Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: CDGwF+fIGNHvgUJTbg4wsP+PrceVCopBGnQwpLkN17E=
Subject key identifier: 71:DB:B3:82:41:31:C2:34:DC:CD:0B:31:64:08:6C:76:51:B8:C4:86
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 0194BC3C8ADF7BA7D6CB2A4A17A49D8BC65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: MusshkHS+dssHMUUh4m9YTbL1E6cDTqnYC/c/7DMKi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:df:7b:a7:d6:cb:2a:4a:17:a4:9d:8b:c6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=71dbb3824131c234dccd0b3164086c7651b8c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:2a:aa:df:a7:36:8e:52:09:4a:12:e7:b5:
06:37:26:6e:fc:0e:b6:7c:c0:7f:1b:af:6c:60:25:
09:c5:57:cd:15:98:4e:73:06:8e:b5:14:d7:45:00:
ed:33:88:0e:3c:81:63:0a:da:0d:7e:22:45:1d:1d:
31:d5:4d:88:05:64:a7:f6:df:71:31:f9:40:87:34:
a6:96:49:37:2e:d0:3c:a9:7d:fc:1b:1d:57:e2:9d:
12:0e:78:3c:44:2f:ce:06:39:11:74:c2:1e:b6:f9:
7d:a5:10:48:68:5c:02:d3:95:5b:f8:28:66:db:fb:
19:d6:8a:37:49:c5:61:54:22:3a:61:54:a4:12:59:
90:d3:9a:e0:4a:6a:dc:22:02:d0:94:4c:44:38:25:
e4:93:c0:79:82:56:5b:44:70:1e:fc:76:10:61:8b:
04:55:c4:21:43:91:af:07:76:a5:e1:1b:02:e1:31:
fa:49:f3:57:df:67:b1:8f:63:fb:54:6a:77:59:81:
1c:a4:17:c8:38:87:b0:28:65:65:b4:1e:2d:11:43:
3d:33:1f:dc:81:fb:dd:37:56:c4:fe:75:2f:8c:92:
4a:f7:19:f9:23:43:a4:74:bc:15:eb:b3:83:e8:bc:
f5:ae:af:7a:d3:f9:fc:bd:bd:bd:9c:8c:bd:ff:72:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:B3:82:41:31:C2:34:DC:CD:0B:31:64:08:6C:76:51:B8:C4:86
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:4f:fa:35:8a:f7:97:15:e4:31:1b:b3:4e:93:7c:7c:ad:
dc:16:3f:c3:74:e7:3a:33:60:92:59:a3:98:ba:77:50:36:c7:
57:04:54:22:b6:cf:b5:79:80:c9:81:fd:ea:66:78:4b:51:35:
84:d1:ea:36:fb:0a:3f:eb:7b:96:cb:04:64:f0:d0:cc:b5:57:
83:0d:8f:e9:4e:5a:36:9d:69:23:c6:8c:75:1a:5a:3c:8f:5c:
65:4b:28:a3:81:de:f6:94:1a:59:43:b2:81:29:8e:88:4f:0b:
26:5f:8b:0c:19:fd:b3:d0:ea:85:36:e8:ef:31:b8:ac:ec:ac:
b3:9c:01:e7:66:03:22:ef:fb:7c:63:eb:9a:ca:d9:c4:61:fb:
98:ff:2f:fc:f6:61:14:1d:64:57:dd:7c:f5:fe:7c:3b:5e:a5:
03:71:42:3a:1c:68:12:bc:9d:ae:45:97:73:3b:5b:25:18:3f:
64:ad:74:eb:7c:59:32:1c:3e:b9:32:55:ab:d9:f5:95:3d:7b:
ce:a0:c4:aa:08:ca:a2:44:70:86:c8:fb:72:e7:da:a9:8e:b1:
78:b4:d0:9e:b0:18:e0:2d:f5:4c:c0:54:4a:49:76:6f:cd:9e:
3d:21:cf:eb:85:cf:2e:ae:f7:d5:1d:67:e4:95:a0:69:a5:86:
79:83:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client