Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: 0HYAoK2VSHs0xJYH4pHLfEelejg6beYMRYcsh00d9ao=
Subject key identifier: 0E:29:E4:5A:3D:24:97:C8:6F:58:6D:96:E5:F9:93:3C:6E:D6:35:02
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 0194BBCE9B203442D71B872895DF0B39F9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 01B0
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: OUpFo3a8ObuCNdl9Wv/YgHqFraxYONGijje0IJJlwcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:20:34:42:d7:1b:87:28:95:df:0b:39:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=0e29e45a3d2497c86f586d96e5f9933c6ed63502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:7f:79:0f:95:e7:1d:55:bd:49:94:b9:a5:
93:ba:9f:dc:0f:d7:96:5a:7f:59:a3:a0:cc:0c:4a:
4c:ef:a2:27:d3:69:7f:1b:5a:55:12:3c:e8:71:ce:
87:33:8b:a8:4c:f4:83:d6:25:57:9b:35:44:0c:de:
3b:3c:fb:1a:74:fd:8f:88:34:56:b0:73:c8:af:ec:
e4:fa:b1:98:6d:62:f0:9f:48:82:bc:1d:f5:bc:cc:
81:19:7e:b7:61:6c:b6:7e:7b:6a:77:46:ce:3e:9f:
80:26:1b:0e:55:9c:7a:76:d2:4f:06:d5:64:5d:b0:
48:67:84:c0:1e:2f:a0:4b:80:ff:06:d3:8e:72:3b:
73:ba:d5:1f:57:46:c3:ed:9d:8c:db:e3:b8:67:0f:
a4:f1:a4:15:ee:4e:df:f1:8a:81:9d:de:a4:47:d6:
fc:24:76:8a:c2:4a:be:3e:87:0b:3b:57:c1:50:07:
15:ef:8a:2b:88:33:51:8e:4c:44:84:c4:8d:12:3c:
5a:1b:66:e4:bc:3d:87:d3:1b:f5:fd:e5:fe:00:ea:
da:20:b3:97:11:53:ca:0c:7f:24:4f:44:21:45:cf:
e8:b2:04:9f:05:2d:4a:ee:26:10:d6:a9:42:0f:92:
42:cc:3b:d6:df:ba:28:35:a7:59:28:ef:61:71:3c:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:E4:5A:3D:24:97:C8:6F:58:6D:96:E5:F9:93:3C:6E:D6:35:02
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:23:9e:01:0f:f8:cf:79:fb:91:dd:8d:36:17:f0:17:9a:d4:
02:42:32:91:a9:81:0d:2f:00:f3:d4:89:77:ea:41:c5:d0:7c:
bd:14:e6:4e:10:64:64:23:d3:5b:43:7e:14:d8:c5:7a:9f:6b:
07:d3:5e:85:21:71:d8:3a:f3:f0:c4:0d:2a:a2:90:e2:76:78:
bd:a1:b1:b9:b4:df:3b:1d:ce:ca:23:9f:18:e5:5d:93:68:41:
e3:d4:ee:6f:bb:1c:d7:04:1d:12:29:30:ae:cf:f4:c1:d1:67:
63:9b:ba:ef:a7:0d:6e:37:ce:3a:aa:14:ab:f3:84:b9:dd:ba:
2e:02:55:43:f7:b4:54:b2:81:96:80:d0:14:6f:db:ba:c9:03:
e2:99:f5:9b:17:43:18:5c:0d:b9:5c:2f:3a:47:8f:74:5d:4d:
ac:2f:30:bf:ba:a4:09:59:ab:af:3c:94:ea:53:35:d9:9c:f6:
88:51:a5:d7:ad:ab:bc:77:bc:01:4a:d1:49:00:1e:37:15:4e:
c8:b6:87:5a:58:e1:a3:ab:bf:c6:58:50:27:c4:11:68:0f:b4:
a7:d1:ed:d4:ab:48:cd:f4:60:b6:54:3e:67:a7:0b:66:ed:08:
b0:06:59:c1:e7:b2:dc:2a:78:68:d9:5d:21:cb:ac:25:2c:69:
8d:30:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:00 2025 by rpki-client