Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: IGafnW5oAyW4LdqlewZQoF+4YC15E1vDVLCmoOX7lq8=
Subject key identifier: 4D:DA:BA:1E:70:F7:84:8E:E3:85:B4:9F:6A:5E:2E:4B:81:AD:0F:9A
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 0194BCA9EB37D390D527BA7161C101E083EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0A08
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: 1oozbM4OIYDCeNruofLQ2TJDQWRgQ62kkmhM2bWa6V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:37:d3:90:d5:27:ba:71:61:c1:01:e0:83:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=4ddaba1e70f7848ee385b49f6a5e2e4b81ad0f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:71:19:00:0e:d8:e5:cd:57:b2:2f:76:c3:
42:3d:4c:53:8b:b8:82:4f:0c:ac:98:e3:85:3f:87:
20:ac:26:e4:2d:74:1a:08:55:d0:55:bd:d4:fc:5f:
e0:ed:b7:53:96:23:08:46:6f:b8:d6:7e:46:65:69:
99:0a:aa:17:ef:77:63:51:ad:5b:78:27:56:ef:ce:
e3:6c:f3:d0:2f:ef:8b:f8:1a:48:a5:60:7f:55:1a:
da:0e:ff:67:02:b0:a4:e6:dd:d6:38:79:0d:de:03:
fd:09:64:89:3f:48:bb:14:28:1c:bf:46:ca:e9:7a:
aa:94:07:39:f9:78:85:3b:1e:fc:bd:7c:16:60:75:
c4:79:ed:9b:73:5e:f7:4f:22:0c:ac:35:c9:e6:21:
f6:14:c6:f7:c7:cf:63:bf:b7:a3:f1:88:89:7c:0f:
87:ca:da:bf:ad:1b:8c:c5:d6:8c:0f:29:bf:a7:12:
ef:f1:15:06:6a:f0:52:91:95:6b:8f:eb:f8:8d:90:
43:56:f2:2b:55:99:43:53:11:f6:8f:54:4e:b2:cd:
ac:4d:cc:6b:9c:37:d9:fe:8e:ab:e7:bd:a7:0a:89:
76:15:c1:6f:bc:98:22:93:14:1f:c5:4b:b2:ec:fb:
5d:7b:83:c2:63:0c:f7:8e:3c:5f:2e:92:99:23:af:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:BA:1E:70:F7:84:8E:E3:85:B4:9F:6A:5E:2E:4B:81:AD:0F:9A
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:68:d7:2c:5c:00:cb:e1:c5:c3:80:38:32:6a:1b:56:ad:
96:5d:0c:58:52:be:6d:a4:0c:4e:b1:c1:7e:18:c3:b3:b9:63:
d7:8e:7c:99:ed:4d:53:63:fd:8f:35:d5:fe:2f:83:8d:f1:3d:
a8:3d:f5:60:18:b8:f8:c5:71:86:3f:f9:11:29:db:e7:14:b4:
45:64:c1:d7:f7:41:d6:4b:af:a6:3b:3c:ad:b2:5a:d5:50:5c:
f7:b8:da:8d:f5:1f:a5:ad:59:80:34:9a:89:81:ef:be:9e:3f:
98:88:8c:ad:19:20:44:0d:ca:12:e3:31:e1:88:af:6d:31:c7:
e4:a3:03:70:2f:94:b1:57:6d:25:f4:0b:7b:15:27:ba:5d:b0:
b7:33:84:20:81:b0:91:66:e6:a1:83:f8:30:ea:51:ed:3b:15:
e8:f0:9a:55:29:0d:52:55:64:fa:71:60:67:d7:6c:50:cb:46:
42:1f:be:8b:d9:82:84:c3:57:c7:9f:3c:44:e0:85:e6:64:33:
34:93:c6:df:c5:6a:81:78:fd:25:40:82:36:d0:1b:56:a6:23:
32:3c:7c:96:aa:6f:e9:70:7c:3b:68:5d:ea:6d:d7:95:e9:f6:
50:fb:8a:0d:99:1b:c0:7e:33:ce:97:f3:8c:f5:4a:3a:97:57:
13:66:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:02 2025 by rpki-client