73:17:86:2b:5e:56:af:b1:d2:0d:b8:6b:05:03:94:73:f7:2c:
d1:bf:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:07:44 2025 by rpki-client