Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File: _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier: 7v/SzCK+aDIfq8ODDahHauHWCr8ysUdjIZvFDvpYmak=
Subject key identifier: 5F:21:1B:2B:45:27:37:CB:63:D0:8A:14:D6:7D:58:24:47:7B:28:C7
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 0194BCAA19832DB8A3BBB6838B9B668A892D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: UT4NXn4ZcTkJwvgQgl9dQtMGQHY.roa (hash: nylFSQWGan1W87gYguk9ri6Ziw1VxhwDfj3K/sUzuCM=)
2: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (hash: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=)
3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: oIJKpAbMktSfExQ823Gpgp79m49RQVqHLjDVAiEusk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:83:2d:b8:a3:bb:b6:83:8b:9b:66:8a:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=5f211b2b452737cb63d08a14d67d5824477b28c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:a2:55:5c:41:6e:24:20:c0:b3:e4:b2:74:
12:e4:ff:a9:b5:80:37:5b:66:8d:ab:07:88:e6:6f:
91:13:67:09:44:bb:6d:5e:87:f4:ef:40:0a:19:48:
ce:57:f8:cc:cb:33:42:04:b2:fd:93:6a:ad:c0:5d:
c1:5f:1a:75:af:c5:6e:74:9a:af:ae:b9:15:35:0a:
de:b0:54:14:aa:e2:27:25:6c:2d:3b:a1:87:d6:99:
fc:ca:fd:08:20:fb:fb:47:e9:7b:aa:f1:22:9e:36:
99:3f:fd:02:63:50:e7:d0:1d:ac:90:96:a4:b4:a6:
cb:59:17:08:79:dd:99:3e:cc:48:2a:57:a5:cd:14:
e4:81:0c:12:fe:8b:2d:08:3b:13:11:2e:f7:e4:ca:
05:19:25:9d:d1:6a:e7:5a:14:1a:cb:de:6f:f5:3c:
4f:a8:19:a7:de:dd:c3:f4:4d:1f:7c:9d:ca:96:04:
52:bc:2e:07:4a:23:b7:13:6e:37:4d:cd:c4:23:17:
05:51:f5:20:4b:af:54:03:4f:ce:41:57:d4:f1:a3:
32:f2:c3:fb:1f:46:b9:3f:10:72:a8:a5:19:3c:21:
25:85:b9:e9:e9:f9:63:86:95:1b:ad:e8:ef:55:bc:
69:e8:ad:50:db:95:85:02:15:06:fc:76:de:ca:bd:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:1B:2B:45:27:37:CB:63:D0:8A:14:D6:7D:58:24:47:7B:28:C7
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9b:3b:0f:c0:8b:3f:28:92:f7:ee:52:fe:bf:37:35:b7:7e:
ce:50:77:80:46:72:03:40:2a:47:ac:00:79:c9:e8:2e:92:f2:
75:68:a3:65:c8:b6:75:fa:2a:ff:55:29:27:13:98:99:7b:75:
c8:fd:70:1c:42:02:f9:e8:fe:a0:69:6e:ee:01:b6:80:d4:a4:
f1:6f:b6:98:81:9d:e0:39:46:8e:02:10:d4:11:ef:45:1a:05:
3b:70:4d:b1:ce:9e:b1:37:8f:4e:a2:73:45:0c:d2:d8:bd:05:
b3:2f:4b:f3:41:fd:68:5c:7c:80:45:a7:78:d1:23:dd:ec:a4:
23:fa:9a:c1:01:f1:27:17:50:c0:3a:05:eb:81:66:bc:7b:fd:
38:2a:c8:c3:2f:ea:e7:76:ef:e0:35:2f:aa:c0:78:88:2e:62:
f1:c7:d1:be:33:98:23:5e:df:f3:40:c2:ec:4b:0f:c2:14:3d:
11:ab:ad:50:c2:f8:d1:ae:90:0f:e2:4c:29:9c:fb:50:6f:00:
a1:cc:f7:41:ee:6d:13:e5:ef:a4:eb:9d:7a:7b:11:a0:6f:9c:
8a:de:5f:4a:10:fd:df:a3:ff:a0:38:52:62:1f:21:9e:a9:4d:
ad:ba:d7:54:42:de:61:19:eb:d5:5a:8d:b2:8f:80:d1:18:5a:
b4:99:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:06 2025 by rpki-client