Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
File: JPQQpKDnIUOITahEO-gpaoGimQg.mft (raw, json)
Hash identifier: eRYHJ9hwZyZPzmq+FX32roJ5WR7JZvYvH1lcKU4nxbs=
Subject key identifier: BA:DF:51:50:03:3A:95:34:22:16:EF:29:CF:34:EC:24:27:F5:08:0F
Authority key identifier: 24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
Certificate issuer: /CN=24f410a4a0e72143884da8443be8296a81a29908
Certificate serial: 0195AC8FD68F297D74A037B0AD78CA42151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
Manifest number: 0F7E
Signing time: Wed 19 Mar 2025 04:01:02 +0000
Manifest this update: Wed 19 Mar 2025 04:01:02 +0000
Manifest next update: Thu 20 Mar 2025 04:01:02 +0000
Files and hashes: 1: JPQQpKDnIUOITahEO-gpaoGimQg.crl (hash: g+SwryZNKDjj1Mm0QrLlFq6CXXwq1iMq8cvaQVfEFmk=)
2: uDKDJ-KhWIllpM_YJUIJwqB3-SE.roa (hash: 07nZ52JsoTkxnrx0gPpEgvGTugWc7J6ivdthOMCtzGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:8f:d6:8f:29:7d:74:a0:37:b0:ad:78:ca:42:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f410a4a0e72143884da8443be8296a81a29908
Validity
Not Before: Mar 19 04:01:02 2025 GMT
Not After : Mar 20 04:01:02 2025 GMT
Subject: CN=badf5150033a95342216ef29cf34ec2427f5080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:9d:7f:5f:49:88:da:44:e2:5a:74:88:81:
81:89:5a:c8:5a:6d:b0:10:03:6e:54:da:8d:28:04:
79:37:31:e9:58:6c:85:d3:52:7d:24:d8:8a:51:f9:
2c:36:45:d9:45:9b:26:4b:90:bf:a2:a8:91:c4:f1:
42:98:ed:a9:0e:e6:02:06:27:42:ee:1f:88:71:41:
e9:e3:4f:66:8e:b6:2e:e9:0a:30:f9:a0:b5:6d:78:
ea:cc:d3:53:ac:c6:fd:91:a1:de:18:bd:39:ac:8c:
2b:68:fd:18:9c:2d:d8:c1:e0:34:2a:ec:6b:0f:4a:
96:a5:83:63:67:ef:23:50:95:ab:d9:24:24:fc:91:
6b:ac:65:4a:78:58:9f:82:0f:00:1f:54:d9:44:5d:
9d:64:9a:d6:d6:b6:87:87:0b:1d:cd:e5:ef:94:4b:
a8:14:3d:d8:70:f0:c3:5b:b2:3f:3f:84:af:34:9f:
57:68:e9:2b:da:c4:b3:14:ad:66:6e:9a:e1:1c:c1:
09:2b:7b:4a:79:8c:fa:a6:57:f9:74:8d:0b:cc:2d:
31:5e:ba:b1:d5:b3:77:90:22:79:b3:76:b5:c7:3d:
8f:4a:d4:c1:62:5a:b7:a5:4d:88:ac:ad:6b:98:8a:
cb:66:b4:a2:10:86:c0:db:e8:33:b5:02:ca:2e:d4:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:51:50:03:3A:95:34:22:16:EF:29:CF:34:EC:24:27:F5:08:0F
X509v3 Authority Key Identifier:
keyid:24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:11:06:ad:e9:ba:eb:9d:f0:0f:d4:d6:36:51:a2:48:28:
70:d6:9f:f8:f3:16:85:2c:5c:36:42:68:e3:77:cb:b7:18:32:
31:e7:79:bd:51:ea:f4:34:64:68:3e:1d:3c:fa:5e:1d:9d:14:
4f:95:29:f6:42:bb:ba:00:9f:1f:57:65:ca:1f:3a:55:1a:a4:
63:17:42:7c:4d:20:73:8a:68:33:1b:b8:ed:54:32:24:3b:30:
0e:a7:cc:98:9b:8e:99:ff:df:b7:17:a0:15:c3:77:51:ab:53:
b7:54:d0:7a:0d:73:fc:fb:08:7f:d3:2e:f9:7d:42:3b:ad:9c:
16:ef:de:fd:65:ec:36:eb:ea:6f:04:d5:25:3b:01:ae:94:a5:
61:87:9a:24:44:6a:0d:3a:49:18:31:3a:75:e1:f3:03:b9:3b:
c2:ac:59:e0:66:6f:12:47:57:4c:68:7f:ac:f0:ea:78:13:7c:
dc:6c:8f:c2:ef:9c:f1:e3:b0:20:88:18:b5:05:95:1a:54:7c:
a0:96:90:af:fa:9a:89:58:06:b5:cb:dc:07:11:59:8f:54:16:
cf:20:ed:59:42:17:c2:14:ae:ef:83:4b:56:6d:db:20:eb:ad:
f5:d9:2d:c1:37:f4:73:e9:8c:fe:a6:d8:0a:cd:a8:9c:0f:4a:
08:64:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:56:02 2025 by rpki-client