Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: SBxxTywfmOwrK3s8+vNhlKf9Gal051rSv0s6UVNt9Vg=
Subject key identifier: F2:30:9E:DB:B0:C0:CB:9C:B0:33:AA:8D:6A:9C:B5:47:D9:C6:3A:29
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 0194BD4E77FB411A77791B850F9B533DE6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: D6
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: STCCBw4ZzEBOl/wkr+F2prxnKdRArGzywF6adEd5rCs=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:fb:41:1a:77:79:1b:85:0f:9b:53:3d:e6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=f2309edbb0c0cb9cb033aa8d6a9cb547d9c63a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:a1:b1:cc:71:2a:ba:b0:5e:5d:67:23:d2:
46:e3:2d:fd:61:a1:60:ac:2d:31:39:f9:d9:67:c1:
69:2a:b6:75:a5:9f:e1:b3:be:16:51:5c:f8:27:a7:
9c:8a:d3:fa:75:52:58:60:d1:db:2c:2f:d1:05:6e:
16:33:b1:1c:4c:68:7a:e4:61:4f:fc:14:47:24:7b:
55:1d:08:10:93:ce:79:fc:c3:48:58:77:b2:ff:f6:
a1:90:ea:90:e2:1d:6e:6c:8b:d1:a6:29:34:ea:0e:
4a:e4:96:c2:c9:81:3c:f2:30:5a:82:3f:09:4b:d0:
15:c4:e3:06:92:89:bc:5e:3d:5b:55:23:a5:ce:ee:
1e:17:d2:47:f1:6c:7b:dd:a1:fb:77:9f:a0:1e:ce:
69:13:e3:ea:62:6c:22:2a:87:2a:16:67:3e:94:8c:
4d:f6:4a:7b:6f:e2:76:07:37:36:ef:6d:5b:a8:4b:
90:74:59:49:3d:08:78:ba:28:bd:5a:11:4d:ce:de:
9d:10:ac:91:89:41:fe:8f:4e:b7:6b:51:46:1f:8c:
7b:94:c5:e8:1f:e8:14:0c:be:b8:de:29:ea:f0:8c:
19:11:92:f7:fd:d3:ab:38:d2:78:93:c7:a7:46:df:
3b:1e:9c:20:c4:d3:6e:e5:0a:87:9e:cf:2e:04:8c:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:9E:DB:B0:C0:CB:9C:B0:33:AA:8D:6A:9C:B5:47:D9:C6:3A:29
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:23:fb:ac:2b:31:1d:3c:f1:2f:d9:50:9c:af:f5:9a:89:7f:
b8:5d:f1:03:b1:8b:c3:b8:9f:3f:b8:22:d5:b8:b7:17:85:f3:
71:b4:cb:16:61:f7:3e:60:b6:53:61:f7:05:5e:e9:63:5f:51:
a5:ed:b8:51:d5:40:93:93:84:aa:4e:cc:c8:22:75:38:4e:b8:
0c:a0:2c:69:89:76:4a:21:94:90:50:29:af:96:c6:7f:7d:61:
2b:d8:7b:48:42:a7:11:58:ef:f0:ec:5a:14:3c:f8:67:34:8e:
64:26:e8:f2:14:09:c4:79:3b:f3:72:ae:88:97:31:f7:41:08:
e0:6e:99:3c:a4:45:bc:1f:96:6f:58:cc:37:d0:ec:b1:68:68:
fe:02:4b:91:bf:bd:90:17:20:ed:82:02:b7:12:79:da:76:ba:
12:62:87:f9:fb:5f:a3:e9:b1:60:af:63:38:a7:bd:d3:90:07:
36:83:d1:5a:4a:6c:c1:11:47:61:24:f4:41:e2:5f:a3:cb:5b:
f5:63:e2:0f:46:8c:2a:c4:d7:e3:c4:03:5a:69:d2:cb:0a:37:
7a:86:f0:24:69:50:c5:43:b2:73:c5:ba:d4:03:0e:a0:51:d7:
d9:3a:c3:5e:cd:c8:61:b4:05:99:5c:6f:63:5f:39:4d:35:30:
bf:a7:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:50 2025 by rpki-client