Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: yHsq8KkVherbGfKCHnoiwE7QoRn/aOi/7csN8uUE6o4=
Subject key identifier: 48:26:68:B6:16:49:12:03:37:0E:4B:E0:F5:11:59:10:AB:59:30:71
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 0194BC3C35927FE107BD98D5A92796B088FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: frReEpYA2a90IhOSRF3Ye+owb7ZS9/cQ1s8PR00T1rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:92:7f:e1:07:bd:98:d5:a9:27:96:b0:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=482668b616491203370e4be0f5115910ab593071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:93:58:4a:89:19:f9:70:15:ef:ae:5f:11:
47:05:e1:c5:a2:1c:ea:53:cf:ac:34:63:f6:8b:dd:
94:fe:d5:07:38:20:e3:e8:66:d4:d5:15:c2:5f:0b:
e3:8e:90:6a:5f:79:d2:07:ca:23:3f:19:cc:a0:0b:
12:46:44:37:6f:1d:90:99:38:73:7b:2a:b4:cc:ac:
ef:a0:96:07:c5:24:48:b4:9a:f0:d6:7c:b6:a5:ac:
75:46:63:77:f7:f7:bb:ad:9b:8a:af:b8:90:00:56:
c5:3c:35:ac:bc:4d:30:2e:c3:ea:e0:84:14:b6:c6:
6b:21:ae:22:82:8b:0d:7a:ab:7d:25:fc:09:3c:ab:
f9:3c:e8:c8:7a:f7:d5:b2:72:80:8d:91:dc:8d:88:
ca:c3:33:e6:bb:9b:1e:71:06:f9:af:09:e3:8e:d7:
6c:bc:e4:5d:84:b4:b0:53:77:46:1b:b9:22:1e:ee:
f1:56:55:1d:d7:43:4c:6f:b5:0b:66:8a:e0:ad:7a:
b8:fa:f1:3c:82:15:27:34:2d:c9:89:36:8e:af:6c:
e5:d9:48:f7:f9:1f:9a:71:a6:46:84:e3:6f:27:d4:
b5:d5:61:3f:57:d7:c9:00:8b:27:a0:d8:d2:63:cf:
71:bd:f7:1f:c4:83:34:a1:bf:99:de:b8:e1:d7:3c:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:68:B6:16:49:12:03:37:0E:4B:E0:F5:11:59:10:AB:59:30:71
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:80:40:dd:55:9f:93:41:f4:68:1d:98:ef:51:29:6f:38:
ab:63:a5:82:85:63:ca:96:ab:cd:46:02:80:ce:39:df:f1:a7:
4d:c4:98:b8:0b:da:70:38:e8:3e:1f:de:f3:c7:0e:fb:a4:e1:
6e:e6:1b:4b:8a:e8:53:bd:04:1f:5f:96:6c:7e:5d:67:85:8f:
2c:a1:bd:be:b9:5b:4d:90:a3:ae:e4:37:13:5e:32:43:71:60:
2a:3e:0a:f5:d4:07:99:83:25:4c:1b:15:57:31:9e:99:01:ae:
a3:3d:07:8d:55:58:0d:41:a1:58:55:c0:53:61:1c:7e:b5:2e:
83:70:fa:d2:6f:32:10:7a:1f:00:11:40:e9:5a:a0:f6:c8:b6:
b4:b7:37:da:8a:d1:11:d6:72:5c:03:7e:c7:03:bf:3e:36:9a:
d7:02:40:a7:2a:bd:92:38:8e:a0:6d:62:11:b5:2f:12:8c:3c:
d6:31:26:c1:96:b5:62:bf:eb:e1:1b:9d:7f:bd:aa:5e:9e:c9:
b7:11:a3:58:b5:8d:b4:bc:8e:2e:15:89:70:18:7a:50:d7:aa:
ee:c7:80:f4:87:d7:b6:8c:aa:6d:a7:03:11:70:a2:68:d9:6f:
d6:81:c5:90:e4:02:85:0d:f4:fd:99:0e:e3:e8:a9:94:75:4a:
57:98:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:05 2025 by rpki-client