Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: X5KGPn5OkuGCgyzTm5fXqsP0QL+n1L+CqUdQbm0Sea8=
Subject key identifier: CF:D2:EC:C5:C3:E7:EF:DC:74:29:BF:DC:E5:02:AB:53:89:8C:8B:B9
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 0194BCE06CCA54E688BB99AAA0C37ABAA446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1178
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: dv5vl7CEe2CK00m2YodUtBqxJLeJJUgvDy6i8YUoMVc=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:ca:54:e6:88:bb:99:aa:a0:c3:7a:ba:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=cfd2ecc5c3e7efdc7429bfdce502ab53898c8bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:2d:e1:e6:6c:87:90:14:cd:d2:94:11:4b:
e0:12:b7:5c:31:3c:d0:18:48:23:0e:67:7a:76:8a:
f3:fe:4f:3b:26:6d:bb:07:42:f6:8c:39:44:5a:19:
3e:2c:17:c9:5a:9b:f8:3a:d2:bb:2b:f8:72:37:55:
6a:52:8e:56:70:1e:dc:3f:99:66:89:01:87:57:f6:
75:0d:b5:13:60:f4:41:6f:7a:fc:c1:8e:58:ed:65:
a5:dd:50:81:18:61:60:fb:6e:4b:57:12:a3:a4:b1:
66:72:22:0d:c1:f6:39:eb:97:e3:9a:14:18:99:1f:
bd:ef:1d:05:16:69:ee:a1:b4:ed:ce:4f:ed:25:e8:
ae:64:8b:b2:41:7c:e9:f1:e8:08:9b:82:05:56:91:
15:bf:00:f6:f6:83:1a:d9:ef:ea:d8:47:65:a3:52:
0b:73:32:f7:6a:59:86:e8:e9:9c:93:ca:4f:8e:f1:
7d:8d:1e:28:84:f5:b6:d8:a8:82:c9:6d:61:dd:c3:
d1:df:c7:7d:0c:f2:05:60:33:66:ab:c9:31:e8:d9:
f9:21:75:fe:29:6e:93:6a:8f:0a:f4:7e:47:5b:b4:
ec:82:47:97:3b:b4:92:5c:a7:65:39:d9:15:74:f5:
bf:d0:00:e0:1b:66:06:8e:4b:66:17:af:3c:56:06:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:EC:C5:C3:E7:EF:DC:74:29:BF:DC:E5:02:AB:53:89:8C:8B:B9
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:a8:6b:19:fa:35:17:61:1d:f7:c4:f7:a4:3c:2f:32:91:
f6:2a:65:5c:89:3b:fe:97:b7:33:ba:32:b0:de:5c:d5:d1:b5:
f8:77:fa:89:b8:5e:71:4f:42:09:54:15:9c:5c:33:62:36:c3:
1d:49:65:14:d6:41:c0:ab:d0:87:e7:eb:4e:33:69:e8:2d:dc:
07:e7:1d:e8:4d:73:0b:6d:60:4b:79:e3:ea:6e:69:4c:f9:a7:
76:ab:a8:e8:76:60:11:07:17:32:c6:f3:93:dd:e6:77:0a:6c:
ae:8f:7e:29:c2:e4:e7:67:c6:bd:c9:a3:22:c3:74:f6:f1:44:
ff:1c:ae:a8:e1:6d:e0:46:89:55:98:24:66:98:fd:65:64:a2:
5f:c5:a3:ce:5a:ea:e9:f8:13:63:17:4e:3c:0a:99:e5:5d:d0:
c2:1f:df:a4:e6:21:77:52:a7:55:9b:a5:93:37:33:99:af:c4:
b7:46:fb:3b:df:8c:b4:4e:03:0e:3e:ae:fc:38:4c:7f:ad:e1:
b5:4d:9b:5c:7a:25:96:75:77:83:66:8a:22:48:2c:82:6e:05:
c7:b0:1d:2f:3c:e8:31:b0:b7:9b:83:a8:a9:49:07:cc:70:6f:
b9:8d:4e:aa:c3:84:da:e2:2d:b1:a7:68:9e:09:d3:46:46:01:
29:56:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client