Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: IE89dlUfPbboZBSU06T35Gp1c4werCRAV2cnD1oXK4Y=
Subject key identifier: CC:2B:FD:39:CB:6E:02:18:60:0D:03:BE:C4:C2:D3:DC:4F:19:53:C9
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 0194BC3BC04CAEE503F0EF816DD2CF91E7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 01B0
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=)
2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: JxZsC3jUMTc0pqvF9XbzU1OnrMPPQ3z5ZWuIDqgvtcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:4c:ae:e5:03:f0:ef:81:6d:d2:cf:91:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=cc2bfd39cb6e0218600d03bec4c2d3dc4f1953c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:98:2e:fb:c5:a3:46:2b:66:59:65:ab:cb:
21:e2:48:a1:00:f8:89:b2:8c:82:63:db:46:d3:bc:
0d:35:f1:3f:fb:f6:c1:16:5d:2f:2b:53:95:b1:7f:
bb:1d:fa:4d:ca:44:2c:ce:d2:14:b1:76:dc:fc:df:
cb:33:fb:0d:26:3b:e5:b6:f5:68:4b:f7:52:80:08:
9b:db:d2:4c:6d:a9:79:9f:3b:d3:d4:a7:06:a6:95:
6d:9d:2c:0f:f7:76:b0:99:7b:9c:17:f4:47:11:72:
8c:77:74:a8:d9:ba:03:42:cb:e6:a0:a7:5a:4e:26:
3e:2a:3b:43:cd:1f:e3:32:dd:65:20:5e:76:ec:39:
16:58:ec:df:d2:0f:2f:06:09:d8:0f:8f:4c:c5:97:
e4:c8:76:d3:66:75:f4:f0:d8:a5:38:17:ca:de:7c:
15:fd:a1:f1:b6:b6:e9:5d:7d:18:47:63:5b:9f:43:
2d:1a:20:54:c6:1c:f4:f0:31:03:6d:61:69:72:7f:
b4:fe:19:c7:57:71:f5:c1:0d:96:31:bf:c9:1b:94:
54:f6:a1:1a:a9:81:a2:39:c5:46:8c:4b:75:20:55:
e9:42:19:66:04:8a:16:da:29:9b:92:d7:5b:94:89:
69:b3:4c:3a:84:ee:36:90:5e:da:d1:69:30:6b:30:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:FD:39:CB:6E:02:18:60:0D:03:BE:C4:C2:D3:DC:4F:19:53:C9
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2a:d9:56:d4:89:9a:17:22:9c:10:6a:44:ee:24:1e:54:d6:
a2:ca:2d:24:10:8c:0f:c7:83:17:d3:6e:f5:7a:eb:de:f8:06:
52:f7:ac:ed:71:49:c3:5a:91:09:2e:93:77:07:61:5b:e7:be:
b5:f1:bb:cb:02:b6:1d:42:38:94:3e:7f:9b:76:38:03:e9:6d:
d3:e2:1e:f1:c6:35:5e:db:59:2f:1b:c1:63:6d:71:0b:db:88:
f5:6d:93:d4:19:11:a9:d7:88:16:29:0b:9d:63:89:ac:03:d0:
43:45:55:68:4c:65:8c:48:6f:33:ed:c1:a6:b6:f6:c1:eb:15:
0d:0b:b4:74:96:0c:dc:c7:77:d1:b6:ba:60:cf:7c:1b:37:1c:
6d:f9:0b:bc:60:88:50:9a:38:fa:4b:ea:f4:67:44:a1:b7:09:
6e:1d:1f:ec:88:08:fd:71:07:63:cd:c6:25:27:bd:4d:9b:90:
28:d6:9a:2e:74:e4:63:9c:07:3f:d6:2d:14:4a:96:fa:17:48:
79:be:b8:66:7c:61:c2:1d:41:35:6b:dd:5b:66:f5:f3:51:f6:
8d:79:c1:18:31:0d:ed:0f:0b:f4:a2:42:bd:8b:67:9b:08:0b:
59:92:23:b4:ac:c0:a0:51:94:8b:de:fe:d7:8f:a0:70:d9:3e:
db:4a:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:33 2025 by rpki-client