Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: sj2wQJFM1BgGIzXnkEmMAlZXo7GvCig7pV2lI0w+DpU=
Subject key identifier: 79:6A:09:3F:81:68:83:D6:24:97:64:C6:96:45:7F:73:E3:00:2A:7A
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 0194BD4EBA5B0124438A69200A7B0A423E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 133C
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: CjyX2xPeBEuSIJ4nSqgaCiLShxnMMHVKQCeQfMNEBFI=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:5b:01:24:43:8a:69:20:0a:7b:0a:42:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=796a093f816883d6249764c696457f73e3002a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:d3:f2:3a:2c:6d:8e:f0:c8:5a:f2:3b:56:
62:c1:c4:c7:09:6f:5f:88:fb:1e:06:03:74:8c:df:
c7:77:41:78:aa:ef:de:c8:e8:b6:61:c0:15:3f:a7:
c2:f4:14:79:9c:ae:b8:13:f8:d4:20:c3:b8:b4:c0:
3d:8c:f0:7a:69:e5:05:c3:46:0f:1d:b4:70:11:cb:
c0:83:82:f8:38:74:df:f6:aa:8d:93:d5:4c:55:50:
b9:ef:3b:1b:35:ae:31:98:2d:85:3f:8c:99:38:de:
ac:6c:55:e4:3f:eb:10:e7:c4:38:e7:01:b4:96:3c:
64:12:b9:b2:28:ee:0a:e1:92:d4:4c:7e:80:b0:0e:
a1:9e:58:3c:a1:92:f0:a5:86:78:bd:9b:ef:03:70:
06:e5:0e:5f:d0:71:bf:cd:80:9f:c9:1a:22:77:70:
cd:ff:1b:80:85:e9:dc:77:a9:f7:3f:18:63:6b:26:
42:a9:e1:b9:e2:c2:7a:3d:bc:10:36:de:b4:b1:ca:
f0:37:91:44:73:9c:e6:a4:84:01:9a:71:98:dc:cd:
d9:c9:f8:80:7a:91:75:0d:c4:8a:96:80:1a:64:c3:
63:11:44:c1:bd:df:de:97:f4:1f:eb:04:84:8b:13:
55:fe:1c:62:67:eb:f1:7f:7c:4a:e6:6d:cc:19:49:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:09:3F:81:68:83:D6:24:97:64:C6:96:45:7F:73:E3:00:2A:7A
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:dd:1f:50:98:62:00:82:01:2c:2c:89:d4:05:71:26:8a:d9:
52:17:ea:81:48:a9:68:c4:2a:ec:df:ac:85:6c:38:28:97:97:
9c:ff:d3:a6:3f:24:a1:ea:6b:38:42:58:8f:10:f6:d8:51:9c:
b1:5b:9e:0a:fb:98:98:80:48:fd:23:17:30:41:48:3a:61:70:
7b:98:47:25:a2:9b:f7:26:99:6d:0c:76:f6:84:00:25:51:67:
fb:5d:71:d0:b2:59:2d:17:88:73:bf:01:e3:67:54:7e:ce:2a:
ae:75:c1:52:23:4d:bb:a1:ae:2c:b2:bc:16:36:00:07:1c:0e:
cc:4a:95:9a:ef:a7:54:98:ef:d2:f1:29:82:56:33:c9:e5:a3:
06:70:13:aa:3b:ab:d2:0d:45:fc:9e:96:01:1d:86:66:74:e4:
82:b9:be:1b:c4:af:c2:c0:d4:b3:ee:99:45:32:a9:2e:c1:28:
79:02:31:e0:cb:de:2b:82:91:d0:c9:9d:32:0d:50:4e:27:61:
d7:82:34:f9:7c:5a:e6:e6:0f:2e:d4:88:c9:15:30:6a:ef:37:
32:af:2c:74:a7:35:46:52:ce:13:14:34:5c:c1:8b:bb:04:f0:
54:69:1f:58:e0:7d:4d:23:6b:d9:b4:24:77:41:39:05:77:4e:
17:f9:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client