Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: mkjZ2ue+hfaC6zwCboXZ1Oo6s2Kc7hv8efKsMmnm4/A=
Subject key identifier: D6:19:44:C9:90:5C:B3:7C:55:99:8B:AB:85:01:8B:22:ED:50:42:1B
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 0194BC050D021839997BD43E536A7EAEAD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: d5CqdHtpiEHDXa0rF+YRjF43mER8H7WC/6lJRZ4UgZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:02:18:39:99:7b:d4:3e:53:6a:7e:ae:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=d61944c9905cb37c55998bab85018b22ed50421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:67:51:c2:42:e6:8c:b2:87:8e:21:fe:e1:
ab:12:14:d4:bb:56:0f:10:c7:7e:93:c4:70:cd:05:
67:e3:c3:d3:b1:b2:0b:5c:66:39:21:42:2d:7f:46:
7c:0e:84:50:aa:65:5f:84:e8:1c:2a:30:eb:dc:97:
4b:f2:74:3e:e4:54:05:13:5a:15:b1:aa:fc:ff:d6:
41:24:61:1b:a2:fa:1a:1a:29:7f:c5:23:0e:a9:d4:
1b:0d:1d:98:a8:85:4c:40:8b:99:22:f5:94:f3:d5:
67:fa:e8:f9:8e:4f:12:02:51:20:fe:0c:79:2a:89:
8d:33:84:0a:b4:e9:3a:dd:d5:2f:a6:d0:d4:98:22:
62:ae:3a:8d:0a:c2:dd:59:f3:ab:31:a2:36:ef:ee:
ad:ee:21:75:0c:25:21:c3:fe:3b:e3:43:f4:3f:b9:
fe:95:2e:02:bc:79:57:52:0e:89:c7:1d:ae:e2:f6:
e7:a7:3f:9f:0b:76:a4:a4:c9:04:87:7f:ae:fb:9a:
02:59:1c:36:09:9f:02:fc:62:8b:95:83:6d:68:76:
f0:09:f8:21:e2:40:e2:9d:c4:95:91:45:76:f4:2b:
4f:2c:3e:79:a9:83:62:4c:c8:81:27:4c:d4:fb:77:
f1:c7:52:f6:4f:ae:0d:8d:e9:75:60:dc:25:12:bd:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:44:C9:90:5C:B3:7C:55:99:8B:AB:85:01:8B:22:ED:50:42:1B
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0a:55:15:fa:37:6c:9b:80:b6:7d:63:9a:c6:00:c4:15:16:
52:e5:73:64:28:44:f3:75:39:ea:f5:ea:0d:34:6e:9c:72:ae:
b3:c9:53:9e:af:dd:ca:fd:3d:92:57:0d:c3:ad:78:45:7e:fe:
36:40:79:e9:a4:e7:8c:e4:71:35:c8:5a:12:d6:bf:c0:54:4d:
bd:7b:e7:90:8d:fa:b1:55:34:b0:18:91:cf:4d:77:7f:43:8f:
9d:3e:af:58:42:f8:e7:a6:7f:d4:75:81:dd:1f:17:47:b2:22:
d0:99:78:b7:e9:d7:13:52:be:02:9b:96:1e:15:dc:a5:4e:94:
72:e3:b2:3d:98:6f:03:b1:95:2f:f0:65:c9:e8:05:dd:ce:43:
10:f5:e4:56:6b:45:a4:8a:86:5d:16:f5:79:68:9f:96:e5:9d:
20:cd:dd:fb:a0:73:3b:3a:91:21:62:0c:95:80:32:28:e7:c9:
10:3e:01:5c:5c:1b:64:7e:62:63:1c:6b:17:b2:41:ec:2c:b5:
dd:1a:ab:2e:73:90:05:20:fd:0b:c3:cb:bd:87:71:92:b7:fd:
84:e0:c0:27:73:05:14:58:83:20:07:40:1b:e7:7f:35:53:f3:
95:8b:10:8f:73:e0:93:01:74:43:bc:42:de:3a:0b:aa:6f:13:
b1:18:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:33 2025 by rpki-client