Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: GPm0qTAAiDCQMJndxMax3kEDo7QKIF9ZeDF8cUStk9E=
Subject key identifier: F4:76:DA:8B:F2:A6:F3:65:A3:9B:B5:C9:8F:DC:E4:5A:48:8C:B6:4E
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 0194BCE088E3BE1B02D003108100C1DA0E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: WuCwdsN+yXJy5ZGX5+sLD1n7Jd33hLmxtJqzI5BubOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:88:e3:be:1b:02:d0:03:10:81:00:c1:da:0e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=f476da8bf2a6f365a39bb5c98fdce45a488cb64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:ef:e1:91:51:6a:26:dd:5f:00:be:f6:d8:
04:23:a9:80:b0:40:90:de:e2:6f:d2:9b:b8:c9:1e:
a8:c1:a5:1f:83:d6:66:59:13:10:ac:27:10:ce:14:
74:2c:ef:68:d1:67:ec:86:bb:47:80:81:a7:52:df:
b7:98:a3:ac:ec:e6:6d:b7:4f:55:4d:d9:88:e2:16:
8c:e6:80:95:59:61:d8:b0:6a:e2:8d:5b:ab:e0:40:
d9:f3:11:77:0a:f0:e0:c2:01:26:03:15:f5:d8:2f:
5a:74:e7:f2:b7:a8:13:48:8d:52:a2:b9:a3:7b:13:
42:fc:90:38:d2:cd:c6:bf:e4:e2:43:b3:5e:85:7b:
cf:1d:be:bd:47:33:d2:14:a8:04:66:14:d9:2b:79:
da:e6:0d:9d:af:c1:b0:2f:f8:15:58:06:e3:36:d2:
4d:c4:7a:c6:5a:f1:1b:cf:42:cf:85:fd:16:81:3b:
c9:b4:35:00:87:02:6e:0c:7f:0f:00:7e:1c:61:c7:
21:ab:05:44:5c:e0:ef:3f:57:24:89:3a:89:a4:10:
64:44:a2:ed:e1:39:f3:7f:4a:c9:7c:8f:85:ec:1b:
fc:28:64:73:42:2a:39:4f:87:a0:dd:4e:0e:d4:5e:
6b:be:e3:cb:d8:dc:ad:a9:a1:c6:da:ed:c6:9c:0d:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:DA:8B:F2:A6:F3:65:A3:9B:B5:C9:8F:DC:E4:5A:48:8C:B6:4E
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:5a:54:bc:20:40:7a:24:28:64:4f:ae:23:e7:09:5e:ac:
13:14:af:13:38:a6:20:91:3c:24:20:cc:a5:e5:75:92:a4:23:
18:f9:fe:28:f1:e8:bb:c1:20:fd:c6:01:42:2d:a3:bd:01:47:
f6:22:25:f2:c0:4f:3a:5a:5c:83:23:95:13:89:1d:1e:69:34:
e7:3d:ec:fc:58:9b:29:19:03:85:54:15:4a:ba:ec:d0:eb:da:
0a:a1:80:2a:fb:23:23:8c:d3:4c:92:15:f8:1c:a9:8d:14:29:
4a:d8:55:ae:96:50:63:ea:a4:46:31:f9:cb:35:53:fc:fd:60:
0a:50:3e:ab:bf:64:95:21:d1:06:5a:7f:51:db:50:4f:16:2b:
6c:ea:a3:4e:dd:b9:c4:8b:64:5a:98:8e:5f:17:99:e8:d2:81:
34:27:0c:25:5e:76:77:62:eb:92:28:a9:bb:2a:e8:2f:03:42:
c3:8d:4e:b8:5c:ee:16:88:13:5a:45:6e:cc:c9:65:db:13:12:
f2:20:e1:db:02:e7:69:e1:8c:ea:e7:18:d4:18:66:18:6d:12:
78:d6:4d:4e:ee:c9:1b:f2:08:7f:58:86:79:c4:18:43:e3:f2:
80:d0:62:d4:cf:25:d9:49:48:94:92:d9:56:95:07:47:87:b1:
79:d6:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:56 2025 by rpki-client