Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: oLnZar1zins7Zjv45/R+Xo/HsbmMUz/zVrXD/MDVtn4=
Subject key identifier: 4A:6A:6D:BF:6F:B1:AE:7E:6C:A9:76:7B:1B:40:B6:F7:E1:19:6D:0D
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 0194BD1800C5E04475791E03705C138F7976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: pPu5P7bGxoT7nceJgUQ1IGV3clslnBytA2cv+YNTaFU=)
2: vQVKTwJT4leI6HjT4PX8aITkP18.roa (hash: SnTX0BqmORDuYska7e4pXGhwX58LZGJ25QrHzIMD1lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:00:c5:e0:44:75:79:1e:03:70:5c:13:8f:79:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=4a6a6dbf6fb1ae7e6ca9767b1b40b6f7e1196d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:e4:88:f6:f9:c8:b3:fb:fe:13:93:f7:48:
a5:22:90:95:89:0d:11:7e:4b:35:57:5e:46:b8:07:
52:2e:45:eb:3d:7f:a9:04:1d:13:23:6b:42:4f:76:
ab:5c:16:8a:70:48:81:bd:d2:5d:74:cd:4f:c2:5b:
64:f3:b5:b1:4c:7a:7c:a0:c9:61:d9:fc:58:37:6c:
1a:30:f3:c5:89:52:5f:ba:24:2b:28:ca:fb:60:1b:
62:2d:05:af:0b:8b:83:69:fd:bf:01:5f:06:3e:19:
d5:a1:c2:24:de:f4:8b:dc:85:bf:62:db:35:0e:70:
0e:4f:88:ad:48:8d:d7:a2:93:f5:c9:e0:65:0d:53:
f4:50:82:31:57:a2:d4:db:c9:47:a3:e7:29:81:4c:
29:fd:c0:30:96:b2:c0:2e:a8:c3:37:fb:7b:22:2b:
62:56:30:66:0c:6f:ab:e5:ba:03:e7:98:bd:39:54:
5c:44:09:b1:0a:aa:0a:67:01:c1:99:a2:73:fd:16:
a4:d7:d8:1c:fa:de:54:15:5c:b5:8c:c1:90:b3:b0:
43:b5:63:09:62:5c:b8:e0:e1:d7:42:a7:49:d3:1e:
5f:bf:b6:28:c4:3c:3f:1b:3a:d5:8b:96:2a:a5:c1:
e1:2e:36:6b:40:bf:6c:6f:df:f2:1a:d4:1b:65:fe:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:6D:BF:6F:B1:AE:7E:6C:A9:76:7B:1B:40:B6:F7:E1:19:6D:0D
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cf:26:4a:3d:10:11:14:44:31:c2:47:16:89:87:bb:9b:c2:
cb:27:11:b6:6d:e5:39:e8:fd:64:45:2e:e0:09:12:7e:c8:a6:
6b:f2:82:52:90:b9:d5:ee:a7:c0:9c:a4:ed:08:ca:cd:0c:6d:
33:44:a0:d7:68:99:75:1d:f8:8e:82:0c:ce:ee:96:0f:45:19:
68:a0:19:d8:32:4b:e6:ac:5d:7f:ee:04:cb:3b:36:df:f4:63:
cd:5e:ae:f9:a7:17:27:84:15:79:4b:4b:ae:9e:e5:c9:3b:75:
0e:b7:d4:e5:c4:36:41:4c:59:42:64:30:8c:70:4e:3a:d4:0e:
19:9a:0e:62:9e:66:27:09:fb:e4:10:c6:07:cf:7d:8b:07:16:
61:55:14:62:01:5c:cb:39:d2:a3:6f:09:bc:68:1b:a4:35:d8:
ed:bf:91:90:97:19:8c:2d:08:7b:bd:ce:a8:83:c3:b3:c9:af:
b9:2a:ea:0b:51:04:83:59:53:44:4d:28:6a:f9:9c:ad:2f:85:
b6:d5:12:46:04:94:0a:34:36:c8:f1:ef:2a:c5:87:b5:ac:dd:
4c:10:15:fc:96:5d:82:26:df:6f:2d:fd:26:36:b0:cb:0b:8e:
be:92:5a:4a:b3:e8:25:c0:bc:cb:cd:7b:00:ca:43:98:28:14:
00:95:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:28:00 2025 by rpki-client