Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: 9NQRGYGC4TqFL6IoWPCDjlpLypT5Sxf1N8VC69tqyTw=
Subject key identifier: 7B:69:B5:23:45:BF:5F:33:9E:94:46:D9:D0:6E:3E:A1:19:84:7E:50
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 0194BC04CA8ACC2C922C4DB79F6C8825ADEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: 7n/Ax9tGyO3v+pCEg3K12mlKmp+/A3wL7BjUxCz98x4=)
6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:8a:cc:2c:92:2c:4d:b7:9f:6c:88:25:ad:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=7b69b52345bf5f339e9446d9d06e3ea119847e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:05:60:ea:ac:6f:2e:25:69:97:52:98:89:
a1:ba:f6:6f:0b:b5:34:5d:a0:57:28:d8:01:ae:ef:
80:0c:e4:ac:e4:0b:2d:da:8b:db:c6:53:f3:cc:05:
82:08:95:dc:0c:11:4d:24:6a:ae:e9:39:01:2f:2d:
1d:e4:ac:4a:a1:37:f4:4d:e5:83:ba:89:4a:20:ed:
01:ba:35:1a:8c:ae:35:dd:10:65:87:a5:9e:23:79:
7f:ad:c3:43:a9:22:7d:5f:34:17:71:8f:47:05:8d:
0b:d8:70:ca:27:21:44:f6:71:ea:0b:55:3b:39:48:
24:80:76:04:e5:96:5c:50:34:33:0c:8b:47:76:9c:
ba:23:2f:6e:a5:46:5f:da:c4:98:01:0a:70:03:2b:
22:5a:a6:09:22:81:45:b1:31:1b:44:15:09:bd:31:
6a:7b:c0:a8:84:cb:cf:68:ab:c1:b7:8c:6c:33:11:
34:0b:68:eb:25:91:fe:47:29:8a:b1:e5:e5:e5:e6:
de:b8:ef:48:cc:1e:68:a8:4e:24:9f:28:5b:0f:a8:
5f:da:0d:1b:65:8a:87:30:69:5a:c6:c2:a1:89:b7:
28:43:7a:79:b3:3a:d9:22:69:4b:2c:af:48:99:f7:
ff:25:6b:99:8e:cf:1e:32:17:a1:9b:a1:8a:50:1b:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:69:B5:23:45:BF:5F:33:9E:94:46:D9:D0:6E:3E:A1:19:84:7E:50
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1f:31:28:69:89:dd:21:d1:be:93:9f:90:ec:8f:49:2e:51:
9d:70:b9:94:15:21:b3:44:20:c0:61:9a:87:b9:87:56:33:82:
46:32:da:61:f5:57:75:40:f4:db:05:97:d7:ba:20:64:1e:52:
a0:bf:42:a2:c5:46:70:7d:5e:48:99:bc:0c:41:d6:e9:a1:0f:
1a:d9:c2:6a:5a:61:6f:d5:73:57:91:0e:29:5c:5c:ae:e2:83:
5d:7c:a9:e4:31:06:b1:02:05:16:37:38:10:16:2c:2a:11:2b:
70:73:48:92:26:c1:f7:e3:29:d9:d8:f1:ee:56:a5:45:0e:43:
3f:70:99:30:b5:4a:f6:c8:73:d5:f3:1a:c0:42:49:63:18:6c:
89:d9:b7:38:12:42:e8:2e:74:92:cb:d0:41:04:29:fe:3e:ae:
af:f1:88:2e:43:46:da:ca:ee:46:50:e4:38:c4:1d:b6:99:d6:
16:56:bd:ac:a1:31:f4:8c:7f:4d:7b:8a:7a:9e:af:d1:a1:24:
bb:01:dd:28:c9:96:77:14:07:32:39:c4:4d:da:f4:fd:a9:6e:
e9:17:95:91:96:f8:bc:a8:32:56:34:29:c7:3d:2c:e5:ad:17:
8d:96:6d:f2:70:1d:34:15:8a:37:9b:4c:3c:9c:af:6a:9e:8c:
4c:6b:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:17 2025 by rpki-client