Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: /jXqVmfBBMX4J0KKnJwujjEZKF8XcZjkqT+MyHuGow8=
Subject key identifier: 36:13:F9:17:B1:12:9C:BD:FF:79:E2:52:C3:90:68:10:1E:FF:C8:6F
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0194BD4E83714A6DF3D5B8F6D979052606DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: MDB48wMxkc1EXsNZOCXHUSx7CjtDwRhO5sEjMeOdKUo=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:71:4a:6d:f3:d5:b8:f6:d9:79:05:26:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=3613f917b1129cbdff79e252c39068101effc86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:a2:7b:29:66:f6:61:c1:4d:c4:c0:13:cd:
ae:78:12:4c:c7:8b:f0:eb:2f:ad:fe:4e:b2:28:4d:
ed:12:97:22:4d:38:39:36:58:77:8d:bc:78:a8:a2:
13:64:da:03:95:8f:cc:96:90:c3:36:ab:93:ac:9e:
9e:fb:03:73:2f:2f:1c:71:72:79:5c:2c:a8:c8:c6:
e8:cc:c6:2e:29:ee:2b:1a:2b:92:14:2a:87:5e:83:
f1:2f:33:8a:d4:f2:94:fd:94:7b:37:75:3f:32:ac:
fc:66:50:7a:a7:d3:4f:0a:88:c2:13:6a:38:39:1f:
0a:83:74:28:80:8f:60:01:a1:5c:0a:bb:22:e9:34:
29:cd:ee:46:eb:b1:a8:54:21:b9:94:bf:55:de:aa:
c3:66:52:dc:66:d0:7b:14:6e:57:05:26:3b:51:b8:
da:4e:c2:54:34:37:de:e6:df:0a:32:8f:57:70:a4:
be:c0:12:58:03:57:91:e4:e8:21:3f:78:69:95:0c:
8a:c5:30:9f:84:b7:88:30:e6:29:d2:12:79:6d:0c:
6c:02:ad:e6:98:69:4a:b7:ba:0b:5b:63:3d:40:19:
fe:a3:57:d6:fd:e6:3a:f8:e1:78:4b:59:37:f2:ff:
aa:e5:39:21:e6:a5:2a:b8:c7:b0:a7:18:48:37:25:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:F9:17:B1:12:9C:BD:FF:79:E2:52:C3:90:68:10:1E:FF:C8:6F
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6f:53:b8:29:ba:1e:9c:bf:e3:7d:db:d0:8f:a5:84:51:98:
9a:39:2c:bd:c4:71:d0:ec:9e:6f:d1:ba:ea:a7:d4:82:18:f5:
0e:97:4f:ff:ab:c6:c8:6b:a7:06:f6:a6:9f:b7:e5:8a:45:c2:
da:5e:fb:d0:10:6c:c8:6c:eb:47:e0:c5:b2:44:3d:f1:99:f2:
dd:e3:84:c7:40:7b:30:a9:88:06:79:7b:45:bc:88:80:91:56:
6b:4a:a8:4e:52:39:cc:c3:34:4f:e8:d5:72:2e:bc:8f:8b:fb:
7a:e0:9c:14:b9:a2:94:11:e7:e1:bd:08:6a:b1:cd:35:ed:86:
ae:24:73:5b:89:74:4c:4b:07:98:5f:4b:34:a9:54:d7:58:fc:
f8:eb:7f:b6:c8:ef:37:98:13:6c:d2:1f:61:00:6e:9f:e2:b9:
2f:d1:d1:a6:5d:f7:db:89:55:ba:da:ee:7b:84:1c:0b:09:e7:
9e:38:41:e2:5a:e2:ca:f6:11:a2:12:1e:04:a2:09:8c:d8:90:
4c:49:52:4f:36:57:5b:88:86:aa:91:db:4c:2d:9a:c0:1f:de:
2d:ee:ab:0f:31:77:7c:72:98:ab:d8:ee:65:03:0d:73:2e:54:
82:1f:37:1b:bc:19:bd:d8:7d:9f:84:ed:25:d1:77:12:96:bc:
b7:0e:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:38 2025 by rpki-client