Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: 2NDCfoitqtUqStnn50Cxubj9qVub9pkOW/t0FmCqEa8=
Subject key identifier: BC:C5:C0:63:0F:EC:79:D2:3E:69:6B:79:82:DC:D5:C4:24:D1:32:E0
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 0194BC05091BF7C35A4B70F804B8C08C029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: 1nkoOgvcoUPvClmx+zSTv3F/Nm3fjbHUbwvH/Zp+RKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:1b:f7:c3:5a:4b:70:f8:04:b8:c0:8c:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=bcc5c0630fec79d23e696b7982dcd5c424d132e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:72:74:54:56:d4:eb:29:0d:e3:7e:2e:ab:
6c:4c:11:7e:c7:23:0a:2b:c8:9b:25:53:5e:08:1d:
d1:d8:4b:99:e6:fe:9a:ba:03:f1:31:85:47:da:08:
7b:c8:a7:c9:eb:24:26:26:65:68:6e:4a:68:43:fb:
f9:e4:31:e3:8f:af:c6:ae:f2:d3:47:1b:ac:56:5b:
ce:c7:48:8e:99:64:09:06:9a:f6:93:9e:a9:52:a8:
72:44:47:e4:d1:49:2b:4a:40:6c:2f:33:79:a7:37:
a1:78:f2:47:4e:c2:3b:9e:ec:f3:41:14:bd:33:23:
43:38:37:3a:4a:da:4e:2a:5b:fe:39:50:0d:28:dd:
04:2f:1e:89:51:a7:bb:e5:3e:7f:26:ec:d9:68:18:
f5:a6:cc:32:8d:8e:56:63:e3:a8:06:78:61:1d:30:
72:20:5c:f4:9a:2c:44:d3:69:f8:72:fc:a2:96:bd:
35:07:98:c4:98:61:5b:af:f9:b7:3d:d8:8d:43:31:
27:61:fb:96:10:35:f7:c6:ee:f5:35:01:bb:88:96:
4e:74:db:2e:97:a3:ae:4c:91:93:ad:6c:b2:4e:58:
0d:6f:f9:97:cb:57:88:ae:b3:9f:22:70:d4:c3:65:
ae:14:25:be:d9:80:b7:f4:56:18:aa:49:fc:f0:fa:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:C0:63:0F:EC:79:D2:3E:69:6B:79:82:DC:D5:C4:24:D1:32:E0
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:1c:49:fc:18:08:cc:5d:7c:0c:bf:c0:80:3e:2c:9c:79:
40:ee:63:7a:41:5d:91:da:0d:7f:d6:82:99:1b:1f:f7:3e:e4:
1d:a5:b8:df:98:c8:62:03:06:6e:8b:99:b5:91:a1:b3:62:61:
53:80:cf:30:a3:52:26:c6:36:6d:ec:69:9e:0c:57:0b:88:01:
61:19:ea:9b:4a:19:4b:c3:6f:17:37:9f:c0:9d:1f:e7:b1:9e:
87:32:b7:79:71:e3:c3:c0:34:69:a1:25:5a:1c:c1:2e:53:51:
bf:54:e7:52:2d:93:80:f8:88:e3:3c:02:53:11:58:e9:6a:25:
86:10:07:fc:0a:4a:df:83:af:dd:57:4f:56:40:f4:48:a6:0e:
0d:64:1f:3b:6c:d6:de:71:e6:76:26:7c:04:eb:ee:84:4d:7a:
70:c4:c0:a5:11:62:91:10:80:49:99:9e:69:41:0c:1d:a7:41:
0f:a2:f4:4f:30:9b:e7:f6:6e:1a:52:67:dc:46:61:b7:9d:26:
82:da:b5:84:eb:03:e1:e2:53:4c:e4:7e:ed:e5:6a:bc:69:c1:
04:f2:18:f1:b5:45:41:27:aa:3d:22:91:d4:bd:e3:71:7f:21:
76:f0:6d:bb:b6:aa:1b:0d:a0:06:9b:13:78:7f:de:c5:04:80:
a9:75:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:30 2025 by rpki-client