Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
File: jlXKALthb9xHR8v6S1RFbCPzcoQ.mft (raw, json)
Hash identifier: 0sPUCerdCOrcw59IKFQrZPSFO+6ymtRPHmT/6epYw8Q=
Subject key identifier: 49:13:76:FD:5C:6A:28:88:2B:8D:21:A2:18:A0:7A:F9:1D:94:D4:8A
Authority key identifier: 8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
Certificate issuer: /CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Certificate serial: 0194B60336971C2FD5EBC8F355BD6730D016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
Manifest number: 1428
Signing time: Thu 30 Jan 2025 07:00:51 +0000
Manifest this update: Thu 30 Jan 2025 07:00:51 +0000
Manifest next update: Fri 31 Jan 2025 07:00:51 +0000
Files and hashes: 1: jlXKALthb9xHR8v6S1RFbCPzcoQ.crl (hash: TYsdASuoQm1PUhQYe8Tpvy9zQC8IS+5b9FAl/56TVjY=)
2: pINkd1ie7Nky3a9FoR_Ki_Xg6PU.roa (hash: 1pjr0LqYiVuPSX7h6gFNcW7XvM1YOW/CpMKInu1F1x4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:03:36:97:1c:2f:d5:eb:c8:f3:55:bd:67:30:d0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Validity
Not Before: Jan 30 07:00:51 2025 GMT
Not After : Jan 31 07:00:51 2025 GMT
Subject: CN=491376fd5c6a28882b8d21a218a07af91d94d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:4d:d5:49:f2:cc:4f:c7:e7:da:49:1e:e9:
53:bb:f9:a6:bb:e4:9a:3c:42:36:d8:5a:ce:81:59:
88:f6:96:fc:cc:71:2e:73:c3:00:22:df:9d:a9:f7:
66:2e:dd:b9:cf:5e:0e:e6:48:fd:2d:33:45:81:f5:
c4:94:30:ee:24:17:57:22:4a:da:32:b0:85:4b:c4:
4c:8c:93:a1:34:3e:f3:90:7a:11:a6:d9:c1:69:ab:
f4:58:7c:53:85:87:d4:19:9b:98:37:a3:6e:f6:5d:
31:4f:f4:0a:4c:c1:c5:25:68:e4:1e:a5:29:ae:08:
81:77:f1:f6:3d:21:9e:24:f8:83:6a:28:4c:5c:a7:
98:34:a8:39:0c:4d:f7:e6:9b:f6:86:e7:6e:19:9c:
ab:29:00:e4:35:b2:c0:11:76:9c:15:52:ac:68:9e:
e4:69:ac:7d:fc:1a:01:58:b3:b3:0f:ba:ee:f5:d0:
05:8f:7f:52:7a:0a:d2:7d:c1:96:62:06:87:fb:43:
e2:81:34:8f:15:25:06:18:fe:67:e5:8f:e5:d8:33:
94:b9:d9:98:d7:b2:ba:6a:be:88:50:c7:5e:c6:da:
c6:6b:12:41:6b:e6:62:6c:93:5b:f3:e5:74:a5:29:
08:67:34:9b:32:ec:14:63:6e:ff:8e:a6:ea:01:03:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:76:FD:5C:6A:28:88:2B:8D:21:A2:18:A0:7A:F9:1D:94:D4:8A
X509v3 Authority Key Identifier:
keyid:8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:a0:36:0e:52:aa:69:08:f3:45:1c:e5:e3:a1:63:3b:fd:
74:07:25:ad:52:72:59:e2:bb:d2:7b:96:82:e2:42:98:43:ae:
7c:f0:b0:05:ee:3f:b4:3a:fe:e1:be:ed:39:70:db:e5:33:1b:
b3:ff:a1:22:d5:1f:bb:15:ec:25:b3:e8:89:15:ad:a5:aa:04:
cf:7e:f0:52:e6:cf:d5:fa:5c:58:1a:dc:5d:c8:7f:53:26:e1:
1d:e4:f5:58:1a:a2:14:3b:e3:43:38:04:9f:45:5a:f9:9a:80:
36:fa:17:0c:3c:fd:a7:c8:75:df:a3:1d:1d:5b:d8:6f:a3:a5:
20:b0:54:fd:ed:77:9a:65:39:75:63:c7:d9:7d:74:47:56:4e:
da:4a:fd:62:2f:28:a0:09:5c:f1:44:6e:73:3b:3f:1e:97:81:
ef:53:2d:c0:fd:a2:9c:4c:70:84:81:51:27:2a:d1:85:26:c0:
7b:0f:26:fa:91:96:3b:b6:4b:9e:69:0f:30:88:8e:0a:5a:07:
f8:4d:fd:e6:ca:86:fb:e4:cf:f2:f1:36:bd:f0:9a:7a:e9:29:
be:06:17:a0:2e:ea:d9:2b:b2:c8:0f:c3:21:f6:02:39:5b:fa:
bd:55:de:92:14:31:5a:f7:aa:21:94:6d:55:dd:77:5f:3c:0b:
47:72:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:02:47 2025 by rpki-client