
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: Wv1MnItDPXYywJietnGjsOHMP7ckO+M2T2UxxSgotsI=
Subject key identifier: CC:22:16:F4:EE:C0:6C:1F:68:D4:46:0A:86:33:59:5F:F3:E8:01:4A
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 0194BD175E3D0B4272076AEB849E08AA469E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: D+k/EfKCoSbpuZEJKmDCaC2aoFzbTM+E3Z3zedHIIsQ=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:3d:0b:42:72:07:6a:eb:84:9e:08:aa:46:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=cc2216f4eec06c1f68d4460a8633595ff3e8014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:f9:0c:23:c5:b9:95:04:03:e0:f8:1b:14:
e1:ac:40:f9:dc:75:a7:c9:01:0a:af:15:ef:50:87:
2b:e9:e6:00:fe:62:9c:04:c7:27:ef:5d:64:bf:70:
16:f8:b5:7a:6b:3e:4f:4f:57:92:9b:0b:38:99:6f:
7b:bf:40:c4:59:f0:72:a7:e2:80:d0:5c:72:dd:14:
8b:63:8a:b8:3a:6e:fe:a7:1d:51:38:b8:18:7d:66:
bc:11:c9:6b:b7:60:b8:10:28:e9:79:07:70:fe:6d:
92:d4:4a:29:ad:6a:ee:46:ce:54:d6:90:17:7d:31:
eb:93:bf:25:83:1e:58:59:84:9a:12:ae:75:ec:dc:
cd:24:66:91:0b:25:91:80:5e:0d:8e:cd:7a:98:36:
80:a9:cb:bb:2e:ca:c1:ef:f8:24:9d:c3:3d:96:ed:
2e:cd:fa:19:c9:30:bc:1c:c7:c2:c9:1f:ce:50:db:
bf:23:b0:c3:56:5e:0e:fb:2b:b6:c7:4a:d1:ee:57:
0b:23:e4:62:b6:a5:fb:97:6c:b0:3e:78:1e:86:5d:
51:06:aa:39:dc:03:48:f0:11:2d:26:01:fb:39:e6:
3b:28:c4:5c:46:ec:98:8a:0e:ac:33:7c:e0:8c:e0:
11:09:47:ff:02:af:a2:fa:d9:f7:39:90:a1:f0:1f:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:16:F4:EE:C0:6C:1F:68:D4:46:0A:86:33:59:5F:F3:E8:01:4A
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:3a:a5:2e:f3:ca:6e:24:48:b4:64:fa:65:6c:ca:fb:8e:
dc:11:e1:73:6d:41:8c:41:a2:01:f0:3c:6a:44:8f:ec:3e:4f:
74:e9:98:04:98:b4:c6:f8:28:33:e2:b9:c9:4c:6d:63:08:43:
33:a8:ec:c3:b8:d1:37:ea:1f:2c:04:29:75:4e:0f:90:99:c6:
d6:e0:cf:be:2f:2d:63:f9:1f:3b:3a:40:07:c2:af:c7:53:f5:
4a:51:62:77:d4:37:89:d1:94:b0:ec:88:ec:e6:6e:83:39:65:
d1:12:ff:4b:26:e0:98:84:b3:23:bc:25:98:7e:5f:9d:16:56:
24:79:74:57:bc:c4:40:99:21:6b:5c:ee:06:34:26:a5:d7:1e:
0d:db:57:c7:cd:d1:73:65:49:88:63:69:2a:b8:cd:96:cc:29:
cd:c8:a3:eb:32:24:bd:dc:40:5e:22:79:eb:1a:ad:80:35:fd:
03:1c:d7:1e:42:89:34:c8:3c:3c:83:bb:fb:7b:f0:9a:49:c4:
00:81:1e:56:16:fb:16:4e:91:b4:93:e5:84:c8:42:1c:e0:8f:
81:9f:ce:6a:ec:ba:9a:65:0a:c6:e8:fc:b6:47:c6:2d:9f:a6:
7f:7a:06:6b:49:82:a6:28:bf:70:2a:96:75:92:1f:07:73:ff:
c2:70:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client