Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: 6w6OEN+m70JWiX45EfQtPfAtnMXsjrW0Hi9LQMPwlK8=
Subject key identifier: 2B:79:C4:FC:2A:FA:1E:4B:A4:28:54:5B:4D:A6:9C:36:23:73:C0:F1
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 0194BD85987DA58517DA32F81DDCDAD32843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: AGwiXl1bcs1joSeOgF+jAksoVSy6mFGYerfvoTHj3w0=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:7d:a5:85:17:da:32:f8:1d:dc:da:d3:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=2b79c4fc2afa1e4ba428545b4da69c362373c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:a0:0e:4b:d9:df:9b:6b:0e:ce:e2:bb:43:
03:71:56:81:08:36:22:e1:67:f9:10:34:2e:0e:06:
f0:76:97:f0:eb:5a:d0:49:09:be:be:bc:f5:67:0f:
9c:38:dc:65:4a:c9:aa:fa:0a:f7:0d:ad:f7:47:d2:
7e:7f:59:6d:94:60:96:0a:bb:a5:3c:b3:8b:51:d8:
63:f5:3f:72:eb:99:ab:66:75:c6:6a:25:e1:0f:e0:
28:70:ee:03:6b:e3:ce:27:38:00:91:94:9c:fc:9d:
4f:0e:4d:dc:9e:4c:ae:18:33:5c:b7:c9:91:f3:a7:
60:86:df:75:4a:4d:96:1d:98:9e:b0:cb:c7:3a:b5:
dc:d4:4c:55:7c:e4:7e:8c:ff:84:78:79:f3:2b:08:
9f:50:14:0a:03:14:68:fb:bc:51:06:a6:9b:47:44:
07:b0:79:10:ef:19:13:04:fc:36:1c:30:4f:dd:0d:
a6:75:03:82:d9:f7:af:e0:16:c4:42:64:44:c3:eb:
b9:05:82:bc:7a:1a:08:d0:68:7f:d6:08:ac:a2:b0:
33:06:b2:ea:68:b0:11:2e:60:f0:9f:05:02:a2:32:
c4:4d:56:63:10:49:b3:d7:d1:00:1d:59:17:98:ad:
b2:26:0e:fb:12:ad:1b:72:c1:04:fa:7f:44:3c:13:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:C4:FC:2A:FA:1E:4B:A4:28:54:5B:4D:A6:9C:36:23:73:C0:F1
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:81:0e:6d:75:4a:f0:30:e6:a8:9d:a4:e1:c7:2b:bb:82:
16:e3:60:75:c0:6c:4b:8a:4a:5d:21:d8:9b:a3:ae:a1:98:62:
e4:37:bc:72:e7:b9:6b:a6:85:f8:96:df:35:a9:45:5a:95:39:
4b:b4:72:d6:80:2b:42:e7:36:4a:29:21:c4:1a:aa:fc:99:7d:
ed:2d:94:d6:fb:5b:8e:1d:79:17:5e:d4:ec:be:1f:47:c6:7d:
4e:59:04:51:8d:ef:68:f1:3d:75:bb:5c:4b:bb:01:10:c1:97:
5e:e3:90:ee:94:a8:af:4d:87:d5:f9:8b:d1:ea:b8:bc:00:7f:
f1:3d:2c:9e:dc:3d:9e:dd:d9:61:a2:ba:a8:9c:e7:a6:33:3d:
05:e7:b3:ce:73:d0:75:fd:68:17:23:26:c0:53:4b:29:c1:3a:
c3:d8:97:c9:c7:18:21:42:e5:3b:17:99:44:be:aa:fb:a2:73:
cb:7a:72:72:8b:17:99:95:1f:70:17:8b:7c:d0:1d:00:51:5b:
e9:6b:9f:89:07:b8:73:95:50:22:65:65:37:55:95:47:fd:34:
e9:19:c0:02:11:0a:28:80:f2:c6:15:3c:f9:6a:14:3b:9a:a9:
10:2d:07:e6:8e:7b:9d:01:f2:67:22:9a:43:1a:31:53:17:05:
ff:2c:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:52 2025 by rpki-client