Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: RVcIF0ZEdaEd9APC0nN7M3hvjvt/2kHxCtDJRV/EO0A=
Subject key identifier: 6C:BF:0B:D6:D4:98:1E:25:EE:4D:56:D3:BE:52:1F:60:16:7F:A2:2A
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 0194BD4E62D8DC39FB18E7AAA58165BD8388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 08A9
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: xKRJEsD1rAi7zVaJHaU+S2KBhVHhjxbSiak9WmiFd+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:d8:dc:39:fb:18:e7:aa:a5:81:65:bd:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=6cbf0bd6d4981e25ee4d56d3be521f60167fa22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:5f:f5:4f:61:94:5b:a9:8e:f9:67:99:ba:
a1:65:da:f4:d1:50:f3:06:44:36:3c:ae:a6:45:b8:
f0:49:0c:c0:68:88:88:5a:ed:9d:a5:82:a0:7d:31:
2a:39:88:23:fa:68:a9:1c:44:c5:09:7e:fb:13:a7:
23:9b:1d:55:e8:2a:0b:e6:04:30:32:b4:40:a9:9b:
01:39:b6:17:0b:21:f4:09:3a:35:66:53:19:3b:41:
d4:b6:f6:fd:dd:08:e3:7d:09:d0:0c:b6:d9:11:63:
22:8c:28:8f:e7:13:05:d8:8d:1b:89:f2:7d:57:54:
ad:b3:ee:a7:45:33:1b:f3:11:2a:d0:e3:a0:7d:a0:
d2:99:c8:26:74:cf:22:89:c2:d7:b6:1c:7d:d5:13:
50:69:76:eb:d5:02:ea:1a:d4:83:9a:07:dc:bb:9c:
5e:bf:d2:8f:89:e8:e9:d8:10:13:6c:76:7b:04:91:
81:7f:aa:fd:eb:33:9e:71:00:ae:dd:bc:2b:5b:7d:
e4:3d:35:ef:ff:da:bd:b4:53:11:5a:58:b0:23:0f:
3f:a5:c7:17:dc:98:51:38:83:61:7b:f2:c0:b0:09:
cd:01:39:e0:b6:70:ec:b1:93:da:8d:f2:e7:ea:21:
a6:7c:88:9f:47:af:d7:af:26:af:52:ac:be:81:f0:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BF:0B:D6:D4:98:1E:25:EE:4D:56:D3:BE:52:1F:60:16:7F:A2:2A
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e5:3a:c1:bf:60:d0:38:d2:d8:90:7c:d0:e0:a0:32:de:3f:
75:1d:af:e4:fd:58:1a:d3:3a:73:5d:ba:b0:b6:ca:d7:67:2e:
40:1f:5a:fd:d4:40:b9:77:ac:f7:83:9a:f0:b5:7d:07:d2:9e:
11:02:df:bb:ec:72:23:0c:b9:95:4c:89:bd:d6:8c:43:02:fc:
6a:a3:9e:2d:6b:33:b0:42:f4:17:dd:7e:e2:c4:44:64:dc:8b:
6d:25:48:e1:ec:80:b5:af:52:ec:00:8b:32:d5:33:f4:6d:0f:
3f:8b:9d:90:3b:9d:14:7a:a3:23:07:46:21:e3:14:02:f6:8a:
b1:8f:40:a3:43:24:bd:5a:49:8e:a3:59:07:26:14:ee:1e:73:
c4:bf:ee:53:29:22:af:eb:bf:9c:41:8e:22:db:66:48:7a:52:
a3:03:49:b5:61:c9:2c:79:b3:d3:d5:01:37:57:f1:f3:71:08:
ff:8e:02:b0:6d:5d:38:66:06:4b:8f:9d:8e:ed:45:12:80:6a:
ae:b6:b8:c2:9f:9b:35:9b:74:4d:0d:72:91:d0:9b:cf:25:94:
2f:c6:a4:7e:c0:92:25:91:f2:96:b3:d2:f1:83:7a:3a:64:2e:
10:b5:39:d7:ab:1a:0d:56:f9:e5:00:85:ec:49:12:da:88:cf:
87:61:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:38 2025 by rpki-client