Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: zgZnJgMJI4Yi1JVNKysPw0aOaadT8moSqFr4WEv7NwI=
Subject key identifier: 1E:F1:3D:79:D1:3A:03:70:CD:77:A4:8B:03:7C:AB:A6:A4:63:05:58
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 0194BD17B3A002A332F16C23471AA5B82AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 08D3
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: Qg9i64RiZNuaGzWCDqi/+fgefQYKjCEXI0c44gpsVcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:a0:02:a3:32:f1:6c:23:47:1a:a5:b8:2a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=1ef13d79d13a0370cd77a48b037caba6a4630558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:b8:20:aa:4f:40:b2:3b:25:3e:c9:0a:aa:
16:7c:fc:f9:ad:17:10:8d:37:fd:18:ea:1a:0a:5f:
1a:67:4c:0b:ad:54:49:15:bd:15:a3:6e:63:26:06:
4d:02:43:94:cf:7e:44:f1:6c:22:fe:07:2a:ac:72:
4a:91:1b:38:01:04:17:1c:1c:eb:af:33:3e:45:0f:
6e:60:34:1f:14:a2:ff:3b:bf:08:88:3e:7f:1a:09:
9b:ab:94:87:e1:6b:18:9c:83:63:3b:9f:ba:fa:82:
dc:fc:95:f8:9b:ac:fe:0d:dc:fe:b2:a7:9b:6f:06:
06:97:dd:72:31:a4:1c:86:3f:e9:9c:57:9e:9e:dc:
cd:b4:6a:23:e9:2f:f2:a8:fc:e0:ce:a7:4a:c8:9c:
71:77:4c:6b:13:e2:45:11:94:a2:1d:1c:3c:17:b8:
3e:29:26:b0:b1:93:f2:e3:04:b9:92:69:f8:db:3f:
68:b6:16:b7:1b:a9:c6:81:b1:35:88:00:a6:1f:3b:
14:d3:90:92:20:f3:84:c4:bb:10:f9:6e:2b:d8:e5:
ab:92:28:16:da:78:c0:2f:9c:c7:f5:42:a3:1a:83:
28:e0:a8:75:09:4d:a8:2c:e6:33:4e:0f:ad:88:ec:
1a:17:6f:57:26:9b:aa:49:46:30:2d:a2:1a:25:c0:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:3D:79:D1:3A:03:70:CD:77:A4:8B:03:7C:AB:A6:A4:63:05:58
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:09:38:91:90:73:41:84:4d:50:9e:bd:6c:72:10:67:8b:
a6:85:e3:79:ae:03:70:28:8e:20:bf:51:2a:eb:3c:59:ed:37:
7e:0e:25:bc:9a:32:04:17:fb:61:71:b3:e6:72:e9:cf:7e:69:
b7:1a:79:70:45:3e:46:4c:58:95:aa:e0:e5:43:76:ee:ab:65:
58:e3:ed:95:33:96:63:6c:b8:16:d3:c9:f6:6a:2a:2f:46:1f:
43:34:85:bf:ac:a8:62:40:c6:5b:7f:16:12:73:43:cc:e3:c6:
2b:5b:77:90:74:8d:22:32:87:93:bf:d7:23:f8:dd:de:f3:a7:
9a:67:d3:22:b0:bd:12:f2:81:22:38:42:97:a7:4d:4a:b6:1c:
e8:3c:b1:dd:3f:c2:5a:e7:15:93:72:4c:65:fc:b5:43:71:cc:
24:81:f9:83:8a:9b:54:9a:01:98:4d:a0:ea:ee:5e:6f:87:d1:
db:af:94:62:bf:de:0e:28:90:de:08:1d:3d:37:61:8f:13:5a:
5e:22:d5:21:ca:92:23:08:77:72:7f:d5:e0:8d:a6:c8:38:d2:
29:3a:af:cb:59:90:db:86:93:55:6e:0d:42:fd:56:68:d1:5b:
cf:d4:f5:05:61:03:14:1c:ef:26:6a:3e:78:db:bc:a8:7e:b9:
52:55:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:42 2025 by rpki-client