Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: 7BBLbMM0k0Znj2IoBC9O/4kvOaVZSA74MWfeXU6MLr0=
Subject key identifier: C1:F9:27:DF:68:E8:62:B6:DC:F9:11:86:03:37:29:B2:CC:EC:C1:2D
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 0194BBCDB15CE0B7A91E46E65CA01FEB523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: PODvucYcg7rSTwNRXnlGDdww+SqGffjiE6RW05V7pTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:5c:e0:b7:a9:1e:46:e6:5c:a0:1f:eb:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=c1f927df68e862b6dcf91186033729b2ccecc12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:0c:ac:7e:cd:72:47:db:34:10:3e:53:07:
53:45:89:d7:b1:ee:0d:ab:14:d4:c6:1f:6e:04:74:
47:16:72:84:f9:29:e2:95:72:a4:7e:f3:3c:0a:e3:
76:39:0c:02:b4:fd:b4:9d:71:9e:c3:8b:b5:fa:b1:
f8:f9:24:b8:14:6b:59:07:77:4a:74:35:fd:b9:73:
53:4b:4e:60:b5:dc:42:66:83:49:59:61:64:e3:ca:
0c:67:49:a5:bd:87:75:2d:5f:91:5b:73:fa:84:9e:
06:4d:75:21:5d:36:1c:37:9a:08:e1:16:ec:0f:52:
d8:49:db:7a:be:31:43:2a:f4:12:8c:ac:7a:19:3b:
e6:ea:44:05:d6:25:57:a7:a5:c0:01:09:b1:95:f0:
0a:49:5f:e7:ab:0c:84:27:dd:ab:bf:19:0d:7c:68:
c8:1f:a4:0e:fe:db:d5:c0:66:e8:fa:27:b2:66:29:
22:5a:1a:73:4a:e2:aa:78:1d:2c:fe:ae:51:33:ad:
27:03:55:1a:d6:17:10:f7:07:6c:09:75:85:2c:eb:
c6:45:e4:97:25:5b:8a:1d:33:96:79:79:99:2b:25:
3a:72:64:bf:33:ba:24:b5:1b:ec:a6:95:0e:81:c7:
3e:30:f6:0e:5b:9f:3e:3d:c3:12:99:07:8f:4f:7e:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:27:DF:68:E8:62:B6:DC:F9:11:86:03:37:29:B2:CC:EC:C1:2D
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:29:4a:2d:c9:7d:62:a8:f2:49:7c:c9:8f:31:94:dc:7e:e2:
21:c0:b3:15:30:12:8a:7d:cc:b1:8b:7f:94:ad:a0:cd:73:b1:
44:29:00:3a:8a:cd:87:22:2d:b5:ef:6b:a4:f4:fa:e7:a9:a6:
96:44:e0:4a:ae:96:65:aa:7f:a8:2b:8f:c0:4b:94:39:d0:6b:
6e:ed:53:51:ba:2d:fe:21:c1:40:73:3f:76:68:f8:5a:aa:a9:
45:1b:4a:33:7e:20:2d:64:fb:e4:8e:91:40:0c:48:71:ae:59:
40:71:91:56:7b:86:46:6d:ca:9e:8f:0d:7e:b1:f3:d4:b6:a7:
41:67:ac:a0:fd:36:5c:07:b8:fd:1c:68:f9:16:22:f9:6d:bd:
bd:01:70:c9:52:31:3b:48:e7:c5:6e:43:91:d6:66:5c:e6:49:
21:1a:e7:04:e5:e6:fa:b9:44:93:0a:f2:de:36:fd:af:2b:dd:
5e:72:b1:16:81:3f:41:98:7b:3f:70:ef:5d:6e:a9:5e:22:53:
08:72:1b:d9:6f:94:01:80:fa:d8:be:ce:7f:4f:f7:aa:a9:c6:
2b:0d:96:6b:35:68:02:3d:7a:5d:67:db:83:5f:10:ab:60:8d:
f3:55:c1:68:7a:c1:83:a6:5c:d1:2d:fb:46:f6:96:c7:2c:88:
0c:f1:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:17 2025 by rpki-client