Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: tE7JIQJSg2f50ilv/T5vnWPHjhX3ENTXAV5I9/6Fxlc=
Subject key identifier: CB:B9:1D:32:47:C4:20:59:C6:1C:10:12:3D:8D:A7:FF:D5:8C:23:4C
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 0194BBCDFD6D1F6AABE5BAB1119E53A76024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 04A7
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (hash: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=)
2: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: sO5kE9U/sV60fzde+PSMrGf5hvaLnSTF9t3BdqZoK2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:6d:1f:6a:ab:e5:ba:b1:11:9e:53:a7:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=cbb91d3247c42059c61c10123d8da7ffd58c234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:8f:52:a3:08:ca:ec:ac:e9:4c:8c:05:3d:
36:59:d8:29:12:f4:70:03:43:c5:52:2b:bb:25:ed:
d6:a7:71:f4:c2:fd:0c:91:c4:8d:05:b7:68:3f:8f:
1d:09:2d:a7:14:b2:23:04:cc:d8:2f:9a:a6:d9:f2:
f2:e7:1e:f3:dc:91:31:d4:79:c1:8a:bb:e1:27:31:
18:a3:24:3d:6e:12:51:2b:d1:37:77:c2:35:30:4d:
81:a6:4a:10:9c:39:7e:82:51:d4:dd:4f:fe:66:1a:
5a:27:88:2c:21:b2:9e:12:19:73:de:d9:0e:29:ab:
6e:18:17:c5:94:58:ac:b0:0c:e8:ae:9b:08:af:e9:
82:fe:3d:dd:95:1d:31:4b:f2:93:37:c6:dd:1f:ce:
e3:4c:76:a9:2b:b1:3e:2c:3c:b3:50:ad:fa:3d:bc:
9c:83:c7:6a:70:20:e0:80:3e:21:d0:c9:50:00:0c:
c0:52:a2:4a:24:44:8f:5d:1c:29:48:94:15:97:1c:
1f:eb:67:d1:7b:20:93:6d:80:a8:65:8f:76:b6:59:
6b:cd:bc:ff:ab:63:cc:18:9c:e5:b7:5b:84:3b:0d:
f8:2d:d3:15:28:e4:66:e6:ad:a7:0b:33:96:a4:4e:
4d:14:e0:b9:2f:aa:79:fe:4b:b8:11:a8:dc:ad:31:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:1D:32:47:C4:20:59:C6:1C:10:12:3D:8D:A7:FF:D5:8C:23:4C
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:5e:34:ce:b1:37:f5:a0:25:d5:4c:de:0f:3d:31:33:88:
ea:21:81:c9:58:c0:a9:6b:d0:18:75:3a:9d:25:67:77:2f:62:
3b:03:1c:75:5a:58:37:4d:2f:1a:9a:89:c1:5d:3d:a1:85:87:
40:d6:2d:44:a5:d6:ac:2a:85:a5:aa:51:4d:27:61:57:28:68:
42:00:b6:c0:d0:7b:8e:70:a5:bd:8f:d4:be:d7:ce:b7:d4:0f:
d3:bd:c4:79:fd:d8:c2:d2:0a:32:12:fd:9c:e1:cd:c7:66:a2:
d9:8c:22:91:9e:67:e0:4c:f7:e0:85:78:94:8b:ef:d2:d3:77:
97:79:ac:54:26:1d:dc:33:ee:ef:6c:f2:9a:9e:a5:d1:5e:ad:
fe:41:76:2c:ac:ba:56:63:7e:39:dc:93:0e:a9:dd:67:b2:b2:
37:6d:0e:9e:31:66:fc:9f:e1:95:56:fc:27:c7:e4:38:ab:a6:
fe:18:53:97:3e:12:5a:5f:47:50:f8:83:b1:bc:2d:a2:c9:c7:
51:00:28:71:65:74:54:29:51:85:85:bc:d7:f7:9d:51:75:2b:
97:e0:01:d2:a4:f5:70:35:f2:85:7d:e2:21:0b:b7:a0:ab:76:
e7:96:b2:58:4c:74:5b:72:d4:a6:9c:a9:b0:27:ad:63:28:94:
bc:86:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:30 2025 by rpki-client