Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: 5PSkMt0OGbyaZiXaKV6EV5IsTqiVQ/DsJbC5eDCNIvA=
Subject key identifier: 77:67:70:E3:BA:4C:D2:EA:B2:4B:D9:3B:81:6D:40:DF:12:C2:79:FB
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 0194BD4EB0F18FD4F365E1095EBAD92D03EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0777
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: 1M5n/aL3uwfrwlZrRy/DQhqMWdZOZfpsfC5Gf8p8d3w=)
2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:f1:8f:d4:f3:65:e1:09:5e:ba:d9:2d:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=776770e3ba4cd2eab24bd93b816d40df12c279fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:ae:0b:56:7e:f6:f9:da:e6:fa:be:fb:c5:
44:94:63:87:6f:9c:96:b2:24:ec:25:12:2c:fb:a9:
97:4e:eb:6b:f4:58:a4:57:a0:e4:85:82:04:4a:05:
35:2c:f2:48:07:07:77:ca:1e:19:99:23:5f:72:c0:
7b:ea:30:a1:43:9a:fd:b2:b8:53:7a:60:37:a1:96:
d8:90:d6:98:35:48:6b:2c:84:ba:bd:40:06:52:02:
89:44:e0:6c:21:3f:a5:e8:26:98:7f:b5:32:45:6d:
bf:d7:53:61:10:f6:95:d1:ba:de:6b:f2:14:55:b0:
82:0a:9a:26:7e:89:2d:a3:51:35:ee:2b:f8:b2:00:
54:4b:9d:8e:ce:58:88:5f:b7:e9:c7:9f:2f:09:6e:
1a:b4:9c:e3:55:be:12:a6:82:b5:88:e9:89:02:c0:
34:f3:e5:f9:cf:3e:93:fd:0b:87:da:fa:fb:e7:be:
b5:a1:62:26:19:c3:1f:b6:69:09:4a:e3:31:02:31:
6b:4b:11:7f:ec:de:d6:61:b5:92:7b:0f:2f:11:a1:
9f:f1:74:7b:da:61:c5:bd:5c:f9:22:ef:a1:15:39:
c7:4e:87:3c:83:13:d5:b7:e3:2e:a4:ce:a6:17:b6:
e8:e0:ae:a1:bd:cd:23:e1:96:46:81:51:81:3b:32:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:70:E3:BA:4C:D2:EA:B2:4B:D9:3B:81:6D:40:DF:12:C2:79:FB
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a0:25:76:8c:6e:79:7e:1b:31:4e:42:84:b2:dd:85:20:f1:
cf:bb:37:76:0a:7d:d3:f6:3a:47:87:0a:87:01:92:6a:71:10:
8e:25:a2:62:90:9c:20:d5:4a:0a:97:b0:a7:91:0d:2c:28:8b:
62:b2:1b:2f:9f:e8:a8:5d:b4:ce:b7:2b:27:fc:a7:81:55:94:
6b:4f:a0:9a:ad:f8:39:a5:ed:9a:b9:df:bd:fe:a4:e6:41:19:
e0:93:24:dd:25:69:77:5d:f7:40:4c:63:54:46:cf:59:1a:79:
d4:59:b6:09:b9:29:1b:e8:80:df:55:58:54:75:e9:26:ec:7e:
97:fb:61:85:e2:59:67:14:a3:c4:91:25:8a:07:82:3e:d1:f1:
90:82:91:42:ee:6c:cf:8a:51:bf:ec:63:6e:f4:40:fa:ce:55:
c4:74:56:40:87:3d:c4:7a:7b:20:ca:10:ca:9e:d7:77:db:db:
ac:17:4b:83:59:20:a5:66:79:d9:70:77:94:aa:83:a9:0c:3f:
ad:6c:3f:f2:50:96:c6:cf:2a:0f:61:b6:dc:b2:9c:36:43:3c:
5c:c0:e0:e7:58:ea:6a:c7:76:2f:80:13:3f:5d:ad:af:37:17:
0f:df:4f:40:8a:84:cc:a5:5e:68:6a:9b:5d:79:46:ff:80:38:
ab:ee:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:56 2025 by rpki-client