Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: LILR5LnffzLpcDZ9iN0FjMqEepx9O1mbhGqjWYhnhA0=
Subject key identifier: 44:3A:8C:B1:00:BB:53:06:35:FE:BA:DC:BD:87:26:F7:4A:36:90:0D
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 0194BCE08EB4A91FC9A590C704F5ED974368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 4kaBhFBJmcVPXTpr7vEzM3m5TtQ.roa (hash: LSe9UyLKD1nkN+S+WsVwABdYF89ynfbDLCDSplYBzZQ=)
2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: QDEkCNX/o1FHFObv9gITEq4ZWLIV1cn8lt1vev6TeDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:b4:a9:1f:c9:a5:90:c7:04:f5:ed:97:43:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=443a8cb100bb530635febadcbd8726f74a36900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:3f:95:3e:bd:17:bf:bc:5c:c7:e7:a1:29:
2e:42:65:72:e4:d5:03:d3:45:27:4f:91:11:dd:d4:
d7:ab:f7:24:ab:ef:91:5c:46:ca:57:88:d1:b5:d5:
03:93:29:c7:5e:a4:07:1f:e1:68:9f:d1:b0:b2:9f:
69:6c:4f:dc:f9:58:2f:52:75:e8:fb:15:b9:a9:36:
bb:6c:58:16:b8:87:cf:82:96:cc:84:37:3d:03:61:
72:dd:bd:1f:ab:fe:69:81:16:68:db:44:f4:16:1b:
56:70:dd:47:27:bc:5c:51:2b:74:12:cb:95:e3:8a:
ae:e9:39:cf:bb:39:78:6e:4d:73:4f:47:35:37:25:
0c:44:de:43:86:66:d5:5f:ca:54:b5:fd:39:7f:de:
3b:49:b7:1e:40:a3:f9:1c:7d:d1:f9:01:32:bb:57:
b4:97:01:07:c2:1f:33:4c:17:98:db:dd:df:52:1c:
19:55:06:10:cb:c5:ac:10:b1:31:97:d8:f4:eb:e6:
db:b7:7a:da:0c:67:9b:4d:f3:2f:a1:33:2a:7c:81:
97:d0:16:62:4b:d1:58:b4:e0:12:65:59:c5:5a:36:
ee:19:07:ac:3b:c9:f8:66:39:6b:f7:23:95:6c:eb:
cf:ec:0e:61:cd:fa:52:1c:17:39:fd:a4:2b:38:65:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:8C:B1:00:BB:53:06:35:FE:BA:DC:BD:87:26:F7:4A:36:90:0D
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:04:76:d2:ad:09:3f:13:af:b2:0b:20:27:df:10:53:98:
9b:24:7d:d1:a2:4b:7d:2d:3f:a7:7e:63:8a:39:18:bc:28:65:
08:31:9e:18:69:d9:9f:23:74:91:06:1e:36:3d:8c:4d:25:d5:
5a:61:9b:ee:cd:7c:86:3d:de:99:38:df:88:60:e6:a7:1a:01:
dd:72:ad:02:36:b7:dd:2c:8b:17:57:f4:7b:bb:5e:fc:fe:d9:
91:d8:fc:bc:b7:cc:0b:67:3e:7b:ae:46:b6:f8:f6:e2:17:a5:
c1:7b:b1:d6:9c:e4:ad:f7:ff:c7:11:b0:80:6a:93:8e:68:45:
c7:ac:bb:53:2d:7d:cc:ca:37:c5:76:fd:f9:3c:2b:71:92:7a:
ce:de:75:d2:ec:62:29:39:0f:1f:38:83:2b:77:7a:98:63:fe:
50:47:51:b3:16:70:24:4c:14:3f:d5:a1:cf:60:b5:db:b3:6a:
b3:de:89:9b:0a:09:d3:fd:8f:62:1d:ca:25:d3:51:90:fa:9a:
2b:ca:b7:7c:ad:e2:fc:84:91:72:6f:74:94:7f:3f:5e:12:c3:
a8:59:6a:7f:75:23:c2:96:19:32:18:2e:39:36:e2:25:25:77:
c1:16:5b:bd:59:63:5e:30:f4:cb:de:4f:8c:3a:f3:78:9d:de:
6c:03:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:48 2025 by rpki-client