Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: /nYHn46YSRDMVbp0gI/tU4EkfT7ISVmQ1hQdBtCB1J8=
Subject key identifier: 73:23:1D:31:55:0C:29:63:95:E1:31:DE:0C:7D:E2:F8:3C:8E:1C:98
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 0194BBCDBD9AECDBBCB99B1A6380FD4F7721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0990
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: 6FGJ8OaCmvRpODS8NHDKu900vq9leGDlvwWHNqvsvf8=)
2: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (hash: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:9a:ec:db:bc:b9:9b:1a:63:80:fd:4f:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=73231d31550c296395e131de0c7de2f83c8e1c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:dd:52:4c:54:ba:b0:0d:af:9e:46:76:8c:
fb:7b:da:31:e6:ae:f8:c7:6f:5d:96:19:f2:d1:bd:
e5:a8:96:a4:1a:17:8e:54:57:f5:e5:4b:72:6f:fd:
b5:46:ec:81:17:2e:f7:b1:d7:73:06:a6:f6:02:5d:
d1:96:49:9c:16:18:e2:eb:98:1e:43:56:32:2c:d4:
ae:33:ff:ea:c2:56:38:a0:d8:06:f7:16:bd:01:54:
e9:bc:6c:10:2d:d6:33:46:81:7a:78:93:22:95:cb:
3f:1a:ad:6d:94:60:ac:26:3c:cb:4a:93:13:2c:52:
a0:09:0b:7d:9a:90:a7:a1:a6:cb:79:67:c9:0a:10:
b5:ef:1b:4c:91:a9:45:2d:61:06:d4:72:61:ea:77:
d8:64:00:b3:1b:75:a6:de:87:5f:d2:27:62:b9:20:
78:07:9b:ed:78:14:18:5c:1d:4b:1e:ca:45:00:8d:
36:2f:b6:78:d9:5f:38:1f:79:3b:ee:11:60:df:5c:
14:3c:4c:5d:12:13:57:eb:36:58:66:56:5f:db:de:
0e:fa:2b:fb:1f:05:0e:5e:ce:7a:eb:e9:67:8b:72:
4f:26:2c:24:07:79:59:0a:a2:ae:d3:cc:5a:7e:21:
79:46:6c:43:0d:9c:16:3e:c7:c4:24:66:1e:33:fa:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:1D:31:55:0C:29:63:95:E1:31:DE:0C:7D:E2:F8:3C:8E:1C:98
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:40:f5:cc:37:2a:54:32:c2:5b:f3:24:6f:e0:33:56:1b:
50:41:00:6f:9a:57:30:92:07:81:2f:ea:4c:a1:54:44:a5:45:
83:23:5c:94:2d:23:1e:5d:e6:7d:fd:f7:18:43:2d:b8:19:51:
53:80:5e:a9:8c:5a:1f:54:5c:01:b5:a0:4e:a2:ab:f9:75:e2:
e2:49:88:87:45:f3:80:ff:69:d4:fa:99:85:e2:55:b9:b0:b2:
b5:86:e5:04:f3:ee:e8:76:63:87:9b:78:2a:8a:77:a8:c5:6c:
d3:1b:6c:fd:85:f6:ef:ac:b7:9f:ac:4d:86:d7:23:29:ac:5b:
df:8e:c2:29:ca:55:ea:bb:91:61:d9:33:9e:2a:f5:11:22:33:
ca:02:84:68:86:ee:4d:56:c0:f5:28:be:3b:f3:ef:ff:82:9a:
ae:8b:b0:91:4f:d9:65:23:db:27:5a:c8:fa:97:ad:a3:b4:be:
c0:4f:e0:e9:e6:52:e1:f4:05:70:4c:f6:b6:2a:a8:79:f2:31:
4b:a2:4e:f5:f2:eb:c4:84:57:15:1e:d9:02:56:31:49:03:e0:
59:d8:18:c0:7b:3c:d1:01:12:22:af:96:7f:97:84:01:d4:58:
28:a1:69:68:91:61:e3:46:83:ef:4f:a5:54:61:e4:ad:2c:63:
0d:dd:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:10 2025 by rpki-client