Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: zHk7GAPOsme1LaZ/dnlqRzn5vECzhHWZ9c3n7l8MAyY=
Subject key identifier: BC:6F:9B:40:C6:11:85:E2:6B:D6:85:9E:55:9F:95:17:38:1B:E4:0E
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 0194BD857DF29AB74DE09CADC8BFE61318F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 0FBD
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: 42C25wVNqm/ANm71lkdsiaetVG94OQ2uaiN0Um27s4E=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:f2:9a:b7:4d:e0:9c:ad:c8:bf:e6:13:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=bc6f9b40c61185e26bd6859e559f9517381be40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:ac:95:19:6c:bc:30:8a:cb:17:be:88:36:
3f:bc:6f:bf:20:0a:a8:d9:18:87:d2:69:ce:24:48:
c9:14:58:53:77:d3:24:d2:ae:f3:69:ab:97:7a:bd:
64:74:f0:d4:74:44:3b:82:53:97:65:86:37:ec:f6:
28:86:e9:df:87:3e:fb:a0:61:26:a6:b2:1e:02:90:
a1:d6:24:6f:4d:db:05:04:69:7e:ba:a0:d6:72:78:
44:73:6d:22:a8:90:36:51:e6:2c:f9:0f:52:ff:80:
08:dd:c3:d5:e5:c8:aa:1b:fb:6d:d1:a2:cf:83:42:
de:84:4d:3d:85:f8:00:90:da:a3:88:8b:49:f1:5a:
44:61:21:db:e6:e4:cb:43:a4:b3:bf:37:f6:a2:b9:
1a:87:9e:32:be:cf:91:1d:47:73:e7:3a:24:3c:e3:
ef:54:bf:ac:54:86:f2:c9:c8:f1:a5:d9:41:d4:a0:
47:5e:d7:50:b8:78:d9:24:4b:ac:c7:b1:75:4b:7d:
40:6e:53:fd:a5:11:08:a0:bd:39:60:5b:e8:00:22:
fe:2d:6f:0b:95:2e:b5:2a:94:1d:f6:2f:1e:cd:29:
5d:c7:8a:ad:cb:6e:c5:30:d7:4d:5d:10:51:83:a2:
fb:7f:94:c7:d9:8b:d2:07:fb:85:6c:ae:af:ee:0e:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:9B:40:C6:11:85:E2:6B:D6:85:9E:55:9F:95:17:38:1B:E4:0E
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:6b:d3:04:a1:f2:0a:59:6f:0c:22:bd:dd:69:80:20:43:
3b:25:48:22:03:8e:ff:58:46:b8:71:b9:4d:3a:1a:b3:29:d0:
c7:ee:e5:4f:ec:3f:ee:dd:d5:38:59:1f:0c:ce:75:b7:bf:1a:
4c:19:4e:28:39:e7:fb:88:db:bd:48:e9:8f:96:98:22:50:2e:
25:1d:29:20:0f:6c:5c:67:81:df:23:d0:4a:53:ff:0c:63:d4:
89:be:ea:27:fb:5a:a3:9f:e0:ab:54:2c:11:b4:d7:9c:d5:d7:
94:b8:22:53:6c:88:85:59:89:fd:8f:1d:1e:72:19:7c:06:b9:
cd:17:6e:9f:12:5f:90:d7:13:c1:d3:9a:f9:8c:fc:24:4a:09:
2c:ce:c8:f8:60:aa:cd:f6:1e:a2:a1:a4:f0:58:d2:08:f6:dc:
f6:38:79:5d:6f:df:ab:b7:67:2e:b5:75:16:e7:cb:82:a6:d2:
bb:c4:c9:36:a1:d3:85:f0:cd:f7:25:a0:e4:8e:53:54:23:03:
cf:d6:5c:38:51:63:c1:cd:4c:35:ab:36:66:39:be:7f:d7:61:
50:60:1f:d2:7d:7e:6b:48:d9:94:01:d6:99:c7:cc:de:34:6e:
94:0c:2b:a6:25:ec:23:19:a4:82:8b:9f:38:0a:16:33:84:6f:
b0:89:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:38 2025 by rpki-client