Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: RLfNj9XyE0NSqqu6DYEUiFREIEDGhNk5cuCzsPxSeBk=
Subject key identifier: 83:CD:F8:6C:FE:1B:D9:49:70:3C:1A:5C:30:C7:9F:2F:F6:02:51:A7
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 0194BD175FE04BAFA51EF66ABADCF84E45B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: QVar9x8G1euSJ9g/hbXGHS1SAQ3ZUHGTlSeEjEzmzT8=)
2: JfVg2a5pAi61HF6W0lENi_X8DUc.roa (hash: Mi/UBjA1CVg3EI0zZ/Mvz8hNoPR4p0IzucKiACeunmw=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:e0:4b:af:a5:1e:f6:6a:ba:dc:f8:4e:45:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=83cdf86cfe1bd949703c1a5c30c79f2ff60251a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:2a:31:82:6a:f6:30:9e:63:64:4f:da:54:
ee:c7:db:9c:18:01:b4:35:5f:4b:33:ee:60:36:75:
ec:91:6f:50:1e:4e:0c:1a:2c:65:d1:33:d3:6c:ff:
80:b1:8d:2d:f7:49:dc:5b:7f:06:c8:b7:fc:55:5f:
33:c2:92:02:5e:2f:a4:64:5f:fa:0a:d2:50:f1:03:
7b:dc:0c:6e:3c:9e:f3:68:56:89:16:ad:95:30:42:
76:87:33:03:ec:a9:15:56:f2:95:5a:ce:d4:49:c0:
e9:cc:77:9a:cf:8b:a7:2c:b2:69:e8:42:85:05:63:
d9:ae:cd:3d:37:2e:c9:c2:5d:37:ad:ec:be:79:0f:
46:6f:fe:aa:95:14:eb:11:ab:d0:d6:2d:db:d5:ad:
e2:47:f0:a6:ec:f8:12:c7:0e:50:40:f6:61:e5:6b:
4f:df:b2:21:9b:cd:88:e7:bd:44:85:e3:28:89:98:
aa:93:d8:2d:74:b7:0f:64:9a:82:5f:30:8b:18:ee:
be:c8:88:5a:15:ee:c3:6b:a0:c8:2c:b3:c5:9e:7d:
f0:94:e0:fc:84:ae:ba:ad:b7:f9:56:ca:7b:75:ab:
b5:63:e8:64:7f:a1:b7:30:2c:62:7e:c4:58:5e:ac:
78:fc:05:5e:f5:53:dd:2b:1d:6b:3e:41:79:01:2b:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:F8:6C:FE:1B:D9:49:70:3C:1A:5C:30:C7:9F:2F:F6:02:51:A7
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:5b:65:c8:c5:da:ef:48:ba:6d:55:d7:82:3d:07:ae:86:
95:2a:14:b1:ab:09:3c:54:2b:cf:a0:aa:49:b2:26:04:de:22:
2a:e0:af:bc:85:99:51:f1:51:a9:ac:81:41:32:8f:75:df:ed:
e5:4c:54:a5:c8:05:2f:92:a9:a0:56:ee:10:5f:1e:80:d0:f1:
76:b0:4b:2a:0c:89:2a:9f:7e:c9:3d:8d:94:f9:46:80:c2:4b:
15:c2:c9:f3:95:73:2f:59:08:fa:c1:6c:5f:4d:9a:d0:5d:b9:
b9:0f:59:02:bc:86:0d:d5:55:9b:0d:12:12:40:ef:03:d6:70:
65:a1:3d:02:c2:96:ac:ee:c4:f1:c7:f3:32:93:ee:67:64:cd:
3a:05:22:7a:08:2f:ab:a0:44:98:ec:10:9b:80:6e:38:7a:c1:
14:d6:e8:b8:c1:52:f9:e3:37:d1:4d:65:c6:a6:52:d3:04:09:
f2:1d:e7:eb:e8:1b:58:f5:68:a8:5d:7d:fb:a2:8c:37:35:2e:
a2:d1:15:92:7f:73:6a:ab:75:c0:1c:b7:87:f5:65:07:5e:63:
c4:05:48:50:78:9a:cd:4d:0e:96:6f:df:a2:14:a4:d7:f8:59:
77:e7:d7:85:4a:56:e1:db:0d:12:41:d1:53:b1:56:e6:c4:ae:
b3:64:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:10 2025 by rpki-client