Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier: 7Bo1rzN5/KG0ZQxiV8s7R1aeimjFWQ0rVGvI6CTsY50=
Subject key identifier: B9:5C:AE:C2:D8:24:8B:4A:CF:95:70:E0:A7:89:14:29:85:FB:6A:A9
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 0194BD858BD0370143105AA05689CB5CFD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number: 026D
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: ZumWCCX08js6UHDhjYC+UaI76M8x00QCHogZWk8oWQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:d0:37:01:43:10:5a:a0:56:89:cb:5c:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=b95caec2d8248b4acf9570e0a789142985fb6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:21:d8:92:35:39:fe:7c:2e:ba:c4:a6:28:
80:50:eb:66:e6:33:7a:ad:e4:7f:6b:a1:d9:6e:3c:
2f:73:a7:97:37:16:56:15:d2:de:be:71:1e:55:46:
f2:75:0c:fd:45:d0:c9:c8:fd:66:80:a2:cb:bb:c4:
f4:82:84:40:55:cc:96:0b:be:9c:ce:fb:74:45:e2:
5b:31:54:ed:74:d3:02:7c:c8:57:d1:c5:7d:93:c0:
03:e6:c2:b4:25:20:d1:72:73:12:a7:94:e2:48:45:
05:59:a7:81:b8:99:46:d4:3e:ff:04:31:77:63:ca:
ad:71:98:e9:5a:da:36:b8:54:14:e0:aa:7b:66:ee:
6f:35:f5:f0:e4:25:a1:1c:db:56:14:33:b1:20:6b:
0e:dd:b6:7c:c0:b2:cc:11:4f:20:23:a8:f0:ea:50:
43:f0:c1:f0:40:84:f4:0d:c2:d1:e6:86:80:5b:3e:
5c:0b:28:e0:f2:4d:34:20:54:73:ed:bb:eb:87:93:
1f:28:97:24:46:6f:10:58:77:af:51:57:00:56:eb:
8f:a8:e4:4e:07:5c:6a:e8:fe:bb:1a:14:d6:22:f1:
ee:ca:a5:e7:16:d8:d4:28:cf:b9:43:da:18:f0:43:
d0:33:39:fe:42:a2:4f:48:17:72:e2:70:cb:7b:c0:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:AE:C2:D8:24:8B:4A:CF:95:70:E0:A7:89:14:29:85:FB:6A:A9
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2e:52:5b:ac:b1:b8:83:6b:5a:f8:63:ab:7a:1e:a2:35:f6:
a6:7b:67:e4:50:fd:98:ca:82:5f:c5:eb:94:b1:b4:dd:e7:dc:
32:33:eb:01:66:3d:7d:84:12:df:b1:61:60:60:ee:2e:0a:ba:
f6:f4:80:40:5b:51:ff:95:4f:72:22:a0:da:bf:58:f1:12:f3:
81:67:03:5c:c8:eb:9c:9c:e2:fc:f6:26:e6:b9:48:64:0d:91:
54:52:c3:db:fe:8a:d5:c3:9c:5c:fb:67:73:9e:5f:4f:5d:15:
1c:2c:c9:13:05:69:0a:67:e6:51:64:78:72:12:5e:b6:cc:f7:
5e:ff:27:79:ce:10:c9:4a:6d:2a:1e:44:b9:2b:5a:1a:40:31:
8a:24:70:af:04:1b:b6:6b:3f:12:c1:5b:06:fd:42:b7:4d:98:
42:d1:7f:47:ad:94:c4:7a:e1:8b:cf:6f:2b:c9:12:b1:9b:c4:
5c:18:91:b5:a4:d9:61:0d:0d:3b:ab:14:27:e7:14:4c:84:63:
25:51:ec:ee:a3:e2:33:a0:d0:ba:c5:76:86:b5:a3:99:8e:f8:
52:c9:62:b5:70:12:2a:e0:d2:13:36:a0:ab:c6:fd:7c:ee:b5:
6d:1c:cc:32:e1:f1:1f:0f:05:3c:84:d7:e3:96:0c:ea:32:31:
cc:b2:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client