Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File: jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier: MFoMBimq9e9sGQvDlYeIbOWpbbCrCKthl53Yj4XFvQs=
Subject key identifier: 22:E3:D6:87:8E:E2:35:27:42:2C:D2:B9:86:C0:80:F4:6D:84:AE:49
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 0194BC72C14AFB716DB5739065736385F71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number: 0505
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: al13DKIt3SfqclQUqJ641JV2HWg.roa (hash: Jc3t3A50esUFct6rJU/d535MsDkwn1l4iRxFWqy7EFw=)
2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: 5VY6ySdYYbplmJzc93QI6y0mHMIeqMZTwXvGzORkZ0U=)
4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:4a:fb:71:6d:b5:73:90:65:73:63:85:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=22e3d6878ee23527422cd2b986c080f46d84ae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:b9:19:84:61:a8:9a:ba:d6:b6:61:96:a4:
3e:28:cb:be:bf:36:fb:27:51:5a:bc:2f:e1:61:b2:
4d:85:8f:8a:7b:a4:97:f8:60:e6:fe:84:16:a8:3b:
60:18:c7:6c:d0:f5:2c:4f:35:25:d3:9a:ca:ad:1a:
82:bc:c5:96:bf:49:27:7c:58:4a:5b:89:d1:24:b5:
2b:8b:a6:7d:96:38:81:77:27:71:da:07:3f:4a:1b:
7d:57:d2:1c:ae:d2:16:fa:d2:0a:c2:a5:da:22:79:
07:f0:d8:2d:7b:04:04:27:b9:c6:1f:37:2d:73:7f:
a0:a2:b0:2c:b2:e4:95:2c:53:7c:7c:c5:1e:fe:32:
d9:e2:dd:eb:0d:7f:57:b1:40:38:a3:93:eb:3b:32:
f9:ee:21:ee:d1:cb:23:93:e6:c1:df:42:32:18:47:
24:8d:ad:d1:ac:a7:16:6d:a3:32:f3:d3:16:3c:3a:
e8:4d:8e:92:c9:bd:ae:9a:a2:85:f5:94:8e:eb:a0:
13:bd:29:3a:f3:dd:a0:11:6a:ae:ae:dc:6a:fe:22:
75:ce:b7:6f:ba:72:88:c1:cd:97:8e:52:0b:74:6f:
a5:d8:dd:bc:88:de:80:bb:b3:e8:e0:70:fa:2f:bd:
90:2f:44:c3:d7:bb:1e:5d:92:4d:fa:22:4f:08:70:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:D6:87:8E:E2:35:27:42:2C:D2:B9:86:C0:80:F4:6D:84:AE:49
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:ea:28:db:d1:34:8b:e0:3f:70:3d:b9:4f:3a:e6:5f:70:
e5:ae:95:55:a3:9c:8f:6f:a7:95:c4:03:db:6d:52:56:93:74:
2f:5a:0f:01:8f:6b:8a:6e:86:a1:4a:6d:93:73:c0:01:79:05:
e5:e2:aa:2a:ee:13:07:84:d8:9e:d6:48:bd:da:ab:d8:5a:da:
2f:f6:11:9e:17:dc:f5:1b:f9:14:38:2e:70:9f:11:1e:31:d0:
b8:50:2d:f7:90:75:13:31:8d:a3:3d:cc:be:bd:77:de:84:27:
38:a2:47:e6:14:53:d8:9b:60:f4:3b:05:9c:a6:a8:94:b2:19:
59:23:aa:37:11:ce:78:e7:8b:75:43:c5:ff:92:24:1e:5b:12:
a4:4c:5a:47:07:b6:fc:07:6e:34:07:ef:33:ec:d3:f0:6b:24:
32:ea:96:72:0a:3b:ac:79:93:8a:c4:98:47:7a:00:3f:ab:79:
92:a5:0e:ec:8d:18:2f:a7:cc:2b:36:1d:72:43:57:04:46:60:
ea:7f:c2:d5:cd:ba:a6:5e:86:4e:19:6b:b7:19:ff:de:c7:dd:
30:d3:52:43:2c:01:fc:7e:3f:ce:a7:cb:e9:a7:df:d8:ae:b5:
a8:ea:b6:57:4d:62:1e:63:bc:09:5a:e3:4f:23:e2:31:f4:5a:
31:bc:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:54 2025 by rpki-client