Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: MOQXwiKIqWQZwm1NbI/mWRFzXBRPqM7YY8USArpPlcg=
Subject key identifier: FC:65:76:2C:66:63:48:AD:07:3E:E9:43:83:08:89:86:0C:21:F5:41
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0194BC72E674BFDFD30BE111D709AF53E848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: A0
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: Q8DiPyN7saziKI9Ruy6TCauYzUl7m2nM2/CvsUsooPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:74:bf:df:d3:0b:e1:11:d7:09:af:53:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=fc65762c666348ad073ee943830889860c21f541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:95:9a:c2:4c:f1:bf:10:bc:46:37:c1:69:92:
47:68:db:75:4c:2f:f3:cf:c1:f4:2d:18:c6:bc:58:
31:ba:c8:2e:12:e4:a4:71:56:78:ff:8c:21:cd:d2:
72:16:19:e3:a6:17:3c:c8:f3:fb:67:21:b1:83:6c:
f2:d6:06:26:56:0f:77:d3:ab:87:3e:17:f1:64:1e:
81:5c:18:31:94:4a:c6:09:34:f4:ac:b4:dd:48:24:
70:30:46:91:4a:c9:61:63:cf:88:47:5f:c0:0d:e2:
96:67:c9:3f:4c:8b:24:3f:83:65:50:5e:04:3d:7c:
01:8d:ca:0c:03:53:31:70:32:13:bd:19:aa:9f:ef:
43:3d:a4:61:15:11:67:f5:78:c2:8d:2a:01:91:cc:
b4:77:1d:6e:10:73:20:d6:86:27:72:39:38:d5:c8:
bb:6d:00:f9:7a:5a:f9:7e:e6:7a:a7:f9:63:1b:ee:
63:4c:5f:ac:6b:33:68:6e:c4:f4:1c:c5:03:d6:86:
2e:4a:67:12:4b:0b:7c:50:18:bd:f0:52:f0:c0:9e:
12:b2:96:5e:4d:ef:8b:70:99:4e:24:98:41:bd:dc:
ed:60:28:3d:d0:97:41:51:78:58:fb:9d:91:4e:4a:
f1:30:ff:09:8d:96:92:36:df:c7:35:1f:cd:0c:b9:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:76:2C:66:63:48:AD:07:3E:E9:43:83:08:89:86:0C:21:F5:41
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:6a:a8:db:ee:45:1f:9d:35:d2:46:5a:15:ee:a5:3c:33:
f8:26:15:0d:b6:08:98:53:0a:00:21:f9:64:9b:68:e9:56:27:
b3:0e:53:c4:83:e4:89:0d:ba:c7:a3:da:1e:44:74:ea:5c:f9:
be:56:c2:98:21:f0:c8:73:00:43:94:98:3a:2c:1e:4b:83:6c:
2e:72:a5:06:7d:3d:65:04:15:48:c0:d0:e4:d3:30:69:38:73:
3e:9a:67:5a:73:c8:fa:84:20:8b:db:02:fb:f7:6c:56:86:02:
6b:08:bd:7b:4a:86:41:cc:11:1d:0c:7f:54:b6:77:28:fd:0d:
e4:73:81:a3:7d:9d:f5:e2:f1:58:ac:e8:b6:d0:84:d6:0d:b6:
e8:1b:01:c4:24:6f:ef:e5:20:0f:e4:c6:ab:93:33:e1:24:a9:
a9:f5:08:5b:f5:7e:76:c6:67:24:62:1e:8b:c1:bb:ac:aa:3c:
e4:1b:6d:75:83:d0:c6:5b:c7:91:ad:e3:01:77:f5:41:5a:a5:
63:48:96:a1:ed:2f:de:79:c9:35:ac:dc:e9:bf:11:b6:93:ff:
82:56:6b:80:4a:78:b8:f0:4e:12:95:52:ed:98:b6:1b:54:1b:
34:4f:6b:75:88:63:19:c1:d0:db:5d:d0:da:40:89:82:34:e1:
2b:29:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client