Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: dVLzXJipchgBWfBJ7vuW0BJtQAFCD0EuoBVez6a5lQc=
Subject key identifier: C3:B3:18:9B:8A:EF:F1:6C:28:0E:89:53:BD:E7:01:5F:20:2E:70:CF
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0194BC72C2BA05B9B4A89002047F126B02B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0A53
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: MLMMRLACfZfO6bhAZeHniZnxqSt/x6LwG3BazVCmOwA=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:ba:05:b9:b4:a8:90:02:04:7f:12:6b:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=c3b3189b8aeff16c280e8953bde7015f202e70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:7d:53:7b:33:e8:1a:70:ad:4f:dc:b4:ab:
77:dd:56:1a:0a:f9:59:bd:a7:37:8e:49:4b:f2:10:
ef:21:58:34:37:84:b0:49:28:ec:e6:5d:2e:da:57:
88:14:74:90:34:70:83:5e:4d:19:de:98:82:01:45:
fe:02:0c:09:08:d0:68:4e:27:b1:19:c6:47:6f:b7:
00:c3:91:dc:7b:56:6f:ba:66:ad:62:4e:50:f6:8d:
e5:c9:b3:a4:a2:32:4e:c2:6e:1b:d2:ff:b7:26:ac:
3c:4d:36:2f:92:c0:98:d7:63:b6:82:14:bc:22:cb:
c4:15:ab:6e:1f:34:cd:7a:70:4d:32:3b:4a:ac:1d:
99:df:0c:c2:b8:22:f1:ef:1f:35:83:c5:97:07:8e:
b4:17:50:f2:0d:eb:7c:d0:4c:ba:be:de:67:8d:4f:
8b:94:96:f4:47:aa:83:5f:bd:81:d4:c9:93:88:d4:
e4:df:40:d5:e7:f9:ee:fb:c9:f0:15:f2:1b:cf:76:
33:d1:4b:9d:81:10:5e:bd:02:49:a2:d2:da:bb:78:
ae:a0:5a:36:dd:22:f3:40:74:c3:16:eb:56:24:e8:
c0:94:aa:41:8a:d3:9a:12:c9:70:c7:34:51:9b:3a:
90:f8:c3:ae:23:6a:66:32:96:2f:88:1f:7d:d2:4e:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:18:9B:8A:EF:F1:6C:28:0E:89:53:BD:E7:01:5F:20:2E:70:CF
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:26:49:d0:ab:84:ca:9f:c1:7f:41:64:e2:aa:38:e8:fc:
00:5d:54:95:3b:6c:ee:85:47:39:c2:1c:6f:a4:55:da:8c:d0:
f7:61:ea:fe:29:19:c1:32:e7:aa:6e:c0:99:af:b9:77:ac:17:
64:94:aa:76:c4:19:ae:f8:3d:d5:c7:26:2e:dc:07:f8:e4:aa:
31:f7:80:82:58:b6:77:be:c4:02:ed:11:bc:75:5c:99:7a:65:
1e:8f:35:86:2b:93:19:77:49:60:20:c3:01:b7:f8:8f:45:f3:
ab:11:5d:98:11:39:ff:7b:0c:f5:af:6b:92:a6:69:54:16:d9:
46:b9:78:35:79:ff:2b:49:f6:71:86:6f:56:18:63:ba:6d:57:
0b:f1:8e:2c:b1:57:b6:c4:e5:7f:62:31:3b:03:c9:fc:f4:9a:
85:6b:af:4e:19:14:65:a1:d6:36:9f:f1:c0:76:64:48:c0:30:
37:8a:52:8d:3c:12:fd:0f:9a:5f:78:f9:6e:8f:54:f7:69:a5:
6a:38:0d:e2:5c:46:08:73:6a:6a:5a:91:4c:80:1e:60:a1:d9:
e9:7a:7c:36:b2:92:d9:7c:cd:b5:8c:39:4a:3e:44:d5:ba:18:
43:15:b3:0b:34:5b:58:6f:98:2f:17:b1:2f:1e:a7:a4:46:db:
ce:a8:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:10 2025 by rpki-client