Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: 99v5v31rm90lHBzG3gouWNYn/7AI84PQqZai5PukhSM=
Subject key identifier: 24:C6:CE:4D:1C:80:E3:EB:5F:A7:7A:63:89:D9:8F:D0:6B:34:6E:1A
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 0194BC3C805793831C1D2B5B5AD458F88F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: Nq1oJXyMmKeuYEeCdQmtstVTHQ1Td/eOoPSQDhYfY2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:57:93:83:1c:1d:2b:5b:5a:d4:58:f8:8f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=24c6ce4d1c80e3eb5fa77a6389d98fd06b346e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:3f:bd:20:da:d0:7a:62:89:73:cb:0d:57:
f7:b6:8d:26:4c:f1:43:8e:46:f8:58:d8:6a:ab:ac:
9b:d0:6d:c6:b5:9e:fe:29:cd:7f:68:c6:24:4c:4a:
eb:48:1d:ec:38:b0:eb:60:a2:87:66:36:5d:8d:96:
f0:6b:d9:f4:aa:b2:c2:67:4f:6f:0f:f5:fd:be:fa:
ab:bd:75:74:2a:65:55:46:be:f8:d8:cb:cb:dd:be:
c5:c9:0d:c2:a3:e7:9f:02:24:2b:7b:88:4d:30:1f:
23:b4:19:6f:a9:84:5d:8f:92:2c:61:52:7d:02:53:
5e:46:a3:d4:99:c5:68:18:62:74:8a:d8:63:f7:11:
21:ee:47:87:e0:6a:d1:b0:6f:0a:bd:40:04:23:c9:
21:0f:a1:cb:3a:a7:78:47:5e:c2:31:c7:24:3b:bd:
8a:1a:cf:b2:37:1b:3d:2a:eb:16:08:82:b0:a7:6a:
94:04:22:2a:d1:17:ae:66:e8:f3:4e:d4:32:8e:da:
fb:1b:a7:8a:76:9f:ad:ef:10:ee:f3:f4:3e:13:67:
90:06:7d:5e:ce:8d:fb:92:61:76:7b:c9:48:89:ee:
b6:bb:34:4c:ba:c7:11:c2:91:7f:9c:5e:ec:5f:83:
d6:53:b2:42:f5:30:a5:79:9e:b2:69:7d:a1:3d:79:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:CE:4D:1C:80:E3:EB:5F:A7:7A:63:89:D9:8F:D0:6B:34:6E:1A
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:72:d0:62:87:82:72:8e:1e:cb:0c:f5:75:93:fb:8d:9c:
3e:c9:76:a1:a7:97:af:ac:7f:72:30:ca:fc:69:fe:b1:d9:46:
62:fa:76:f7:50:a0:0d:80:4a:f3:d0:52:c1:06:9b:08:a1:e1:
ef:2e:21:c9:b3:3d:17:1e:be:3a:25:f8:94:01:e5:fc:31:20:
31:e1:7f:89:04:45:d1:4e:db:4a:92:61:ca:ba:29:05:de:7b:
48:25:78:f7:88:8c:d8:6b:18:dd:2e:34:e5:ea:5b:7c:a4:74:
e6:11:54:ac:80:c0:4d:85:b7:9b:4a:38:09:fc:7b:b7:a6:63:
a9:cb:43:c1:3c:5f:68:a4:9e:55:14:23:80:ee:d6:7e:5d:26:
ad:6c:ae:4e:4a:1b:63:41:ac:48:25:a9:c0:3d:6f:62:39:54:
42:ed:cc:31:78:d1:00:48:4d:fc:07:f9:8b:f2:91:b0:5b:71:
96:1a:bc:04:f1:cd:4f:51:a2:00:9d:02:3c:c6:7c:97:f6:d7:
be:38:0c:4f:c4:13:f9:92:5c:b1:47:5c:c5:b1:e8:aa:7c:e3:
c4:2a:6d:63:b3:80:59:f2:c9:70:8d:4e:35:d4:1e:9e:4c:3f:
b3:e7:93:08:c8:ca:4a:d4:42:47:ad:26:0f:d3:96:8e:66:84:
37:20:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:20 2025 by rpki-client