Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier: 3K98KME9fNTmS3/725TBPMZIcb2uBX9AtZK93sw6LN4=
Subject key identifier: DE:5B:D7:C0:6C:B2:4B:96:EE:2C:90:98:E1:A3:DE:58:F7:EE:70:84
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 0194BC052FAE0711854D6ADFABCE2D34B4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number: 12FF
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: FPJxrQy3V6+wbzcH/gaqC8vamYdP20WaJZPZfp/KI9M=)
2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2f:ae:07:11:85:4d:6a:df:ab:ce:2d:34:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=de5bd7c06cb24b96ee2c9098e1a3de58f7ee7084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:f9:00:ab:43:69:8c:ca:a7:fd:84:6b:ef:
3c:3c:b5:00:98:01:f8:04:c7:a9:86:64:ce:5c:93:
9f:e1:0c:b3:1e:ef:de:89:78:91:54:27:2f:ff:b6:
91:8c:72:3f:e7:38:a2:7f:fe:f9:0d:08:24:92:15:
3e:9d:67:47:77:9a:93:3a:aa:d1:5d:09:a3:23:0e:
b7:82:95:10:d3:1c:71:f1:7f:ea:05:07:3e:8b:2a:
cc:90:97:1c:6e:82:1f:ed:f7:2b:0b:2f:86:2e:12:
ca:11:2e:df:6b:a1:16:f7:b9:56:37:84:5a:38:35:
ab:cd:5a:a0:01:0b:c5:7a:07:e2:69:69:25:b7:52:
ef:36:80:8d:10:8f:f6:39:d1:99:df:21:9c:36:89:
c4:40:f1:26:a1:d9:71:f5:9b:c8:b7:ce:bf:2b:3b:
aa:40:a6:29:2c:a2:d1:7b:de:b5:ba:e0:91:5d:ad:
e2:5d:b8:20:30:dd:2f:3b:54:bc:c5:95:fa:28:78:
98:be:ed:f4:60:f9:ce:21:a5:57:b4:4c:56:01:45:
98:9a:e9:ea:d2:eb:c7:93:7f:28:1d:f2:f0:5d:d2:
bc:86:ba:27:63:3b:d1:47:f4:96:ae:b9:1f:51:3b:
99:98:4b:83:b5:be:2e:d7:11:c5:5c:f5:07:d9:b3:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:D7:C0:6C:B2:4B:96:EE:2C:90:98:E1:A3:DE:58:F7:EE:70:84
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:89:2f:6e:d6:34:51:f5:8d:87:5a:e4:45:24:91:7e:3b:
4a:e8:03:1b:16:73:66:fd:28:c7:74:49:c8:e3:0e:dd:0d:af:
e4:58:71:f5:54:8f:ff:b6:4e:9e:cc:7a:d5:64:dd:86:69:12:
b7:04:79:7e:81:43:97:c2:18:3a:23:51:a1:ac:e3:ad:08:67:
d8:9b:3f:6f:91:1d:05:1a:71:4c:b9:a5:3c:df:b7:4e:2b:a8:
bd:f9:66:68:de:f8:c8:ed:36:96:ed:69:77:7b:4b:b8:9b:3b:
b5:e7:87:79:99:2c:cc:f4:6d:63:5d:88:fe:1c:34:9b:81:d4:
fc:cd:43:8a:36:f4:5c:08:a0:43:02:d3:d8:99:e2:11:17:2c:
9d:98:de:9c:f9:6b:bd:b3:7b:10:42:1a:30:bd:8e:73:a9:d4:
cc:86:56:14:93:86:c5:f3:cd:7f:db:46:6f:98:1c:78:87:08:
d1:f9:0f:29:1d:24:e0:da:17:db:12:42:a7:7f:07:61:73:41:
bd:65:b5:ff:ba:76:3e:90:ae:28:33:68:6b:87:56:2b:69:f4:
02:a6:a1:6d:7e:4d:56:9d:b2:37:78:4b:0a:87:b4:24:e2:38:
11:13:45:82:c0:62:f3:ed:8c:8c:28:3c:d4:6a:de:fc:ae:16:
34:4c:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client