Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File: JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier: A8PRWvz7VSi5Ke4dHMzsgoL21xclpedZAM9ZjeyyO+8=
Subject key identifier: EE:0E:A6:20:73:8C:3D:8D:A1:93:CF:EF:E9:AA:46:71:BA:12:52:1D
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0194BD4E80246C39EE8427061C88FEE6DDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: aQZQVBQqYfxlX2nrZEA92a/3KDqhBLhfMNZraiBILJ4=)
2: Xmgi0hz7aycfcGuos9MtaZD2fAY.roa (hash: 27AhZBXGL8/6D8A40WWc2GxpkIxeIL5C851gF1GkfOQ=)
3: lnwaLzWWa5ViHFLZAxPlOTScH30.roa (hash: y6/OTPlQpnpVyldc5nj03ZdvWsxu5Cg3qcI3o6cOA4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:24:6c:39:ee:84:27:06:1c:88:fe:e6:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=ee0ea620738c3d8da193cfefe9aa4671ba12521d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:a5:61:22:16:bd:16:48:d2:03:e0:ad:0c:
27:37:73:af:e1:26:3e:a5:1a:5a:ac:2d:47:c5:dc:
a4:ae:d8:e4:59:b9:55:d8:6d:7a:c2:9e:be:c3:eb:
fc:7a:84:d5:9f:89:86:43:c2:bc:4f:1c:3a:cb:82:
30:d6:be:bd:9d:4e:0f:46:9e:f8:90:1e:1c:38:b7:
2d:27:52:8c:0e:0d:5b:d6:23:ed:46:e9:86:c6:ff:
ac:62:ea:75:20:1e:be:d5:c6:50:cf:f7:e4:4a:bc:
d7:26:43:e8:ff:27:98:9e:32:44:95:2e:b9:c1:28:
fa:94:f1:77:d5:87:73:7f:3c:18:60:06:7e:32:1b:
36:49:5b:00:3e:f7:38:7d:de:bf:e9:e8:38:7c:36:
7c:7a:5f:e5:a1:7d:85:09:db:d0:24:b2:91:80:ab:
0a:dd:fe:73:40:60:8e:58:05:9c:96:ce:0a:cf:ae:
d4:da:7f:92:c3:60:16:09:a4:3c:ce:7f:3b:c2:e8:
62:f0:ba:99:a5:d2:22:88:ab:1f:d4:68:1e:96:cc:
86:4f:77:e2:9f:24:b5:ee:1c:b5:ba:26:7a:09:0b:
35:8f:e5:d7:9a:7a:66:15:a5:e9:f9:01:47:cf:b7:
fa:61:e2:92:5b:99:5a:8a:bb:f7:aa:f9:61:18:d2:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:A6:20:73:8C:3D:8D:A1:93:CF:EF:E9:AA:46:71:BA:12:52:1D
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:67:20:61:12:b9:2c:67:06:58:65:e2:09:62:dd:75:32:
33:2b:7d:3c:56:88:94:a3:8a:86:90:7f:b7:11:98:d0:6b:e7:
0a:7b:9d:34:13:64:5c:3d:07:1c:e1:4b:9a:2b:15:b7:b3:b6:
ab:3c:e8:dc:81:34:54:cc:cd:1f:03:58:bf:72:73:62:84:3c:
69:07:a8:ce:d4:41:1b:0c:97:25:43:76:fd:5e:8f:bb:f5:7d:
68:fe:68:6d:a2:8c:93:da:ee:3a:f8:7c:16:93:95:bb:93:64:
71:ae:c9:e2:e1:72:e5:92:78:24:01:1b:2e:53:dd:73:ba:d1:
51:d6:bb:97:0c:61:78:bc:28:a1:ce:2e:c5:ce:94:72:ac:60:
c2:bb:30:31:9b:86:c2:c9:42:aa:bd:26:b6:33:30:72:12:8b:
1f:62:06:4c:98:62:d2:33:42:bd:84:7a:fb:fa:ad:84:57:aa:
98:41:ad:3a:6a:29:b8:cf:b9:a2:09:09:68:7f:b1:8a:15:2e:
8e:b7:5d:b8:65:a7:65:35:13:f5:e0:f6:5a:83:b7:fa:d4:51:
bc:0e:c8:c3:05:02:5e:9e:15:3d:b9:38:cc:75:e6:21:90:95:
30:00:80:21:c7:3d:78:b3:01:e5:3f:5b:13:2c:89:60:24:28:
b2:cf:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:03 2025 by rpki-client