Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: IG7vWyFD5mvYRXCnCL2Rljp1sQB225cSypb5JJePwds=
Subject key identifier: E9:B9:E8:36:95:D3:22:0E:36:47:35:FC:6A:AA:95:FF:D2:18:A2:45
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 0194BD4E60B5CFDCE3CBDD1C782D0EA8B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0D3A
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: Gmse3c2Mx0VmGTr1FoQdQk0MU4yi08bstNqLtWfzhLQ=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:60:b5:cf:dc:e3:cb:dd:1c:78:2d:0e:a8:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=e9b9e83695d3220e364735fc6aaa95ffd218a245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:31:b0:ba:b7:9c:bf:cb:ac:5d:76:96:12:
b0:49:14:74:5c:28:71:b2:0a:45:27:f2:88:78:f6:
21:80:10:68:fd:5e:54:0b:54:94:77:e7:fb:60:fc:
32:85:ad:1f:ce:a7:da:0c:60:74:8d:55:86:be:e9:
1a:7d:d6:73:93:0f:95:88:18:ea:99:54:91:e1:fe:
64:63:13:10:87:50:62:43:56:6d:7a:bc:83:73:bb:
99:f7:3b:20:c3:a8:3d:fb:67:1d:60:19:10:a7:26:
07:6b:2c:dd:1f:5c:5a:f4:9d:78:e2:db:dd:c3:bd:
2e:9e:65:3b:c7:91:df:06:20:82:ce:62:8f:43:e6:
81:71:f5:76:7f:48:d5:b6:3a:77:0c:92:28:27:a8:
05:03:73:5e:d9:fa:71:bb:28:1f:2a:e4:ee:cf:e2:
23:ad:b7:50:48:ea:93:62:41:29:e0:6e:bb:2b:03:
95:33:a9:40:b1:17:f7:e2:57:bb:ff:d4:e9:5b:7c:
e9:3b:b2:3d:b2:c3:e3:be:4b:ba:76:d2:df:f3:e8:
d3:9f:92:f2:7c:40:af:f7:14:de:c5:f5:91:4c:1d:
ee:d0:71:22:d8:57:45:ec:af:ea:0e:bd:53:b0:57:
c4:32:2b:30:58:e5:af:cc:32:a6:be:31:17:b0:8a:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:E8:36:95:D3:22:0E:36:47:35:FC:6A:AA:95:FF:D2:18:A2:45
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:f5:04:05:c5:a7:d6:7e:ed:30:25:06:b5:a0:70:89:f2:
0c:af:a3:03:27:a3:aa:df:e9:81:2f:4c:f3:a0:d7:ab:5d:7e:
b7:86:b8:09:28:80:fd:f3:a4:77:43:f3:78:1b:dd:05:87:a1:
63:5b:c8:e0:13:0a:b5:7a:ce:09:02:4f:f5:c9:92:93:71:ac:
c2:bb:86:d0:62:ae:34:af:8b:e1:41:99:be:ca:3a:8e:cd:6a:
66:b1:58:97:af:b2:c1:fe:a3:0e:1e:3c:cf:3b:b0:30:3d:ab:
33:c2:c1:d5:ac:e9:b5:24:46:9b:37:c2:98:66:c0:89:4d:9b:
ea:a0:43:0a:25:7d:d3:fc:df:98:8e:47:be:56:c7:5e:18:9d:
e9:34:77:f1:6a:a3:99:fb:94:82:1f:a5:f1:95:4b:82:d0:2f:
f4:a8:53:27:c7:8f:9e:04:4a:68:9d:d8:09:96:d9:e2:bd:06:
39:6e:17:43:ac:56:a1:24:86:aa:09:2a:42:b3:bc:65:0c:28:
c0:39:e3:29:a9:9c:8d:db:d2:e1:13:73:03:0a:4a:10:bf:8c:
27:ce:ab:a1:bb:11:9d:2a:67:85:f6:07:77:16:0a:3f:3b:52:
75:44:1a:31:c6:b0:cd:3b:a2:3f:7a:1b:9e:fa:f8:f7:2d:b7:
f3:ba:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:39 2025 by rpki-client