Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: 6jQrzluvBQN7JN23nj2aB+Ip0llDxtd6AEFQF6qu+Xo=
Subject key identifier: 16:FE:21:AC:22:1A:9C:B2:32:EF:4B:05:92:C6:4E:AA:9A:FB:5E:E6
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 0194BCAA0606442187C52F1CE05B57D963B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0A63
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: CvDfmCnQpFdn9itOCuAhB84JP/VRZgjdIXjNZiW7HwY=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:06:44:21:87:c5:2f:1c:e0:5b:57:d9:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=16fe21ac221a9cb232ef4b0592c64eaa9afb5ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:cf:08:51:b0:a2:00:9a:76:e5:90:f9:10:
a1:ee:2b:be:5c:14:5e:e5:c7:0d:5e:0e:89:af:42:
1c:41:04:8a:27:9e:ff:fe:95:56:3f:a5:78:a1:fb:
ef:6d:f9:a7:cd:a4:09:f9:6a:53:9a:24:00:51:90:
bd:db:64:57:6c:4e:cc:06:ae:cc:f9:bc:53:79:c8:
d4:70:54:78:1a:d8:7d:05:1d:99:bc:ff:11:de:61:
80:fb:95:27:70:d1:e5:36:9b:e4:50:48:6a:44:5b:
fa:6e:bf:fe:32:94:c7:c3:a2:d4:92:20:2a:03:d0:
cc:1a:41:f0:75:38:c4:79:ad:67:78:dc:81:2a:7c:
25:04:c3:01:8d:29:b5:63:9e:41:d3:dd:07:e6:18:
d4:a8:f7:7d:d8:16:1e:0f:0f:72:fd:bb:f7:91:85:
b1:17:b4:5d:a9:e1:8e:ee:b6:da:ab:c9:76:cc:9b:
f7:e4:98:bc:9d:bf:de:64:db:12:de:ce:eb:46:a4:
23:8f:c9:ad:a6:2e:b8:90:e5:de:26:92:b6:a9:5d:
66:1f:2b:65:d1:b5:2b:7b:75:e1:f1:09:a6:a9:4a:
12:77:79:b2:55:47:2c:79:7f:a5:f1:db:b5:10:00:
68:10:38:6c:d5:64:37:0c:b1:af:63:3a:de:f9:68:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:21:AC:22:1A:9C:B2:32:EF:4B:05:92:C6:4E:AA:9A:FB:5E:E6
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:3c:fe:25:95:5c:13:73:eb:4b:35:93:d4:26:c2:9b:86:
f6:ff:51:fa:fd:a0:6a:b2:03:3d:bc:45:4d:99:21:2b:d6:6e:
39:8a:7b:88:d2:a2:ff:bc:b9:17:3e:01:71:d2:f8:b9:e6:48:
4a:fc:cc:8d:29:77:48:f4:6a:88:e7:be:be:3c:0b:0f:84:c0:
61:38:b9:0e:4f:1b:87:23:8c:12:5a:ff:6f:31:c2:36:cd:32:
10:d7:34:1b:a9:ac:f4:7a:c1:b8:9f:50:af:6f:19:be:76:81:
b8:a4:30:c7:14:3d:37:28:a5:c6:b6:93:d9:29:2a:26:b3:f3:
0f:d3:48:13:41:72:50:6e:60:26:4f:2d:3d:cb:cd:4c:63:9e:
66:17:26:29:ef:21:a3:02:7f:e9:81:70:7b:06:02:08:cc:ae:
95:7f:4e:a0:0e:5f:c7:11:a6:f3:8b:45:d6:b2:ab:02:4b:21:
03:2a:fc:66:ab:bb:e4:aa:3c:bf:39:97:3a:fd:66:a7:ea:67:
28:19:a0:14:67:0b:34:1b:b6:ce:82:c6:f7:b1:89:80:f3:6e:
d2:6a:75:bd:8a:fc:f8:74:84:ba:77:dc:48:69:eb:d0:cf:4e:
46:74:f3:1b:10:a1:35:5b:c0:ae:ea:3b:23:bb:50:18:7e:52:
b2:b9:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:15 2025 by rpki-client