Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: X3G43fft4s9DzxoebXNOulgw0NOc6IgLQlX53lyIEf0=
Subject key identifier: 39:5F:17:09:38:92:E5:98:CF:91:76:BF:31:0A:A8:15:B4:52:2B:A2
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 0194BC04AB1D5C07DD6BB9D8F10050E83039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: gPHS4zXdSNZoMLM2RIvmH6d9/5G/exZJzZ8MT6KzR+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:1d:5c:07:dd:6b:b9:d8:f1:00:50:e8:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=395f17093892e598cf9176bf310aa815b4522ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:84:0f:d4:d2:ac:70:c0:31:e1:8c:ba:91:
39:20:8f:b4:fd:ae:72:74:31:a4:aa:3d:bb:e8:61:
2f:58:79:e6:c1:53:3d:2c:44:0c:9c:66:99:69:6c:
27:7d:ed:b5:99:14:05:26:6d:e2:d6:52:b4:9c:91:
2c:0c:40:8f:26:49:41:66:f7:22:f1:74:a6:f8:cf:
f7:dd:fd:6c:e3:52:21:3a:98:e7:b3:db:66:79:9f:
0a:4f:9e:17:4f:45:5c:b3:15:d1:f8:68:79:09:20:
ac:97:8d:2a:00:4a:9d:ae:df:46:72:85:47:23:f4:
76:f0:68:80:cb:da:22:bc:4f:bf:56:d3:3d:e0:c6:
60:3e:7c:e3:a8:ae:03:46:fc:f2:b2:64:41:6b:c3:
7c:5b:83:1d:c7:5e:38:bd:0e:cf:79:72:b4:25:00:
34:df:c3:c5:01:d9:5b:89:aa:83:46:28:bb:12:6f:
9c:00:8a:2e:37:63:f3:79:b5:25:c2:87:42:45:a4:
05:01:da:21:2b:13:74:6a:43:9d:33:4f:79:3d:1a:
a4:da:04:5f:c7:0c:d0:9f:5e:1d:17:b5:d6:60:f0:
72:0f:8c:4d:59:b8:9c:00:15:42:28:87:2c:57:2d:
ef:c3:41:f2:fc:ca:32:8c:80:06:f6:75:f5:51:cd:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:17:09:38:92:E5:98:CF:91:76:BF:31:0A:A8:15:B4:52:2B:A2
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:9f:36:3f:da:da:7b:24:d5:1e:20:a7:54:d0:c6:41:53:
35:f0:69:34:87:f8:55:f4:ca:46:14:83:49:76:ec:12:88:9e:
41:53:30:a1:03:a2:a6:86:9f:2e:4c:69:c3:fb:1f:13:c0:6d:
78:3e:05:a7:04:23:4d:c3:25:50:99:3f:22:1d:bc:33:81:cf:
bc:d1:4d:c8:96:be:7f:cd:b1:d1:13:be:0a:f5:eb:09:25:ce:
af:f3:14:5a:96:e1:6e:6d:9c:e4:38:6e:bd:c3:bf:97:79:32:
d9:50:22:36:f2:a5:82:1c:9d:b2:aa:df:49:7e:cf:97:4f:5f:
fe:8a:58:52:b1:5e:c4:7a:d8:bf:3f:ad:66:a4:7d:df:82:98:
b4:86:54:74:a4:54:6c:e2:33:e3:d7:02:5b:6d:0e:8e:d4:68:
6d:47:91:b1:0c:8b:d0:ee:84:39:3a:43:ea:18:10:33:5d:b2:
51:36:63:52:b6:8c:18:f5:31:a0:eb:68:f4:8a:a6:48:b3:cf:
2c:2c:9e:f4:20:a7:54:87:63:eb:75:65:4b:03:b3:81:36:fc:
b7:40:80:25:57:02:52:45:47:64:37:c2:a2:f4:8b:5c:94:c0:
c1:18:11:93:34:5c:b4:78:a4:33:00:aa:72:d6:96:e7:23:c6:
9b:b5:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client