Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: psnsvIKa65wf/qg23SDHlPU1dpanvrmTPkHqTk7ykt0=
Subject key identifier: 64:A4:82:E0:A9:21:B8:E9:2D:4E:24:CD:20:B5:AB:73:8B:F0:A2:69
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0194BC3C705C617E2949A1852A6E7EBD41A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0503
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: jcL5XfcdQkbyVhAqEdHDuec4HV7IC4RhK4IQouqW0gE=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:5c:61:7e:29:49:a1:85:2a:6e:7e:bd:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=64a482e0a921b8e92d4e24cd20b5ab738bf0a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:e4:4d:8e:ea:cc:3a:a0:bc:5e:67:8b:99:
66:15:6e:07:bf:8a:ce:a5:30:0f:48:9d:6f:da:70:
fd:19:7f:90:d2:11:28:af:e0:64:19:ee:ee:c4:6d:
c7:76:71:4b:25:23:f7:83:69:b6:36:00:e0:b3:57:
15:d1:12:c2:4c:9f:d0:bf:bb:f0:88:34:84:2a:b5:
92:07:3b:0a:3c:70:03:93:9b:dc:a3:cd:c3:42:a9:
0b:18:f2:89:c5:ad:89:5d:16:f2:8b:3d:62:23:c1:
82:4f:d6:5c:7e:0a:32:68:b4:42:66:86:97:21:ac:
51:f1:8a:33:21:f7:d0:f2:f3:d8:67:a5:0f:13:58:
77:8d:7c:02:5b:84:62:40:93:32:3f:46:0d:1f:88:
21:5f:9b:c9:94:5a:b4:b7:8c:26:e3:57:60:77:75:
ca:a3:d3:5e:5c:e7:89:23:be:02:63:ce:11:73:85:
38:ad:42:e5:ff:02:ff:92:3a:11:c8:bf:e3:fe:f3:
9c:bf:ba:30:c9:38:63:9b:b6:24:36:c1:6a:b9:16:
ca:f8:ca:ee:85:77:11:ae:e7:16:4a:e0:43:ac:8a:
50:a0:cb:af:a1:fa:14:a4:92:90:9a:07:f0:73:05:
8c:85:e4:54:79:6c:c8:74:ab:06:cb:2b:e0:78:04:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:82:E0:A9:21:B8:E9:2D:4E:24:CD:20:B5:AB:73:8B:F0:A2:69
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:76:b2:68:f7:01:36:90:29:13:7e:76:2b:71:97:48:5c:
c0:6d:42:67:9f:05:48:b0:a6:6d:fa:d2:1b:0e:a1:0d:46:dd:
36:16:5d:c4:91:d4:62:f8:5c:90:08:66:64:cb:48:4a:ec:c1:
2f:e5:9c:24:93:5e:18:70:dc:1b:db:39:4c:d9:dd:c7:44:d7:
6d:ef:8d:cc:e9:5d:b9:3e:40:79:ca:60:9f:67:cf:6a:c1:7d:
fb:a1:6d:0a:e2:d7:a8:5a:9f:47:8a:88:cc:db:01:c3:95:17:
36:5c:b8:b6:2b:b6:0a:a5:09:bd:41:df:82:9d:38:0e:22:19:
74:0b:8b:2b:ba:a2:f1:96:53:f8:38:d0:5c:3f:01:f1:47:f7:
62:f5:32:ac:ad:38:74:46:3e:00:a8:13:3c:50:2f:3b:7a:b2:
ee:cd:74:36:80:15:33:87:cc:f8:72:f9:46:3f:22:96:7e:86:
5f:31:43:db:9f:19:fa:6e:a2:d3:a2:0d:8d:df:87:25:e6:93:
ac:87:7b:f2:a7:e7:78:b9:a9:ad:4b:ee:4a:64:05:9d:46:93:
de:59:9e:42:bc:cf:30:7e:91:72:2b:2d:18:10:37:72:fb:d0:
70:cf:0c:73:1c:d3:98:ed:f4:ef:8b:d5:81:33:7b:8f:ab:31:
b1:5e:5c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:27 2025 by rpki-client