Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: zL/ganKsNj5J6PTImfxUGY/Y+p/mu6fwpTaJRrtPFw4=
Subject key identifier: F8:28:08:A7:B9:BC:E3:6F:34:2A:27:81:11:FA:19:2E:83:3E:79:B0
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0194BC730F9386D809F2F082E1DE7C9C3CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: q97PyGVlEmV06l9Zosfd+t/A/44OlzxSWEsgdm9KnnE=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:93:86:d8:09:f2:f0:82:e1:de:7c:9c:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=f82808a7b9bce36f342a278111fa192e833e79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:2d:2d:26:3e:85:e7:78:fe:da:27:fc:d5:
34:e9:57:46:94:8f:e3:71:00:50:00:4c:80:03:ff:
ff:b2:85:18:dd:ae:5b:6e:2a:ff:5b:75:b9:c9:06:
26:33:a9:79:2a:5b:32:a2:6b:72:7a:7a:92:b0:96:
43:7f:f0:7c:74:ff:e9:45:38:b0:d0:ca:98:b1:a7:
7e:e0:78:b4:3b:b2:cf:10:e2:44:e8:3d:6e:c0:f3:
b5:96:cd:16:14:84:b7:fd:56:cf:f0:22:c0:ff:34:
c2:07:14:d0:34:6d:29:f1:20:52:93:54:d3:bf:3e:
5c:1f:cf:a1:ee:e5:e1:1a:1b:9c:28:91:11:e0:18:
1e:61:58:24:5d:42:d5:8f:15:e6:fd:2d:46:08:22:
48:33:cc:ac:7f:78:5c:40:16:a3:9c:3d:01:ba:be:
fa:70:76:93:83:98:41:2b:c4:c7:75:34:3c:ae:41:
6e:48:f4:2c:5d:db:55:df:04:75:df:b6:51:68:f6:
c4:ac:81:c2:87:5c:e4:fe:f3:70:97:d4:36:1e:40:
d5:86:bb:21:03:2a:7a:e5:8c:70:a4:58:6d:15:86:
c6:77:d8:0b:31:02:1c:2e:8d:4a:19:52:b9:25:52:
1f:c3:42:b3:50:fd:c7:a9:4c:7a:7c:e7:52:7c:7b:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:08:A7:B9:BC:E3:6F:34:2A:27:81:11:FA:19:2E:83:3E:79:B0
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1a:41:69:2c:6e:3d:97:50:7e:e4:02:7a:26:b0:78:5f:b4:
71:b5:8b:2d:e5:16:83:e0:ad:df:11:22:73:1f:14:f8:e3:06:
59:72:4e:6f:e0:4d:93:73:3c:ec:59:c2:91:54:b5:bf:40:83:
05:ca:31:a0:d9:2e:ac:98:05:32:e0:2e:44:6d:d0:3e:66:c4:
cf:01:d3:39:fd:27:28:71:4b:a3:61:40:1d:93:28:50:3b:f8:
92:e5:2a:35:f2:a9:70:c9:44:70:89:2b:e1:cf:c6:60:22:bf:
0a:96:86:d7:84:83:20:3e:21:59:41:bd:e5:2f:8e:eb:55:de:
93:20:fb:a2:76:54:80:99:0e:56:0c:2b:0d:81:7f:d6:82:99:
95:b2:80:36:75:e8:f6:4c:ff:a1:a0:b9:0b:bd:3e:21:06:b5:
11:9b:35:8d:ef:89:60:2d:77:45:b6:93:63:13:e1:3c:8b:79:
46:9c:0e:60:db:64:ee:7a:b3:9d:be:f8:b6:65:1f:59:4a:85:
b0:05:23:5b:4a:f9:04:17:37:ec:d7:5e:dd:c4:09:a6:e9:56:
80:ee:db:47:c2:6f:17:39:18:b9:ec:a9:a9:0f:9b:68:8a:ae:
37:f7:74:cb:6b:8c:1f:b2:b1:64:d7:86:28:07:e5:6f:a6:59:
10:97:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:39 2025 by rpki-client