
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File: jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier: zOGWgFsilt0gr0ff/dALcdoTt5V3+9tH9SLsifwB5jY=
Subject key identifier: B8:96:7B:AC:BF:97:60:19:E3:26:FD:FE:1E:3C:AE:B6:7D:98:E7:B7
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 0194BD85AF134FF878EE22529352A5BC6D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number: 0E53
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
2: TbDm0VV2IIni5MfaMJDxPEqxHQQ.roa (hash: 7X6b+hTk4kXwHQiBVUnERgcn3N8YcwYoax1mTJYhV7U=)
3: YXd5kwg4HgCLWghJcX8C036D1Wo.roa (hash: 4mxl4tWWj/m9oN5bIXyonk91G4n197ABWNjjuhmRTbU=)
4: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: sNnxv4lTDY/l+fkaWidjpDoc5DcGV0fm2ohfxfEHEAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:13:4f:f8:78:ee:22:52:93:52:a5:bc:6d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=b8967bacbf976019e326fdfe1e3caeb67d98e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:bb:9d:8f:ec:e2:f6:1d:0a:53:62:c2:7f:
49:9c:34:9f:48:34:0b:06:fd:b7:3c:e5:ce:be:b4:
22:93:73:ae:ac:41:c3:c2:a9:06:fc:88:64:07:85:
fc:97:e8:8a:3e:77:56:8f:2e:7d:2b:ab:dc:2c:44:
20:f3:01:6f:f8:c8:5a:e9:fd:69:be:e6:d2:34:db:
2a:ed:0d:43:0f:a6:09:85:b3:6b:7e:34:59:f0:40:
c3:a4:83:ac:31:9e:fa:3e:b5:18:85:ea:d3:43:7b:
64:8d:dc:51:64:ed:ae:cc:38:5d:06:52:1b:a1:34:
0b:de:42:10:6b:38:9b:85:c1:7c:ee:b6:87:b1:30:
c0:23:74:68:1b:59:40:27:13:e0:ba:fa:75:cd:5b:
5b:ab:f7:77:65:f1:61:15:92:91:63:64:f3:0c:9f:
9c:8e:90:7b:99:4d:44:d9:4c:56:6d:22:af:4f:f7:
50:95:52:ef:a6:42:bb:76:33:70:05:ad:8b:56:1f:
04:96:34:08:99:17:44:79:06:2f:55:13:62:96:6c:
3a:1c:e2:8b:d1:3a:1b:a9:7f:ed:74:86:43:7a:aa:
21:c4:ca:c4:f3:54:20:b6:7e:b8:c4:40:f6:ba:d4:
20:a4:3f:df:f2:55:88:19:17:9c:13:a8:a7:a5:30:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:7B:AC:BF:97:60:19:E3:26:FD:FE:1E:3C:AE:B6:7D:98:E7:B7
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:c7:cc:16:8d:23:84:2c:07:e2:05:fb:c8:1d:21:66:21:
47:a8:5a:2a:f2:19:ef:90:1e:21:42:ed:86:b7:d9:77:50:ca:
d5:0c:12:bb:91:ad:d9:10:41:f7:32:95:3e:70:38:3e:f1:a5:
96:bf:9e:d8:f7:eb:4b:27:cf:97:e6:38:9a:66:98:1c:f4:94:
c8:2a:83:e9:21:19:cc:aa:43:73:73:1b:41:f8:7a:64:90:6e:
58:bd:4f:87:8f:d7:9b:0e:a2:a3:2b:12:04:96:09:8c:fd:6d:
f3:79:80:ed:69:31:a3:4d:40:89:38:84:c1:8f:81:08:5f:bb:
c4:e7:f7:35:e7:61:1f:78:b7:bc:58:2b:21:bd:c8:2a:9a:be:
e0:37:af:0b:1f:f6:5d:b3:83:0c:6b:bd:38:a1:86:69:21:a5:
e6:cd:2f:40:5d:dd:23:c4:2c:65:8f:d5:d6:12:76:cc:e5:d1:
33:c0:bc:f3:2b:cf:5c:73:52:bd:80:76:bd:38:4f:75:44:eb:
f0:e0:6c:42:06:38:77:44:bd:ee:a6:97:3c:2a:26:e0:c3:ff:
b4:3f:5d:44:06:51:3f:8d:1a:70:4f:e4:12:c4:6b:69:f2:39:
ac:cd:1c:15:7c:3e:93:28:90:8f:fd:9b:33:a3:a6:4b:90:21:
2f:ee:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:45:13 2025 by rpki-client