Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: 2d3vTyZqXFciSq+Rvdf5ZHgED4KF3xWlqbhRBjMPOwU=
Subject key identifier: 5A:20:9F:9B:63:D9:C3:48:6A:96:F5:42:53:9B:12:A9:C7:38:9E:1D
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 0194BCA9C4C275D12EA144B3BA4D04CD9B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 0F85
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: rfzHZypWjllLsTst6hlXucOstgeOGQfAJI70mgOgdZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:c2:75:d1:2e:a1:44:b3:ba:4d:04:cd:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=5a209f9b63d9c3486a96f542539b12a9c7389e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:35:92:5d:70:ec:a6:b4:88:88:02:12:23:
c5:06:b1:38:11:48:33:9f:76:d0:98:6d:26:a2:c1:
33:90:0b:ec:43:79:67:4d:7f:4e:4e:89:9a:36:0a:
0f:24:d9:48:ea:24:e3:b7:a0:38:bb:c5:0d:5e:9c:
73:42:2f:92:44:c0:8a:4e:8a:12:dd:40:c2:71:fb:
61:42:52:a2:bd:ed:2a:59:66:75:fe:37:fe:62:7b:
26:47:54:73:26:83:d6:01:55:06:45:9f:08:c0:16:
a5:65:04:1a:ee:34:d6:99:ee:a9:28:82:e4:db:c5:
58:0b:c2:34:44:cd:dc:d2:fc:bc:d1:e0:ca:df:b9:
81:f6:7e:29:eb:95:40:3c:d0:2e:88:59:38:e5:10:
f7:45:13:11:a7:cb:27:0e:fa:36:4d:39:d3:3b:07:
b3:ef:b7:9c:3b:f8:77:fb:7c:1d:dc:e6:61:78:53:
8f:c0:b6:e0:9e:a5:fd:62:f5:ed:9b:02:7a:d5:27:
f2:10:a4:54:b4:50:e5:6b:d3:a0:1b:e9:80:3a:a9:
01:85:b4:36:d7:2d:dc:0b:4d:28:dc:0d:91:b2:00:
13:b6:b1:0b:57:e7:86:11:e3:ef:c0:2c:6c:8d:54:
ec:e7:85:d9:18:ad:41:38:2b:f2:45:9d:4d:9d:10:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:9F:9B:63:D9:C3:48:6A:96:F5:42:53:9B:12:A9:C7:38:9E:1D
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:06:73:5e:8a:d2:88:27:0a:09:17:b0:90:45:fd:d1:35:
d5:05:68:e3:e0:d2:fd:f5:5f:5d:e6:b5:34:e2:1e:04:9e:2b:
b1:9c:c6:df:80:9a:3b:7c:b9:db:41:ab:18:58:ce:de:cb:38:
9f:e1:9d:03:30:dd:b8:4d:f6:16:71:dc:34:ca:6d:d4:e4:b9:
d1:4b:aa:22:de:cf:cf:ac:23:9a:c0:f5:a7:c9:93:7c:0d:26:
72:57:fa:0f:33:f8:48:29:e5:91:38:54:e8:36:b0:9b:69:53:
6c:b2:26:d3:cc:56:95:a3:77:1d:1b:df:f9:4e:8c:5b:b8:eb:
30:00:a9:66:12:ad:f4:a2:e6:ff:8e:ca:cc:7f:2f:bf:35:0c:
87:6e:53:2e:53:75:6a:08:ba:8d:1a:d5:5f:81:a1:70:2e:3a:
93:aa:ee:d2:42:22:ab:13:8b:ea:34:48:f9:44:94:f7:87:8b:
37:1b:7d:bb:07:4b:c4:7c:bc:88:79:66:ed:33:95:2c:a1:24:
4b:81:6e:10:ab:0f:bd:db:b1:fe:c7:ec:81:a1:e1:dd:a3:42:
60:dd:7f:43:2a:b9:0c:3b:1f:27:83:93:55:44:d7:43:89:c2:
44:61:68:bc:5d:ae:4d:29:17:ae:6e:0d:1b:35:f3:e6:de:67:
51:d1:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:17 2025 by rpki-client