Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: kssCgbamSRq2SUPBOjodWog5CxMLeyHJwyBw7j5sFTQ=
Subject key identifier: F9:AD:7C:42:E3:EB:0E:6E:62:DF:97:B7:69:7E:03:32:0D:A2:85:1A
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0194BC3C2A0D5917EB3747486FCA2C8679A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0904
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 2PPfPp92gP7ZN1XYTs05NdeNFe0.roa (hash: VL63d4eCMXJ85KSNT/DG966gx4kgp15bsn+i+OHsgV4=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: xhZodiphnftLJOzS91tNE4BkTrYBgwuv9ZmrIoQUWfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:0d:59:17:eb:37:47:48:6f:ca:2c:86:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=f9ad7c42e3eb0e6e62df97b7697e03320da2851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:cc:97:af:ba:40:30:c2:5d:9c:7a:4b:9f:
09:ec:84:c9:3c:8d:ee:a7:b4:58:a5:b4:da:2b:fd:
66:63:b1:06:dd:af:ba:2a:4c:a7:98:fc:ec:64:b6:
cf:17:ab:d9:4c:8a:78:8e:80:57:14:b2:d6:93:66:
23:d8:18:b2:fc:94:9c:f7:92:22:94:bd:f9:ef:f1:
80:4f:11:fd:74:86:b5:d7:ae:50:c6:c1:23:61:80:
50:c0:dd:4e:b7:0f:4d:fd:d7:fd:7d:f4:3f:44:66:
58:3e:2f:6a:b7:1b:a4:96:ee:be:f5:1c:f1:d8:bb:
ad:fb:32:b1:f3:c9:e7:82:02:ad:42:7e:b7:31:09:
9c:2e:b9:62:6b:14:0a:6e:da:e8:90:78:17:ba:af:
d5:fd:31:2e:ec:21:25:a9:0f:7f:cd:d2:50:f6:8e:
fe:72:4e:10:de:db:8b:59:ea:83:0f:d8:28:94:20:
a9:bc:24:4a:49:2c:44:83:73:d1:04:c0:62:2a:4c:
bb:53:75:4b:de:bc:0a:40:97:e9:88:12:c6:93:da:
f6:3a:68:73:19:05:5d:30:93:6e:e0:c3:25:59:be:
8e:f4:dd:27:59:0e:d8:e8:ea:e0:36:08:c3:ab:ae:
94:a9:81:5b:88:30:66:8a:06:f2:02:54:5c:82:fc:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:7C:42:E3:EB:0E:6E:62:DF:97:B7:69:7E:03:32:0D:A2:85:1A
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:9d:d3:a3:18:7f:bf:49:75:07:56:32:74:83:99:08:29:
ef:f5:a0:2b:e7:a1:5a:02:4b:1f:f2:f1:c7:e7:e4:c1:99:3f:
38:03:12:4d:d9:22:7f:c9:5e:b5:ad:3a:75:12:1d:ec:58:3b:
f7:53:09:c7:46:19:bc:4c:03:d3:8b:24:0d:31:42:19:9a:1e:
99:77:13:81:a8:b3:e7:1c:bf:d2:69:dd:21:c7:9f:80:92:41:
2f:ff:fb:c3:8c:b3:a1:f8:1f:f0:53:9b:77:71:31:2e:64:76:
66:39:cf:06:71:62:1e:d6:3a:35:65:b0:61:4a:8f:28:85:9d:
d4:49:02:5a:eb:fd:ad:fa:7e:90:13:c9:59:d0:5a:dc:b3:aa:
3c:51:e7:87:df:dc:e4:82:a8:a3:ba:02:0a:d8:36:c4:5f:35:
43:33:63:0a:3c:6e:83:74:e3:cb:1a:fc:76:ec:a0:99:67:3c:
eb:69:2b:93:b9:de:76:e3:c1:2a:f0:70:fa:8f:67:33:b2:02:
46:62:c7:7a:0f:a6:23:0d:fa:f1:61:9e:ca:69:b3:3a:89:e8:
c1:b8:86:00:44:df:2d:37:dc:86:aa:1d:c6:2a:b2:3f:77:92:
d8:6b:76:a1:62:cc:32:d0:ca:3f:fb:80:a8:93:31:cc:f4:3c:
d2:19:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:55 2025 by rpki-client