Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: tqpvRkNlOtIw8hTVgaQ9yBinsJGyrqUbEG4jIJEZ094=
Subject key identifier: B8:C2:C2:7C:00:BD:A3:0E:03:87:27:D1:15:00:B7:AE:F7:32:4D:A1
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 0194BCE0CFBEDF1DB9A86E6F30D6113315EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 055D
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: OCXjMBYL0qCoKFuBXb3JoNxMqkLkFerX1bsj9oY1ruA=)
2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:be:df:1d:b9:a8:6e:6f:30:d6:11:33:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=b8c2c27c00bda30e038727d11500b7aef7324da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:77:b1:a7:04:42:c0:8c:a6:f4:3f:47:68:
8f:2b:80:c1:b2:71:f5:7e:e8:f6:a4:ea:81:25:1c:
89:99:0d:61:75:98:40:49:f2:6d:6c:06:a0:51:70:
9f:e8:dd:cb:3a:84:dc:04:92:7d:dc:97:60:08:1e:
aa:9b:da:1b:01:ca:a9:7a:af:f2:1e:a8:9b:2b:23:
c4:ee:dc:2f:d1:99:e5:4f:8d:ac:f8:8f:15:32:e3:
f8:e9:2d:b8:1e:23:94:a8:72:56:da:ec:24:56:73:
50:60:1f:ef:dd:78:1f:5b:e4:dd:8c:05:fb:5f:03:
a1:50:b7:c4:2f:c0:52:9f:75:f1:d8:b7:c8:e4:7b:
20:52:96:dd:0d:22:cf:9c:79:fc:62:b7:a8:3d:44:
38:b3:9f:15:3c:ea:50:08:e6:f5:e1:2a:9e:7d:53:
ec:77:36:8b:f6:db:fd:3f:15:96:c3:3c:12:89:c6:
d3:8d:23:97:99:b4:e9:82:eb:7d:c8:7c:15:ab:5b:
5c:46:95:b3:0e:9b:02:fc:75:b4:b5:d1:3f:12:db:
ca:7e:4c:67:6e:c8:1a:c8:ad:6b:1a:90:4a:bb:9b:
52:3b:c1:ed:09:4a:15:a9:f0:e1:f6:3b:27:44:59:
d6:90:a0:97:53:a1:15:0c:c4:00:38:f7:ad:ab:e2:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:C2:7C:00:BD:A3:0E:03:87:27:D1:15:00:B7:AE:F7:32:4D:A1
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b6:3b:80:3e:00:3b:d7:38:02:0b:b3:7d:c2:36:35:6c:f1:
f3:f9:3d:d6:29:4f:32:7a:a9:3b:ec:de:18:40:a2:e4:a7:2a:
63:c8:d0:8f:de:57:5d:f5:d2:c9:2c:2b:c7:81:a7:c3:3f:f7:
e7:73:02:81:68:90:b9:4a:90:48:80:09:de:1d:b9:bf:7a:9a:
1c:fe:33:60:88:42:20:0b:e0:4f:f8:af:2f:ca:8a:fa:5b:31:
cf:25:36:c1:0a:10:ce:2b:bc:71:ef:8a:cb:0e:66:9a:a6:a5:
3e:5e:a9:da:cd:29:5a:35:63:31:d8:e6:46:ce:99:b5:98:bd:
d1:57:f1:b9:a1:1b:0f:92:f1:b9:3e:d4:03:7d:10:ef:5c:47:
ba:07:b1:68:8f:39:93:af:e3:13:12:25:69:43:d3:a6:30:52:
2c:8a:d1:0a:d3:6f:77:5f:f0:ac:3d:24:2d:3c:78:ac:5a:c4:
1e:33:75:b5:85:c0:46:13:45:c2:1e:e7:2c:a9:ec:fb:83:b7:
90:d5:86:45:d3:14:55:0d:21:89:fd:43:e7:70:44:f9:d3:9b:
e2:2d:00:29:bb:62:0e:d1:b0:21:46:46:5d:03:12:14:88:ed:
23:5d:61:3d:4a:04:06:a5:08:4d:10:b7:6f:60:dd:08:b7:f1:
d6:b7:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:26 2025 by rpki-client