Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier: OpnxBG76cBfx/G9G0UMqSQT9rkRwQvFfRzu0Dxj4ml4=
Subject key identifier: E4:79:E0:8B:10:C1:84:94:C8:29:C4:BD:BB:2E:28:AD:66:07:3A:B7
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial: 0194BD4E5CCB08C85B8875AB55271424C868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number: 10
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: I8dgs6UwyOa0We85q53cK26sPWlCKvQxMmHeq/xmsbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:cb:08:c8:5b:88:75:ab:55:27:14:24:c8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=e479e08b10c18494c829c4bdbb2e28ad66073ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:08:4b:29:9e:b6:dd:0f:0a:5c:8e:0d:d5:
e7:2c:1d:04:23:9c:33:0a:4e:75:00:fd:a9:b1:2b:
82:e4:bc:f4:5b:5a:8d:8e:67:a1:43:e0:fc:b8:67:
fe:43:05:b2:73:bf:7b:00:78:c5:cd:fe:ba:7c:1c:
84:44:f0:d2:ff:4d:af:89:57:09:64:d4:f9:e1:3f:
f2:08:49:23:ff:d3:2e:7e:19:13:1d:90:04:f0:0d:
1c:ce:bc:4e:60:22:0b:4d:fc:7d:60:82:77:33:79:
49:b3:6e:ba:3a:52:8e:80:f4:97:3d:1d:ff:e3:ea:
5b:cd:c7:dd:80:66:64:26:a9:96:ad:b4:8d:65:3b:
31:a7:fb:8d:3d:26:2f:74:ad:80:4a:cf:10:c1:97:
a9:d3:7a:6f:38:4b:dc:ac:1d:64:26:a7:f9:83:ce:
5e:3f:b4:82:f9:95:9c:2e:d3:cf:85:d8:4c:30:a6:
95:04:bb:ba:fb:ac:97:7c:61:d5:a2:71:8c:d9:28:
45:99:06:6b:1d:0a:f5:7f:88:44:fe:9a:dc:ed:a9:
37:de:14:35:f5:1d:9e:6d:5d:ad:74:2a:f3:10:64:
e0:62:8e:13:f3:6f:c4:16:31:2a:21:fe:36:5f:b6:
86:5f:e2:f6:9a:23:98:e1:0b:ca:87:fb:ab:18:ea:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:E0:8B:10:C1:84:94:C8:29:C4:BD:BB:2E:28:AD:66:07:3A:B7
X509v3 Authority Key Identifier:
keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:d9:6f:02:e1:de:e7:7d:89:e3:3e:f1:4e:ef:58:ab:32:
51:38:64:8c:56:cd:a6:cc:bd:c7:aa:27:87:1a:80:5f:bd:88:
a0:b8:bf:b5:08:a3:2b:e5:8f:46:ad:17:56:0c:70:ce:c4:3c:
63:19:dd:21:36:ad:bb:60:00:63:4f:df:67:7e:dc:70:49:f2:
d0:02:ae:43:25:00:0c:1e:fa:23:2a:db:78:e4:92:a0:19:dc:
27:b2:36:bd:e1:83:39:31:03:81:10:8f:13:eb:3f:14:12:6d:
81:9c:ca:be:e3:2f:2b:14:b8:bd:9a:66:9c:2d:ef:13:b1:c4:
cf:4b:48:5a:05:28:b3:42:88:3a:ba:ad:12:45:af:3e:18:aa:
22:8c:fb:6d:ed:02:5d:2a:14:6d:5c:b6:29:94:80:8d:3b:b8:
cb:00:83:48:34:00:b6:5e:a9:bc:98:e1:63:e8:a5:32:18:e1:
3a:38:d4:42:14:72:57:ee:fd:86:92:59:86:4d:f4:ce:81:8b:
e7:c1:b8:c8:ed:ac:dc:fb:4f:4d:5c:f4:24:d7:ea:62:19:b8:
41:e2:5c:69:80:f2:4f:5e:19:dc:56:81:8c:71:d2:d1:14:77:
62:e9:92:45:b0:6a:1a:cd:ea:98:74:b1:e1:31:6f:46:b6:8f:
e2:c3:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:39 2025 by rpki-client