Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: WrTr4Xk/HZ8IPZSyQgeI1A4zzxFEAQaW35dlkpVVNxE=
Subject key identifier: ED:70:23:C3:D1:02:57:EA:7F:E2:21:9C:AA:CF:C1:39:6D:1E:E0:95
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 0194BC3C18D22849902349239E9572991A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 09FF
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: C5Zd394yEFatliI7kXPp/XT13cq/0WLI2i6prIpYcHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:d2:28:49:90:23:49:23:9e:95:72:99:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=ed7023c3d10257ea7fe2219caacfc1396d1ee095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:a1:61:da:bb:6a:86:1d:a9:c2:2a:c3:4f:
67:50:14:bb:3f:38:b3:d0:08:82:bc:6c:bd:49:b5:
7d:95:dd:86:18:25:f4:bd:7b:2c:86:5b:b0:ad:3b:
15:ef:fa:ec:78:b6:65:69:9f:e5:d4:d8:d8:2f:cb:
3d:13:ba:55:d3:4e:72:df:bd:66:33:92:4d:7d:8f:
08:0b:2d:33:93:e2:ce:ba:2d:57:eb:0d:d5:d8:a7:
cd:8a:7b:67:9f:0b:ce:81:d3:c3:7e:d5:2c:1c:f9:
94:a6:e0:c0:3f:57:2c:70:81:85:05:67:3e:1b:72:
07:bd:61:97:46:cf:00:69:42:6d:e7:7d:11:02:62:
4b:a7:c0:58:1d:81:7b:55:63:fa:f3:c1:78:e1:2f:
92:cf:a0:9e:a5:af:ad:ef:99:23:62:a2:30:a0:41:
b3:49:fa:6e:d1:f0:47:35:b1:fb:21:67:c3:12:b8:
ee:27:db:e6:d5:0e:e9:dd:f0:be:f0:73:b5:3c:d7:
06:45:76:5b:08:59:9c:48:af:69:0c:3d:19:bc:91:
5d:ee:98:7b:da:54:fa:86:3c:eb:20:6d:78:b8:00:
11:74:da:f0:81:71:58:23:e1:b7:da:8e:e0:9a:5b:
3a:c6:ef:43:bb:31:19:18:ec:69:47:df:66:77:6c:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:23:C3:D1:02:57:EA:7F:E2:21:9C:AA:CF:C1:39:6D:1E:E0:95
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c1:63:2c:d1:1a:95:ed:cb:84:86:e7:98:10:fd:ec:73:44:
4f:b6:04:6f:8f:c6:e9:8e:56:0a:ee:a9:44:16:8f:d9:87:cf:
6c:95:38:19:e4:36:be:3b:9e:53:b3:af:77:46:13:e8:ea:c1:
11:11:43:28:a8:6d:69:f0:36:07:45:3e:e1:00:01:1c:91:ba:
57:d1:c3:66:bc:9b:2c:5c:e0:24:53:11:c0:1e:e0:ba:39:b7:
7b:85:2d:87:f2:f4:1f:12:26:c2:e5:f7:61:aa:a8:b3:a4:64:
31:27:b8:3b:06:81:f8:09:8a:2e:56:ab:13:3c:c2:b0:55:5c:
ce:5f:a1:08:ff:d3:60:48:c2:9e:6d:5e:2f:99:63:a9:e1:fd:
47:15:45:52:49:35:3f:5f:2f:31:2d:4c:e3:f5:a2:21:22:63:
54:01:53:bb:9b:bc:a1:ca:49:8b:9e:e4:de:1a:f1:4d:15:cd:
aa:d3:c8:0a:e7:6f:a5:58:e5:98:e4:2f:e1:ee:da:01:1f:39:
e3:b1:71:90:e1:2e:84:04:01:19:12:2e:46:7e:4b:f4:27:cf:
4b:ce:6b:0c:a5:7d:ca:5e:db:37:13:59:f1:cc:47:e2:9c:2e:
43:f6:a1:c0:1f:84:ed:f3:f4:cd:23:95:8e:06:3d:ef:19:86:
38:1e:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client