Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier: vZX/ps5pFrow18Qhsb9ZNeU/TChmEaBhClQkF4M+7jw=
Subject key identifier: 46:38:98:34:EA:D1:93:92:F3:FC:E1:1F:54:1B:6F:D4:D9:33:A4:3E
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 0194BC0525E8F3B649DF9B0B31EDF8EFD65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: AaPlya2/EZJQs9bEUHMCdapYHnubxzxmzQ/Mv59xWiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:e8:f3:b6:49:df:9b:0b:31:ed:f8:ef:d6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=46389834ead19392f3fce11f541b6fd4d933a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:46:21:2e:df:1d:b3:8c:b2:4b:c8:cd:53:
11:f5:9d:bc:06:70:08:8f:84:18:16:00:91:1d:14:
db:41:94:07:02:08:4a:01:ba:a6:8d:6c:58:cc:f0:
cd:55:36:4d:86:0a:07:5c:a7:ed:a4:7e:62:fb:9f:
d2:63:16:b2:14:b8:67:2e:db:ed:1f:bb:9b:23:5d:
f2:9c:a6:56:88:7b:b5:07:d8:11:e2:3f:ed:27:b1:
75:e3:c6:37:ef:8c:5a:a1:55:1b:b4:10:c6:16:0c:
f6:8b:b2:21:51:0c:96:41:91:9f:33:ea:11:40:74:
40:b7:eb:7e:3f:7c:ab:6e:08:64:e7:05:2c:6a:eb:
c4:8e:e5:c3:33:51:65:1c:1a:96:7b:17:d3:25:e1:
e1:c8:e4:6e:00:26:4e:c6:07:4b:ef:b5:82:e3:86:
80:b4:d3:35:cb:10:ce:c8:9f:a8:59:e5:2d:42:89:
f1:46:37:31:38:c1:25:ed:1c:4f:87:57:1d:94:b8:
94:3b:5f:7c:2c:07:2d:84:3b:a9:91:ba:3a:24:cd:
ae:62:08:b1:a4:bd:95:de:13:0e:ce:e5:ab:33:79:
cf:6b:8c:d4:ba:41:e8:c5:61:3d:5d:c2:8a:d5:2a:
f4:59:7e:8f:2b:83:eb:d5:25:cc:8e:d4:97:d1:11:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:98:34:EA:D1:93:92:F3:FC:E1:1F:54:1B:6F:D4:D9:33:A4:3E
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:c7:ec:9e:9d:62:7e:60:93:50:cf:2a:1a:3d:28:47:9b:
ff:0d:09:e2:db:15:53:86:de:64:32:ad:e7:bd:d0:58:d4:bf:
4f:e8:fc:95:10:64:89:b2:fd:1a:46:20:c8:d8:e9:a0:64:be:
69:e7:f3:76:ab:af:0b:27:94:9d:f2:2b:ba:90:61:1e:23:48:
d7:0f:31:d0:22:fa:c7:89:1f:5b:19:46:32:65:6d:0a:d9:1e:
2b:e1:fe:e9:4d:0a:31:a6:e8:8c:ae:ee:12:18:61:48:ca:c2:
4d:f3:f8:c1:cb:17:7c:24:34:f3:73:4c:d5:15:79:f8:98:29:
49:73:2f:4d:9e:b4:ac:d5:f6:4e:1e:f6:b1:70:ca:17:e0:8d:
d4:27:1d:32:df:1a:db:38:85:31:56:16:90:d1:78:d4:f2:8c:
26:2b:a3:f0:a1:76:dd:c3:a8:62:e7:ed:5a:6d:a3:59:7d:57:
8c:97:10:86:98:73:19:93:c0:45:ba:68:42:f5:36:6a:7e:52:
e5:ef:f1:4d:2d:f4:bf:02:18:37:78:05:e1:4a:d9:19:e3:04:
fd:ad:96:27:92:69:10:ae:26:b2:32:cb:be:8e:ad:9a:84:b5:
97:ad:16:be:c5:c4:28:87:60:72:1f:3f:5d:bf:e8:73:8f:f9:
34:cb:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:17 2025 by rpki-client