Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: 2NmRCFwRZtuFSz4EUdq7CHuO9Ph26UmR1VU6sN+bq4w=
Subject key identifier: 22:F9:94:0B:CF:1F:AF:DC:50:D8:9E:79:43:FA:B5:18:92:47:74:CA
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 0194BCE089B4C48661F1CBCED6E5C7A1A3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 1286
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: H1HTNkltNfWmqsKFEmVKLbc+H5WutaFeVp0uWeqiQUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:b4:c4:86:61:f1:cb:ce:d6:e5:c7:a1:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=22f9940bcf1fafdc50d89e7943fab518924774ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:52:28:89:de:e7:d6:b3:d0:8e:0f:65:f8:
79:ae:4e:c5:d7:c3:e9:ad:e4:90:c0:c8:76:43:b9:
5a:3d:e9:80:b9:20:90:1a:12:97:05:ea:a3:6e:bc:
47:f1:88:cc:d9:67:c3:06:26:21:f4:a5:1c:59:05:
0e:5e:25:5a:ec:a7:ad:34:da:f0:4f:aa:b4:89:33:
c2:aa:c3:21:b7:51:3b:26:29:3f:d7:1d:f7:bb:3c:
af:3a:88:85:8f:88:4c:b6:d1:9a:57:92:27:eb:be:
3f:30:56:bd:1e:8a:65:ff:2b:a4:81:28:83:01:3c:
08:01:35:9d:09:89:44:24:0b:ae:ce:79:b5:13:52:
1d:36:6f:2a:94:c6:ea:a1:c4:2f:f7:df:1b:fe:8f:
da:2d:63:50:f2:30:03:7c:26:cb:c6:91:d6:b7:21:
ca:40:9f:a2:08:bf:37:62:c7:10:b0:3c:2a:06:d4:
3a:09:e7:44:22:9c:ec:40:d8:a0:ff:51:54:97:d3:
ce:85:7a:89:ea:70:8f:62:10:76:a1:15:0d:64:c7:
9c:74:87:2a:69:63:f2:6a:d9:44:fe:b5:1a:10:7e:
f9:8c:27:35:d6:6c:8f:a9:52:79:67:4c:e5:d1:8b:
97:51:e5:e7:ba:0a:ba:61:cb:12:25:99:32:6c:13:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:94:0B:CF:1F:AF:DC:50:D8:9E:79:43:FA:B5:18:92:47:74:CA
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:fb:38:61:ae:b1:62:6b:78:e8:75:c5:1d:4f:92:6e:3a:
8a:c8:3e:aa:4f:e4:6a:e1:81:27:3b:05:55:44:9f:bd:f0:4b:
da:d8:1c:94:b3:5a:59:a4:1b:d7:c9:39:bc:09:e7:5c:2b:b9:
5d:54:04:5d:99:8e:a4:5c:66:13:ba:16:bd:bb:50:69:e7:49:
f5:d4:eb:88:43:8d:76:66:2e:4f:63:a5:ae:dc:b2:25:ae:4a:
17:44:14:58:3d:bd:06:b6:1d:76:a1:5c:91:f7:8e:ad:6f:97:
23:20:12:0c:73:4d:e4:50:be:7d:5a:31:e6:36:fc:f1:e0:1e:
23:9b:86:2b:01:90:f0:2f:d3:86:c2:0e:b4:29:1e:0e:cc:ca:
ba:d1:f4:e6:e5:20:c6:0a:79:49:a1:5c:ce:50:48:9d:04:32:
78:e8:4b:6c:f5:bd:a7:b6:e9:2b:fa:ab:1f:e2:79:17:6a:13:
32:90:32:8a:15:ee:ff:5e:0f:ad:53:c7:b4:5a:7e:fb:4e:9e:
13:50:5b:62:c9:c0:ab:99:af:0a:b4:ee:0d:78:aa:28:94:38:
b3:1a:2d:ca:ac:ed:94:93:e5:83:65:1d:2d:f1:4b:12:fa:77:
70:db:85:9a:42:14:dc:dc:77:b3:8f:77:a6:fe:61:ac:a1:ce:
9e:e6:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:04 2025 by rpki-client