Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: nH+TggrUUqBxvy/y6ddsSdVfjI0QsDb+DmiraCL0vDI=
Subject key identifier: F5:E8:BD:7D:3A:D4:CC:69:AD:74:F3:47:1B:5A:15:EF:67:3D:6D:75
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0194BC72AB16BE035129210542ABFC8F03D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0A7A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 1-izewmuGO8dq8BDhJKZDZLmUf58.roa (hash: pKB2KkNW6MgzpQf0Po1aMo2fomGGYDN/KLqRgPyHgBo=)
2: 7tz1DtxVV461VJFXbrRXU97cHvY.roa (hash: 1Pm+UUb2gAbv0fLZBYs5AP/WVnwmVGaN4bWhLQE4/6s=)
3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: NBF3My2zZ8iRnDEw0yPoUXcIrJVtc8eGtj7ApHzJG2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:16:be:03:51:29:21:05:42:ab:fc:8f:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=f5e8bd7d3ad4cc69ad74f3471b5a15ef673d6d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:98:86:6d:d6:cb:8b:36:40:9d:1f:f6:68:
7a:b3:63:39:a6:7b:2e:81:e6:03:a3:67:f4:cb:51:
c1:96:d7:5c:d2:48:dd:41:69:bb:44:6d:e9:0f:f9:
e5:35:ba:22:9b:5b:cf:06:ad:87:ad:8d:18:17:a8:
fb:35:23:ca:cb:f4:9c:38:dd:6c:35:5a:51:e3:67:
18:8b:55:fa:9e:e2:40:59:84:48:4a:34:9c:75:78:
05:55:0c:6f:36:01:f7:98:f9:a8:d8:63:ce:07:3f:
f1:31:93:f0:9e:0d:47:15:75:76:73:3b:81:76:bb:
74:9e:dc:bf:73:14:ed:f4:da:e9:b1:c6:0e:39:aa:
fe:64:54:e6:03:a1:5f:9c:73:25:e4:57:61:85:35:
4d:0f:65:4c:21:3c:f0:9f:e2:6e:b8:53:59:62:fe:
14:bf:d5:48:92:59:f6:0b:e1:e7:51:e6:58:b4:bb:
00:cf:90:c0:5f:59:4f:7e:e8:b8:29:12:31:5a:c8:
53:c4:e3:7e:be:9c:4e:a3:95:da:e2:3b:23:60:86:
3e:2f:7d:18:ce:a2:07:47:72:fe:ff:35:a4:aa:cb:
da:b7:85:5d:ae:dd:f2:47:1e:2c:12:e8:8b:c3:14:
25:56:8c:02:3f:40:23:4e:cd:10:6c:de:cd:5c:1e:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:BD:7D:3A:D4:CC:69:AD:74:F3:47:1B:5A:15:EF:67:3D:6D:75
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:c5:cf:a3:f3:cd:35:67:c2:37:3d:e3:21:3d:7e:91:8c:
4c:e0:ab:17:13:f4:46:6b:ae:d8:42:5d:e9:94:28:fd:a8:52:
e8:51:ba:b6:bf:06:f9:cd:7f:f6:f5:bd:07:2a:aa:23:a8:a2:
3a:d0:cb:b3:3a:1e:db:91:e5:f3:e0:58:3c:17:8c:2c:fa:2b:
9b:72:f1:bb:8f:7b:41:5b:b8:ce:a7:24:19:11:c4:dc:35:a7:
aa:6a:52:09:dc:c1:e1:10:98:46:a7:91:64:c2:42:e8:2e:6b:
10:17:20:8b:a5:0f:1a:0c:fd:21:54:f1:b1:9b:47:30:b2:c3:
96:35:82:61:5d:a6:b7:90:ae:d4:96:f5:36:ee:ee:af:4a:06:
4a:86:b5:be:1e:eb:98:7e:3c:83:83:59:87:0e:59:d0:18:4e:
58:3a:ae:79:41:23:ee:04:3a:7a:a2:61:e8:75:d6:82:af:f5:
93:38:68:67:4d:57:b8:52:08:e9:12:26:eb:d2:64:de:b3:56:
a6:85:27:9b:a3:3e:dd:f3:1b:b0:f5:30:57:80:00:52:7e:c8:
48:22:e9:08:cd:0a:ef:57:e0:04:21:b3:20:41:53:34:99:67:
89:7e:03:d8:bf:a3:ed:f6:c7:ec:77:d4:ed:d5:f9:51:74:34:
de:21:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:42 2025 by rpki-client