Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: Vgs24zmJlz3qqWVVVxbnYQw6JEQWq+ov2z5sJd2qrbg=
Subject key identifier: BF:99:DA:D1:E8:A8:C3:E8:39:92:56:F9:F5:76:E0:A2:F0:23:88:D0
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 0194BBCE9205B4553B2EFD352B0AE4BDEF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 10C4
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: uwnzc3cv+3cP0o68M/sahAvOpdyRU4fX2PJK7uTAFQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:05:b4:55:3b:2e:fd:35:2b:0a:e4:bd:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=bf99dad1e8a8c3e8399256f9f576e0a2f02388d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:52:2e:0f:30:29:45:df:da:9f:56:d7:38:
df:e4:62:2e:56:58:a9:35:70:ca:5a:8a:e1:65:2e:
58:fd:bf:85:6e:e1:88:2c:03:8b:52:75:92:dc:24:
52:04:99:3f:ce:8a:a5:11:5f:03:5c:12:ed:42:02:
dc:9d:b3:67:bc:e5:a7:ff:52:47:01:49:32:39:64:
cb:c9:d2:8f:dc:30:eb:ca:45:32:af:27:99:bd:24:
e6:c5:8f:a4:ac:e6:00:a4:aa:cc:f9:7a:c2:2f:6f:
e0:a4:51:ba:59:78:27:a9:c1:9b:68:e0:4c:b7:cd:
f7:f9:44:02:8d:e6:e0:3b:74:f8:74:da:a1:56:ad:
e5:e7:0b:7d:62:c1:d3:5a:18:b9:21:3e:5e:a1:6b:
94:ae:36:ce:d5:93:ad:95:01:26:fb:f7:34:b7:23:
8b:18:94:d5:a8:01:04:72:c6:7b:25:c8:1f:00:e0:
0d:ca:f4:ca:d2:b6:fc:e8:40:ca:c7:b7:77:1c:b3:
6f:b8:f6:dc:6d:8f:39:b6:48:61:cd:ab:6c:ad:4b:
50:f1:58:43:8e:dd:64:2d:ad:a2:77:13:c9:68:26:
7d:cb:03:3f:35:f8:3c:b2:a4:53:90:d9:d4:d7:c7:
bb:50:5d:5c:b3:dd:b2:b7:98:e5:53:d6:70:9b:04:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:DA:D1:E8:A8:C3:E8:39:92:56:F9:F5:76:E0:A2:F0:23:88:D0
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e1:6e:cd:23:7d:f3:4e:09:36:ea:b2:d7:09:54:7b:d7:b9:
a7:23:54:33:ed:7e:85:48:c8:9e:d0:c3:6a:5f:0f:5d:21:2a:
35:c0:ce:8f:f2:24:3d:e4:ef:b1:63:d0:95:9f:66:19:9b:96:
c4:ee:6d:05:fd:62:08:f6:37:23:57:9c:c2:5a:72:71:e5:a7:
7e:a1:ea:ef:a1:99:0b:86:63:16:3f:c8:80:04:87:ed:63:6e:
db:7c:d1:f8:ed:c4:53:95:af:bd:c2:39:fe:76:8e:72:15:bc:
33:e7:f2:9b:36:52:ec:b8:31:65:c6:86:5c:96:af:a2:73:a2:
fb:5a:07:28:1c:75:d7:c0:bb:26:5a:58:71:b1:94:a0:1e:c5:
7b:d5:37:37:49:3a:82:70:da:e4:99:8f:92:3e:dc:e9:70:31:
d7:44:3c:b2:b5:32:bf:1b:c8:8f:6e:78:65:0a:60:4f:92:48:
f7:08:61:72:1c:17:89:81:a8:49:a7:ae:6e:5c:b5:72:90:8d:
77:48:84:9f:fa:31:e8:be:c7:e3:e7:02:14:de:7a:c2:67:46:
f7:ec:7d:8a:12:ec:91:b2:0c:01:1c:af:db:d3:d5:d7:8a:52:
ce:43:0d:8f:76:91:e3:d8:11:91:26:f7:b2:87:ec:6a:b1:e9:
50:a5:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:12 2025 by rpki-client