Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: lrr+xvvgcuZnZN7Duk6yFamys19dI05A/g0pNkNeyrg=
Subject key identifier: AC:89:93:2B:6E:98:FE:A1:D5:64:D5:7E:3D:61:50:EE:21:29:0A:B6
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 0194BC04FADFA11502875D92E03AF15D2751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: 2L14XkJCiWuLa7fLz32MdKENY4jDFdBPLi1rFf7cqxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:df:a1:15:02:87:5d:92:e0:3a:f1:5d:27:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=ac89932b6e98fea1d564d57e3d6150ee21290ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b3:91:6f:95:67:7a:33:28:b4:8e:8d:b3:33:
c7:76:b5:d9:2a:7b:6b:ed:cb:13:f6:28:7b:4c:77:
9d:75:e7:cc:6d:15:d8:39:80:22:18:c6:9a:46:f4:
fa:db:b7:2a:52:89:23:57:a8:55:7a:f0:53:85:67:
d9:39:a7:42:c5:8b:dd:b3:06:6e:45:e6:7f:e5:4f:
13:32:89:bf:cb:cc:92:be:30:e8:46:36:8c:b3:bb:
ce:56:af:15:ec:85:17:1a:b4:31:6f:d9:51:c2:d7:
be:d5:e3:38:76:83:25:8a:32:5f:1b:51:63:da:44:
7e:db:03:e5:d3:ba:b1:44:a5:5b:5f:32:bb:56:8e:
36:e1:ce:b8:f0:f0:f6:30:74:f9:81:ed:8a:c0:95:
1a:82:cc:44:1c:5d:41:9c:21:d5:8f:81:69:68:d8:
f1:26:ca:95:9c:dd:60:7c:8f:8a:c0:dc:a8:9b:b7:
55:a8:13:59:fc:da:61:dc:64:c4:09:9f:8a:5b:b5:
06:d1:d2:a8:24:5d:71:df:c5:9c:bd:18:94:46:b9:
eb:e1:0e:74:e5:36:1f:5a:fc:7d:01:08:7a:5c:73:
18:e9:04:9b:f4:dc:71:00:5b:25:ad:bf:4d:4d:93:
f1:db:df:cf:74:76:bb:33:a5:75:94:d1:36:09:87:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:93:2B:6E:98:FE:A1:D5:64:D5:7E:3D:61:50:EE:21:29:0A:B6
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:0e:9b:6e:38:73:01:b7:e8:b3:0b:7b:58:e8:be:11:95:
25:ac:9f:51:ea:04:15:85:7e:fa:09:65:de:f1:aa:20:e8:b4:
96:04:bd:07:6a:78:7d:54:c0:0d:b8:8a:e4:2d:7f:6c:9a:fb:
0b:7f:1f:ec:53:3a:34:60:82:f6:6c:17:ed:10:5f:d4:b8:d4:
bb:be:f6:73:63:77:57:e3:3c:f0:af:33:8d:e9:93:9d:37:92:
c2:58:0e:ea:99:b5:1c:b4:d7:25:a5:3c:cc:74:43:42:56:5c:
02:26:9f:a3:ec:9a:f6:62:90:2b:6a:e2:e1:12:75:be:07:56:
bc:25:8c:44:47:96:0d:23:2a:8d:00:20:2e:92:53:1d:53:10:
46:5e:aa:5a:1c:b0:b3:df:db:c8:1f:64:84:ed:00:19:c8:b9:
11:07:61:31:a5:77:83:ca:75:59:bd:63:d5:7c:ff:bf:e0:10:
28:56:49:ee:30:87:30:db:8c:71:46:80:b5:ee:a0:6e:6e:59:
9c:6e:10:9c:e4:d5:b2:36:a7:79:5d:df:d1:82:55:49:c3:36:
d9:f3:54:b7:19:a0:e3:90:71:de:75:5d:9e:1b:68:ea:c6:1e:
03:ad:31:22:84:e9:b2:de:c3:8b:25:dc:63:7b:89:5b:35:41:
22:12:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:51 2025 by rpki-client