Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: JHXy4DTOMyFIJhxaR5HNZRFts1tBusd2I00aK017Ftw=
Subject key identifier: 4D:C2:09:E7:3A:BD:AE:51:7F:34:AC:82:87:81:E0:E1:A6:4F:65:BA
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 0194BC3C6FBD9CDCA8E1C478E08A85072D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0B61
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: NEpevGAi0GoUV9quebjARldCk4Zl1JufEYrwVTurGD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:bd:9c:dc:a8:e1:c4:78:e0:8a:85:07:2d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=4dc209e73abdae517f34ac828781e0e1a64f65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:c4:f0:f2:2a:f0:eb:8d:ac:70:65:45:75:
b1:df:6e:02:25:77:73:06:52:73:09:ea:cf:73:a4:
f1:37:83:96:df:7e:e9:68:08:9f:8e:58:b8:be:24:
87:d1:30:d4:eb:33:fc:09:d5:dc:94:29:2b:2d:27:
73:3d:b3:2c:b8:d6:de:dc:8b:92:21:0c:95:b1:10:
36:0a:b0:f1:85:a2:84:6b:0f:a3:bd:79:ab:ef:35:
50:bb:63:22:94:dd:ed:96:3d:e6:16:b8:8b:06:1c:
86:0e:ec:c4:24:97:91:28:3f:e3:c8:d9:7e:02:69:
f6:95:2d:35:c0:ef:13:49:62:6c:46:3d:fa:ed:87:
db:1e:76:bc:fb:c2:fe:2b:ab:bc:5b:8d:82:f4:1f:
4c:74:21:cb:32:d3:ca:87:ef:2d:6a:53:d0:c8:a4:
6a:c3:5a:60:95:18:4f:29:96:54:30:e6:67:fb:71:
1c:dd:64:ad:cd:ae:d8:85:ed:30:d0:13:90:11:2d:
68:f4:94:27:00:8c:ed:3a:ff:0d:59:2e:ef:2c:bb:
18:1b:10:cc:93:1c:f1:9a:0e:31:af:67:d4:27:11:
20:81:87:59:ed:be:15:f5:92:9c:e0:ab:e1:8a:a8:
77:7d:36:ee:60:ea:3e:4c:ba:9f:ff:c9:3f:6c:f4:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:09:E7:3A:BD:AE:51:7F:34:AC:82:87:81:E0:E1:A6:4F:65:BA
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bb:a7:65:36:e1:66:d3:ba:95:3e:5e:22:2e:61:2c:a9:3e:
c6:cc:1d:91:de:95:cb:d0:75:38:ef:86:b4:14:eb:ef:f2:08:
62:b5:61:6a:ee:28:61:8d:9f:75:7f:ed:a3:35:a7:9d:91:16:
ee:d9:f9:ac:06:83:9d:37:c2:22:17:b6:7e:0b:90:98:78:47:
f4:1c:cb:1e:5c:c0:ad:ad:a1:8c:5a:48:0f:4e:55:56:d7:d4:
70:54:b3:f3:75:91:e4:ac:82:d8:a0:1f:30:ca:e4:40:8c:5c:
7c:22:a3:bb:33:95:81:41:29:df:e0:f0:fc:6c:d5:c2:7f:fb:
b7:99:50:39:67:5d:55:d4:9e:e7:5a:f1:37:69:a6:c7:6e:23:
f1:35:46:93:20:15:bb:5d:7a:8b:75:a8:7f:ff:f6:1f:f9:e4:
78:0e:ee:e4:ad:23:b5:8f:91:5a:94:bc:17:d0:b0:f0:45:de:
08:cc:6b:64:bb:16:55:be:91:90:51:23:cf:f4:4c:31:17:0b:
6c:01:9c:1b:b5:02:a4:41:77:51:fe:b2:2d:72:d8:a2:44:7e:
de:f4:76:66:7d:53:66:43:f8:e6:b6:f2:23:8d:c0:7c:db:f1:
54:88:83:17:16:e8:9e:c0:09:0b:ab:0e:19:d9:90:5f:03:1c:
a6:00:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:11 2025 by rpki-client