Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: m/MxyH+hoFNG/8l1QzApDHaoqh3GieA5nWlVaaD9bXk=
Subject key identifier: D9:1C:52:A3:35:44:AA:18:09:DD:A9:77:A4:DF:4A:66:39:71:E5:24
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0194BD176779708C9B198A9C71FC9E673A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 12
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: 8rKiV33YHR1d0fpXLU75oF2hyqPLYa0bmzbsMFhoq3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:67:79:70:8c:9b:19:8a:9c:71:fc:9e:67:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=d91c52a33544aa1809dda977a4df4a663971e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:78:3b:70:16:78:9b:a9:8c:d0:d8:5d:36:
23:4b:02:18:3a:43:1d:31:2e:bd:e0:d8:4a:ce:0b:
64:b2:6d:27:7e:c9:22:33:33:8d:47:92:37:08:29:
2e:6c:b8:60:66:f9:42:63:25:18:c7:3a:b1:5a:f2:
02:a3:b7:b3:13:26:c5:15:cd:e1:8f:40:52:f8:11:
11:47:fe:2b:a8:81:3b:40:0c:5f:e9:3d:bc:26:a9:
bf:6d:8d:68:16:ad:71:f7:0d:9b:85:03:6b:7b:bd:
0e:4d:8d:9f:45:84:85:95:56:c3:f1:be:38:5f:f4:
37:fc:25:ae:8d:b1:55:68:3d:ed:1a:b8:6f:2e:5e:
4f:36:f5:22:35:b1:5b:cc:10:fe:84:15:5d:c8:0a:
3f:db:c2:ca:4d:71:85:a8:0b:4c:a7:c6:46:94:97:
5c:aa:fc:95:26:48:45:75:be:06:66:d8:01:ca:86:
00:64:ad:2d:38:e4:c8:8b:8a:a0:af:db:81:2d:09:
31:82:5c:48:2e:63:59:ad:c5:fd:60:a7:bf:ba:da:
cb:07:1e:8a:ed:89:f0:3a:07:55:af:89:7c:c9:fb:
9f:9e:e4:c8:de:d6:b2:35:07:1f:6b:53:5b:32:f9:
77:b4:ca:7b:07:81:8c:94:d3:4d:3a:f6:85:53:15:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:52:A3:35:44:AA:18:09:DD:A9:77:A4:DF:4A:66:39:71:E5:24
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:82:3d:e1:23:79:ac:2f:9f:f1:92:4e:f5:2d:60:cb:e4:
ab:de:b0:62:f5:44:c6:9e:17:1e:d1:a5:05:9f:db:97:f7:be:
1a:3a:9d:2b:ce:cc:4f:73:c1:94:54:6b:59:66:16:7f:ab:7b:
40:86:0f:e0:45:14:8a:12:68:f3:9a:08:3a:25:67:a7:e0:8f:
40:d9:50:e1:0e:d7:43:82:73:c2:ee:8e:d4:e1:8d:98:33:50:
eb:96:c5:19:51:b4:18:2e:3e:f2:2c:57:d7:4b:e9:72:41:da:
e1:98:0d:87:29:82:2b:4d:f4:1d:d7:d1:a9:ff:95:aa:63:60:
db:0b:38:61:4b:a3:eb:46:1b:95:0b:8d:6d:6e:cf:ee:df:80:
0b:14:3d:91:0a:4b:0c:6f:14:6a:ec:5f:f7:9f:68:1d:a5:64:
84:f8:a4:26:85:38:1a:d8:f5:f7:90:c2:97:f2:54:5a:5d:22:
45:15:21:85:b3:55:64:29:ca:0b:46:68:fc:6d:c0:6a:37:cd:
5c:33:26:ad:b0:44:ed:cc:37:6c:3a:c1:99:22:7a:db:fd:aa:
96:3d:c4:cf:d2:46:34:6f:37:60:8b:d0:df:56:0d:ff:b2:51:
02:e2:bb:0c:f8:02:b6:27:ef:aa:16:f4:27:0f:11:cc:b6:1d:
93:28:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:05 2025 by rpki-client