Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
File: JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft (raw, json)
Hash identifier: m8IWA4h/LZqkFx0Jmwm4cNgcvLpobBGdA41u4u1QfVI=
Subject key identifier: 81:53:D0:25:0C:7D:BF:2D:10:C9:35:12:35:F3:36:33:88:79:88:97
Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
Certificate issuer: /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Certificate serial: 0194BC72982FA203092D8AF062DAA4B8B03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
Manifest number: 07DC
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl (hash: kmLsfGVJ9NapN2YSOmismOKKeEdUBWXb6d4ZLC6CRdo=)
2: sEY4t-bPe6btAR7wv3UJWwU-X2E.roa (hash: aU4yEzDR1E1BJAYcSFYYldSWQZ2ELBxfjYhJldcUrMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:2f:a2:03:09:2d:8a:f0:62:da:a4:b8:b0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=8153d0250c7dbf2d10c9351235f3363388798897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:48:3c:6a:53:43:fd:3d:24:9e:d1:d4:1d:
0d:c7:09:1a:79:60:e1:02:74:97:81:c5:d1:0d:5c:
af:cf:fc:96:f1:e6:2d:cf:08:d3:67:2f:4f:ba:23:
f8:2a:d0:a7:39:78:1a:8f:fb:e4:29:e8:b1:bb:39:
8f:a6:2d:c7:6f:c8:56:e4:7e:20:e3:b3:a9:2d:91:
de:86:fe:88:d9:07:76:b1:70:83:2e:7c:37:3b:cc:
d3:20:6e:db:ce:c6:7f:7e:77:e7:5f:29:f9:f2:a8:
15:a1:54:7a:b1:c1:b8:1e:df:8d:a4:e8:32:34:22:
c1:a5:ad:42:0b:7e:e0:99:43:32:56:51:a8:56:1e:
ab:b3:b5:61:d9:da:77:ff:98:40:42:db:d9:07:d6:
fd:8a:d7:6a:4f:9f:3a:f3:ba:5e:05:30:99:db:99:
56:b5:56:96:53:98:4a:6c:bc:02:b9:98:87:d0:de:
51:11:e3:03:a3:0d:3b:46:cb:71:bf:0b:a6:e8:87:
79:66:82:18:e6:0d:d0:f8:8c:e1:f6:7a:67:7e:76:
da:d9:a0:4b:13:3f:6d:fe:b5:46:8e:d9:85:cd:8e:
64:45:4d:23:9b:b2:82:24:2a:76:d2:07:a6:84:51:
11:32:a1:5c:5c:e0:3a:a3:c1:03:62:1b:0a:ff:a5:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:53:D0:25:0C:7D:BF:2D:10:C9:35:12:35:F3:36:33:88:79:88:97
X509v3 Authority Key Identifier:
keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:68:ca:ce:c8:69:52:54:7c:52:9d:e6:16:12:cc:e1:cc:7e:
b0:41:3e:fc:12:74:71:b5:c8:bb:39:68:4c:26:56:81:db:f6:
08:e0:4f:24:0f:d7:92:62:83:3a:fe:9b:6e:06:f3:7f:be:ca:
72:19:39:1a:1b:ed:b9:72:13:cb:eb:47:99:b4:04:e7:62:db:
bc:a1:2a:c2:58:30:0e:53:39:8f:1a:79:13:b2:56:0a:5c:fa:
ce:df:54:89:55:95:5b:69:00:1d:de:41:5c:6d:e0:82:06:02:
6f:62:82:27:0d:f1:e9:64:a7:c9:79:5e:d1:b7:6f:04:47:27:
2d:3f:44:e6:3e:17:df:b5:42:70:38:27:ad:e0:da:4c:c6:c5:
44:b1:c8:c8:2a:79:2c:31:d1:c6:c1:25:86:d0:68:e7:ed:20:
a2:d4:d1:56:75:bb:1e:fe:98:1f:94:15:0c:ab:79:72:ad:34:
e7:08:5c:bd:27:d9:2e:6f:ec:78:11:73:b2:cd:48:03:9a:95:
d3:9c:22:70:b6:d9:06:ac:fa:f1:0b:fa:e7:d9:31:12:fe:8e:
9d:0b:f1:9c:1c:63:7e:8d:f5:e0:a8:da:72:71:1e:83:02:00:
3f:f2:d1:59:70:98:08:84:d6:1b:0e:6a:5f:cd:eb:93:b5:bc:
f0:20:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:36 2025 by rpki-client