Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: O2MClf9TqHq/E1PVq8FcJFW/rPnL2TkNvoTMlEy4EpQ=
Subject key identifier: D6:43:B3:2E:0B:0D:E4:D8:DB:7F:65:B3:08:E5:BA:69:B7:53:6D:04
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 0194BCE079BA773640BDFE41D3FFFF8565A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0229
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: OeXdoLeLU6r8VQ5Z9Y6cjIPi2wJlw4PAJQ0U/YAphGk=)
2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:ba:77:36:40:bd:fe:41:d3:ff:ff:85:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=d643b32e0b0de4d8db7f65b308e5ba69b7536d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:6b:69:ba:67:f8:29:5f:7a:90:6c:2b:36:
22:3f:fe:51:72:20:27:03:f1:3f:5e:01:61:86:10:
04:df:4f:c9:0a:f4:78:22:3f:70:56:ee:22:d2:2c:
09:e4:f3:b5:3c:78:61:0e:a7:f3:f7:2c:11:5e:04:
96:05:2d:0d:d3:f7:07:86:53:48:e8:e7:5c:5d:57:
cd:51:6e:2b:94:97:c2:57:3f:ed:57:d8:c6:7f:7d:
0c:36:ec:c6:bf:cf:fb:20:cc:b2:a0:56:44:a0:be:
cc:6b:22:03:69:72:dd:19:8f:2e:03:12:e3:86:52:
8d:3c:f7:d4:69:cb:e9:13:eb:35:15:68:e8:56:dc:
76:89:b3:ad:15:0d:4b:2e:b9:c7:1a:b5:1c:4e:16:
93:6a:7b:9d:9f:29:c8:27:d9:b1:96:11:28:81:9c:
5c:38:5b:7a:7a:ab:99:e2:88:87:28:55:00:93:e2:
00:aa:30:69:78:14:66:8e:ee:5f:8a:f4:b8:76:c9:
0f:54:17:0e:c9:4f:f4:a8:3e:02:95:8c:6b:11:fc:
40:00:ed:84:e3:a5:73:cc:ce:65:71:fa:a4:d0:bd:
39:8c:61:c8:9c:a0:b2:f7:07:e0:9c:05:19:f0:8f:
b3:8a:19:59:e5:3c:ff:c8:28:f6:1f:78:4e:04:51:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:B3:2E:0B:0D:E4:D8:DB:7F:65:B3:08:E5:BA:69:B7:53:6D:04
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:85:45:a2:db:65:8b:4e:58:be:d2:33:51:32:32:69:e2:b2:
57:ac:11:8c:07:07:09:71:57:f1:af:68:10:6e:eb:ae:38:22:
cf:41:35:67:09:8a:bd:b9:52:af:04:cc:c2:c4:97:bc:36:80:
8d:f3:79:49:b9:c0:5d:cf:14:82:15:1b:89:fd:e9:d0:3d:5b:
bd:42:a0:bf:1a:92:41:fe:ce:f3:d9:c8:93:1b:74:17:24:20:
fb:d2:18:35:12:bd:c5:e7:b1:c3:97:0c:49:e0:57:40:89:92:
6b:58:5e:b9:bb:d8:7c:4c:8b:0d:61:73:da:63:32:6d:41:d9:
4a:55:90:f8:9e:14:f7:ae:bc:2b:bc:4c:1b:14:4e:56:4f:52:
27:05:1c:4f:5f:b7:c6:c9:f7:e5:86:66:af:6d:f0:01:47:10:
d2:7e:f8:86:10:b2:ba:3f:51:6d:74:3d:5f:ca:da:2c:43:91:
a4:2b:47:de:a3:21:7c:1a:56:cb:e7:ae:94:58:b8:1d:13:81:
f5:69:30:f4:ed:b4:a0:89:a8:21:4f:aa:a1:00:42:06:33:02:
e2:95:8e:77:cd:f0:69:c1:09:f6:62:12:75:7c:4b:60:8e:91:
25:16:a5:44:e1:e0:ba:64:83:37:6c:60:e8:3c:6b:a3:b9:02:
66:ba:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client