Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: C6CXB93OYTB3HwD2L5hm1eID7f+elYm8FuYObSDz/VU=
Subject key identifier: D1:FC:10:56:C3:5F:CA:45:83:3C:C6:F3:F3:48:54:D4:B3:11:11:15
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 0194BD17A6EAF0D6F4E2A999D564B323AF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 0F0B
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: 6lTeKftF2Kpld19e6zhs/8ghoDbuKwHygSr9sBGGI/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:ea:f0:d6:f4:e2:a9:99:d5:64:b3:23:af:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=d1fc1056c35fca45833cc6f3f34854d4b3111115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:01:e8:9d:80:fb:15:42:15:06:cd:3d:0c:
2a:5d:a0:92:1d:6b:ad:55:83:2e:e7:a1:1a:f5:6b:
34:46:e0:c2:e4:e1:0e:98:d4:4d:7f:bf:14:53:fc:
cb:52:d8:e6:f4:32:c3:cf:70:c9:b3:18:a2:f2:d8:
76:1a:9e:a0:3c:bf:52:d0:6f:2a:e7:d7:ee:ee:84:
d3:27:72:2b:8b:f1:c6:cd:c4:6b:44:30:1e:58:77:
26:37:a9:bd:7b:09:eb:45:e3:78:7a:25:6d:1e:a8:
9a:21:79:b5:0e:22:60:6d:4c:ba:3d:92:4c:a4:42:
7c:16:a1:07:e8:9f:fb:b6:d2:98:1b:99:b2:00:c0:
b6:86:98:31:73:9d:8e:f6:a2:3b:92:92:e0:ed:33:
d7:ba:15:53:2d:72:89:44:6a:c3:8b:88:d4:84:6c:
6d:2d:f1:99:45:44:96:70:f1:5a:16:2a:b1:63:d1:
bb:05:7a:94:a6:85:c7:78:1d:56:50:6f:9c:c0:ea:
0f:7e:75:4f:70:00:cb:48:42:5b:b0:56:91:31:30:
5c:a3:37:b3:61:c6:69:e5:c9:ba:26:0d:a5:a0:1b:
2c:f1:74:8a:17:58:b6:ed:20:2b:5a:ad:9c:3d:1a:
7c:b0:4a:6a:aa:3f:84:18:9e:17:f1:09:79:04:89:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:10:56:C3:5F:CA:45:83:3C:C6:F3:F3:48:54:D4:B3:11:11:15
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:af:08:24:ce:26:2b:5c:62:c9:98:67:c2:6d:10:2c:01:32:
f0:b2:bf:19:ec:d0:7e:24:cc:03:94:e9:9d:1f:c8:c9:be:43:
2a:91:c4:0e:a5:91:d4:3e:63:80:bc:17:6b:27:8f:80:c5:ce:
fe:a5:5d:26:39:cc:41:a0:da:7e:a8:e2:0c:07:29:fa:c4:35:
e4:31:7e:0f:c4:cf:dc:35:b9:70:2a:c9:07:d5:62:46:83:e1:
93:cd:36:e9:5d:92:f7:3f:a1:5b:ec:d4:cb:d0:36:b3:ba:9f:
0e:81:af:96:76:4f:19:e2:74:87:e7:08:1f:32:4e:f8:61:45:
5a:81:84:bd:dd:3b:cd:d5:c1:34:82:af:2b:dc:0d:bf:63:c7:
9b:38:b6:fa:f7:de:05:af:03:30:27:54:ca:c1:49:72:7b:27:
0b:da:a3:52:c8:3b:b2:d2:80:09:eb:9c:9c:9e:1f:a4:4a:c0:
09:75:44:00:31:7b:7a:16:4b:ae:91:5d:d3:7c:a9:81:7b:d1:
18:62:4b:67:fe:85:91:f6:e7:5b:2e:54:09:8f:ca:41:43:82:
a6:20:47:50:ac:6b:4d:7d:9b:b0:b7:eb:37:b0:43:bc:9f:93:
01:b9:b5:19:6c:8c:4c:18:1b:fc:8e:f7:6b:b6:27:b2:3c:bb:
de:9e:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:54 2025 by rpki-client