Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: 5Grwo/WCQQgAjQCRN7Et8mDBuRCPUAL8GM/OuN6IXDs=
Subject key identifier: 47:0F:A5:B0:1A:2C:B9:3A:01:1A:20:6B:1D:71:E4:A9:AA:91:09:E8
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0194BCE0B67E968873691C4B0B53A377E4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 1101
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: lWfgp3n/MteqrAegn6d3ALvx69HRH55coamKFdFIsTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:7e:96:88:73:69:1c:4b:0b:53:a3:77:e4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=470fa5b01a2cb93a011a206b1d71e4a9aa9109e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:ff:e5:46:6d:ec:2f:6e:ce:26:e4:f4:07:
6b:79:79:3d:d3:f1:d8:e4:6a:35:b1:54:bf:ec:d6:
c3:77:01:61:a6:bd:d5:91:90:71:89:72:12:9a:4a:
9a:be:1f:21:ad:67:54:29:06:7b:f2:57:08:75:8c:
a4:7b:a0:69:d2:3a:c6:ef:2e:eb:92:75:3d:e0:a9:
86:2d:26:3a:54:00:07:3a:89:81:49:5d:aa:c2:bf:
13:99:26:86:2e:69:e3:dc:bf:fa:43:48:95:f9:2b:
a7:cb:20:79:3a:6a:34:ed:79:d9:a5:50:d7:16:2c:
aa:41:24:fa:e0:c3:2a:db:27:f8:5b:f7:48:e2:c2:
72:13:a3:61:f0:04:db:e4:9f:e9:ba:7c:6e:2a:60:
f9:af:b6:d9:7c:88:56:87:30:e2:ca:ad:9c:8f:41:
73:8f:68:a4:18:df:50:3c:15:15:3d:e5:cd:f0:69:
60:b9:e6:a2:25:a6:cd:12:9f:a7:36:db:ed:22:e9:
20:6b:c3:39:1c:3e:6d:ea:f8:c0:a6:53:e3:98:32:
df:10:07:6d:00:ce:e9:93:78:c1:3b:6a:04:39:ee:
3b:91:28:c3:d3:c9:5c:05:9e:c6:e9:62:5f:d6:11:
69:f5:6b:ed:22:46:86:6a:c1:25:36:62:99:91:47:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:A5:B0:1A:2C:B9:3A:01:1A:20:6B:1D:71:E4:A9:AA:91:09:E8
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:be:20:49:72:5c:89:56:ef:22:74:fb:e4:3d:88:53:f1:3d:
36:79:26:99:94:c8:10:5d:79:af:bb:88:30:a4:13:b5:f1:8c:
f7:62:45:75:f6:1a:43:65:fb:a4:bc:36:cc:9e:88:0b:2f:d0:
6b:98:e4:97:52:c2:2e:84:70:1d:91:b1:1e:fa:d0:08:87:49:
ea:c8:ec:ef:25:10:0b:c6:0a:49:cc:4e:af:d1:88:e2:57:fd:
cf:37:f9:08:5c:d2:b2:a7:bd:88:2f:c2:d9:86:00:84:d4:34:
96:d0:d9:65:d5:a1:ec:c7:38:27:6b:f7:70:2b:9a:ca:6d:e8:
3f:f2:36:b6:0c:a8:75:22:8c:af:8f:04:88:75:89:93:f1:7b:
ba:7d:fa:56:60:a0:a3:04:c2:15:53:7a:66:1d:27:cc:34:58:
f2:30:e6:67:f3:67:c0:08:e0:b7:c5:c3:6e:eb:1a:e8:97:35:
eb:f8:c5:b2:6f:8d:0d:c3:75:a3:22:a7:d6:97:ca:f1:9b:02:
29:2e:af:28:25:63:ec:19:d6:37:41:ac:01:24:e8:2e:0e:95:
7c:29:bd:e8:6b:c9:28:e7:ab:a8:3e:ee:c8:5e:45:93:9e:29:
04:e5:a9:a9:19:8d:98:08:f9:5b:f6:10:5c:0c:f0:b3:3c:dc:
62:54:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:15 2025 by rpki-client