Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: P0pzuZaFI0nIYLl31JisbyCW4kOo6HT1okBBbLD8VUI=
Subject key identifier: 86:09:59:CA:52:08:E5:01:CE:32:4C:9B:07:81:C8:E6:A6:2F:32:AA
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0194BC3BFED6AE72A1DD959FDE66E19B7641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: yWg/yntgzI4f5RpermfmYmItDq9uMp/g26NbNLyXML4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:d6:ae:72:a1:dd:95:9f:de:66:e1:9b:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=860959ca5208e501ce324c9b0781c8e6a62f32aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7c:5f:24:8a:9c:63:05:10:8f:43:ae:de:f1:
7f:f5:a8:4c:22:66:31:41:e8:a6:80:00:92:27:f8:
5c:84:7d:ad:ce:03:f5:85:ee:88:73:96:e1:40:7f:
0a:54:28:c7:c2:bb:7b:f4:f9:7f:83:f8:be:e3:10:
d1:1c:21:cd:78:39:86:70:fc:c9:1b:2c:5a:13:25:
1e:a0:99:fa:a6:9a:50:72:93:52:80:c9:ab:b1:f5:
7a:a1:3e:3e:ec:17:b7:c5:ea:97:39:d9:43:37:b7:
0f:be:35:c1:61:e2:2c:66:69:64:13:9e:7d:c5:c8:
3a:2d:b8:ed:34:38:94:c6:46:ec:d4:5e:45:8f:29:
ad:eb:10:49:06:5b:b6:f4:03:12:04:71:46:92:78:
58:d3:5a:11:dd:64:3b:f1:f8:86:33:1f:33:47:86:
4a:a5:6e:cf:a0:d7:87:81:c0:c5:e5:fc:ff:05:7c:
ea:05:d3:15:83:b9:30:45:48:23:e4:91:0f:fb:0d:
31:c2:e4:f1:e8:71:2f:8e:ea:0a:ad:db:ec:ee:b0:
1d:3e:a6:1d:bc:90:b4:a6:66:eb:34:94:5c:4b:cc:
9a:0e:38:9e:46:31:79:92:5b:bb:95:4c:71:34:5f:
1d:fb:e8:95:99:cc:a1:64:3e:d1:31:3c:14:5e:f2:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:09:59:CA:52:08:E5:01:CE:32:4C:9B:07:81:C8:E6:A6:2F:32:AA
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:e5:e1:97:7a:58:24:21:3c:6f:04:9c:00:f3:a7:5e:ae:
32:2c:0b:5c:1a:8b:84:db:b2:24:00:7c:a9:50:05:71:77:6c:
59:43:ee:2d:0b:ea:ab:fa:9b:20:34:e3:78:a3:24:4d:8f:1a:
3b:88:03:32:5b:0e:d1:f7:09:95:5c:9b:60:ce:c4:c8:c6:fc:
ea:0a:2c:52:04:83:15:bd:ff:82:b6:e2:46:50:16:ec:f9:4e:
f7:ee:6b:e3:8f:3e:70:31:01:ec:59:57:4f:1a:7e:5b:3d:48:
02:44:47:f4:57:d3:56:2f:db:96:a5:8b:59:9c:d8:55:8a:d8:
69:bc:79:b8:5f:22:fb:ff:3f:62:23:2b:a4:54:42:eb:fc:af:
d4:7e:21:d6:02:b3:84:5a:14:d9:53:5a:90:1e:8b:e1:97:21:
24:98:6f:ca:52:a5:b8:b3:df:1b:d4:f5:89:12:e2:86:b8:a7:
c5:be:f2:11:93:a2:99:26:23:22:95:09:e4:ef:80:3e:e9:e1:
66:1b:a0:a9:8c:44:21:cd:89:84:91:aa:c2:2a:1d:aa:b0:cd:
c4:32:f2:71:90:7e:3c:46:57:f1:4c:35:dc:59:15:dd:2a:54:
2c:aa:a5:db:d0:75:2c:29:29:4d:4e:cb:3d:68:7c:8f:7d:93:
7b:0f:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:52 2025 by rpki-client