Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: ozSyuLFsVslsAoIaX3dU3AkN7aJavDkRCwnqr/V0MG4=
Subject key identifier: 03:36:90:91:13:12:BC:A8:74:C7:1E:D3:97:C5:E6:2D:93:BB:E2:85
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 0194BD1787385569194AE069333E6FBB2D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: AZp95d/qjF3LYouWVHQpHS38AWglkbv/rZhRBOGB8SE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:38:55:69:19:4a:e0:69:33:3e:6f:bb:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=033690911312bca874c71ed397c5e62d93bbe285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:8f:fc:e4:cb:f9:44:d6:db:5e:b0:f8:92:
ea:f6:ee:6e:8e:10:5d:fc:8b:e9:ea:22:8b:2f:78:
03:36:30:af:46:c1:b4:af:69:a5:91:34:1a:a8:2c:
79:79:3c:39:d4:a0:cf:53:25:ff:3f:08:a2:03:0c:
93:fd:7e:15:50:fd:3d:7b:e5:e6:02:de:d0:e9:74:
54:73:25:98:38:7a:c1:7e:93:f7:de:e3:50:fb:8a:
e4:53:f3:fa:af:b7:a8:17:c3:16:4d:1f:91:f7:55:
c9:ef:37:cc:ed:f3:47:3f:7e:f8:56:f6:e6:8d:f0:
f2:87:39:1d:7e:d9:a0:5e:60:3b:84:a2:07:ab:72:
f9:d3:eb:3a:fc:e2:1e:e2:d7:0b:00:72:03:0f:9b:
c0:a7:d7:1e:c7:91:9a:99:99:2b:29:ac:69:7b:08:
f9:e0:43:f8:02:92:a6:c6:dc:81:4a:52:9d:0b:86:
f0:c9:4b:d8:1d:89:20:e4:df:b8:1f:77:bf:30:37:
a8:cc:0d:ef:a0:98:63:29:a7:f6:c7:a1:20:d1:6f:
41:70:b7:ac:ff:9f:be:fe:18:d0:c3:e9:83:94:3d:
50:75:fc:02:d6:8d:60:cc:a3:65:c9:87:68:d8:bd:
ab:84:ac:c2:32:72:e0:f4:4b:41:be:9e:02:f4:bb:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:90:91:13:12:BC:A8:74:C7:1E:D3:97:C5:E6:2D:93:BB:E2:85
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:19:3d:5f:d6:13:34:49:ee:d6:78:85:11:d5:c1:19:a1:
a1:39:bd:2d:8a:05:2a:61:ef:ea:16:aa:57:9a:a3:d6:e0:d2:
ce:5a:e7:61:51:b4:d2:76:e9:07:ec:be:b9:a8:c6:91:6b:4f:
66:ec:3a:e1:9b:69:85:58:bd:b4:32:88:76:5d:16:cc:2c:86:
f9:64:61:0b:6a:b0:4b:fb:a9:2c:91:99:9c:94:69:ed:be:2f:
ae:72:ae:6a:37:43:cf:06:fa:a3:6a:4a:26:ff:1b:fd:a2:4e:
35:bd:5a:78:b2:bd:47:cb:36:e1:09:fb:04:77:8d:74:3b:f8:
9c:96:02:51:95:61:bc:2b:6c:4b:44:40:a0:88:b4:74:65:18:
1d:04:69:ce:41:0c:79:50:12:ab:26:8a:2f:f5:7f:0a:24:d4:
d2:79:8f:77:18:6b:a2:8f:b4:c8:fe:43:78:4d:06:9f:65:ac:
18:a3:a0:8d:f7:51:38:a2:6c:d2:fc:9c:d3:54:b1:f6:b8:be:
a6:e9:d3:cf:42:df:d6:78:bc:c3:2e:9e:31:2c:e6:0c:4e:3d:
56:e7:39:d5:01:6d:17:9a:99:28:e7:25:30:82:2e:dc:e1:39:
3b:fd:74:3e:ea:d8:9e:f0:0b:51:d9:d7:83:36:2e:4d:26:f5:
0f:7c:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:14 2025 by rpki-client