Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: LdrcdNVFweUAp8MKIcZIgaRWFXqRGeRq8VK8xaiGXqw=
Subject key identifier: F9:DB:43:1F:7E:94:A8:96:C6:A2:CD:D6:E8:09:F9:84:E5:8E:34:65
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 0194BBCEEF3D829FED0FFD773F0312314FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 0F86
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: Lmwj+xAfr+w5Nm8QVtbiT18QBw1hOlPiXSAWG5dtRUE=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:3d:82:9f:ed:0f:fd:77:3f:03:12:31:4f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=f9db431f7e94a896c6a2cdd6e809f984e58e3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:10:05:50:13:24:24:0c:04:00:78:28:80:
57:26:d1:c3:f1:8e:3d:05:55:a9:d6:85:ac:df:84:
fe:bd:56:4f:a7:bb:95:ef:62:0a:3f:0b:a8:9b:01:
93:18:0f:c6:19:db:de:0d:b8:c8:bb:35:50:04:59:
96:c2:57:23:72:39:a3:15:a9:d0:43:6e:ed:61:a7:
7d:42:1a:cf:d1:3e:c2:b5:d6:0e:98:79:63:dc:62:
3e:9e:69:2b:b3:8f:17:5a:26:69:54:d8:02:06:ce:
16:a0:2e:34:5d:63:3f:f2:35:3e:a5:04:71:80:2d:
da:83:9d:22:34:70:54:5c:95:37:14:61:e0:fc:e5:
22:03:32:1e:14:4f:ce:d5:16:22:78:90:4a:51:00:
a3:00:62:25:0e:4b:b6:26:d7:01:8b:82:4f:fa:04:
b8:2c:2a:b0:d6:ec:f9:65:55:69:fd:18:13:c7:2a:
40:b0:4f:a1:ca:4c:3e:24:d5:1f:ca:ab:11:f7:a8:
65:d8:08:12:2b:3b:b1:59:43:68:6c:a9:d8:59:f3:
13:70:84:92:b1:ba:64:6d:b6:b5:86:81:86:dd:83:
e4:fb:4d:26:5c:8d:f6:5f:74:34:52:e0:fc:cd:c0:
1d:4b:94:01:9a:d1:2c:f0:2f:db:d5:21:12:3c:54:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:43:1F:7E:94:A8:96:C6:A2:CD:D6:E8:09:F9:84:E5:8E:34:65
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:08:2f:fe:13:87:46:9e:f3:16:b1:5b:f5:35:01:e7:af:37:
25:e9:d9:50:be:da:f2:62:c9:82:36:a9:a0:ce:02:34:67:b4:
d0:e0:d8:09:8d:fb:46:23:00:0d:84:47:82:a3:42:bd:48:4c:
68:44:e3:34:a8:b4:7e:3c:96:84:01:9b:5b:15:5b:e1:fc:fe:
84:2f:49:05:6e:af:ba:f8:e1:20:eb:fd:95:d6:f3:36:f0:2e:
89:1c:f0:c5:ee:8e:bc:f5:9a:f5:72:76:13:06:36:99:6e:24:
4b:45:c7:00:4d:54:ff:26:7b:cc:04:3a:cb:7e:48:0d:16:b6:
f7:ba:6e:d5:e4:8b:3d:ce:78:e0:f8:fd:28:5f:17:79:d7:44:
0f:c0:25:01:eb:91:f5:24:67:a7:86:82:75:64:b5:f3:a8:62:
2f:e1:d3:f4:59:a6:f8:7e:43:9a:af:b2:82:c3:ff:08:9c:d6:
5b:38:69:6b:2e:63:e9:1c:f3:35:5d:7d:12:09:4c:c2:41:c2:
3f:03:9b:02:ce:e0:25:67:b4:1f:eb:97:7e:6e:cc:c5:f1:c3:
4c:1a:3f:5e:25:47:04:f0:5c:70:61:9a:e5:e1:01:6f:5e:2f:
5b:72:91:89:5e:1b:b8:2d:38:91:b4:ea:99:b6:6e:ef:83:af:
3a:79:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:53 2025 by rpki-client