Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: Mr9zcKyY0uYqsJQU/dqj552g4u+G/6M7YUod4BUgUL0=
Subject key identifier: B5:4E:DC:EC:2D:C4:0A:71:81:24:D3:41:99:BB:F8:3E:87:65:3E:F5
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 0194BBCE2824722D44A5B07CF6C9195A8D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 115D
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: 5rXPFp1a3sDdMvsihxsqC00HMnFUYzyrd0GV0lnFwHI=)
2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:24:72:2d:44:a5:b0:7c:f6:c9:19:5a:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=b54edcec2dc40a718124d34199bbf83e87653ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:cb:93:53:fa:29:35:0d:39:b8:1e:80:dd:
d1:42:90:2a:83:47:e3:fd:10:7f:1e:74:d8:64:56:
61:05:30:a7:2f:1c:24:32:72:02:68:4f:a4:d2:f7:
9b:20:74:57:81:db:a2:50:99:ba:e5:d6:10:fe:b1:
8f:c4:14:7b:df:ac:2e:79:6a:39:d3:bc:c4:77:b8:
1d:30:57:40:aa:59:78:ac:03:6b:7e:5f:b7:13:46:
a6:5f:15:3e:68:a4:5c:c9:f2:8b:1f:2a:1b:9f:ff:
ae:2c:66:98:58:d7:67:85:c1:dd:a1:46:38:42:da:
f2:6a:b8:b0:de:dc:48:f8:92:a3:71:35:8b:1c:fd:
80:89:5b:ee:0a:38:69:39:2a:4c:cf:8e:fa:d3:e7:
81:ee:e8:fe:b7:b7:aa:7f:c5:fb:df:ba:64:98:95:
88:8e:3a:54:30:40:6d:f3:c0:28:b8:5e:11:81:18:
4d:43:d6:ec:3d:8b:72:2e:8d:00:e7:83:fd:31:b4:
94:42:cb:65:0a:bf:77:48:e7:90:48:1c:d4:81:0d:
b1:a4:3b:cb:16:b1:fb:a2:bb:b5:c3:69:55:4b:a0:
69:b0:76:93:b2:af:67:84:5f:06:2e:56:9f:f7:c6:
e8:5c:ed:ad:04:1b:7f:38:83:9b:99:c0:e1:2c:bc:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:DC:EC:2D:C4:0A:71:81:24:D3:41:99:BB:F8:3E:87:65:3E:F5
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:60:bd:6c:b8:3e:85:92:d5:c9:d8:7a:64:56:85:ee:cf:
04:23:d6:0e:6c:ca:36:f5:4f:23:2f:1b:6a:e8:24:d2:c4:f3:
70:2a:27:6e:e9:12:bd:92:e5:72:2b:be:92:f2:20:1e:de:3d:
16:42:4c:22:27:59:7b:4c:ab:10:4b:04:d2:98:09:03:d5:cd:
d2:58:85:ef:2c:40:48:9f:80:91:59:f5:36:13:6a:43:08:d5:
d0:58:a1:97:e5:32:bd:2d:83:a5:cc:64:f2:a5:9a:b4:68:70:
68:ee:8a:14:17:bd:4a:9c:f5:33:eb:1c:70:40:8d:49:b8:f1:
8d:1b:84:fc:38:6a:83:f4:d3:2b:ec:26:20:3b:97:dd:e0:9b:
04:ec:00:ba:6a:ac:62:9a:19:a5:2b:e5:8d:52:32:48:4b:c2:
bc:fd:a2:d3:c1:11:3b:3e:d9:a5:60:d4:cc:b6:fd:ac:22:41:
f7:71:8e:52:d9:c6:f5:d4:2d:59:88:84:cb:02:49:3a:1f:3c:
df:37:d6:a5:11:af:9d:c8:1c:c4:a8:ef:6e:04:b8:7b:63:ee:
d2:78:6a:8c:7f:1a:0b:a3:5f:b1:9c:cd:d3:e6:59:e6:a9:a9:
f9:fb:5c:00:5a:11:35:e5:e8:74:66:03:db:62:f1:ec:58:6c:
b2:4c:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:59 2025 by rpki-client