Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier: xeZlLfOeN8NHPq4G8Kr6AQmt9YOWFZp+vbQvgZfLg8A=
Subject key identifier: EB:51:FE:D2:2E:92:D8:D2:07:5C:9C:E4:1F:CD:AD:FC:DC:A0:12:B7
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 0194BC72BD78FD27BD91B3A4357D8CC70653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=)
2: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: W4Oje0ILS3yyX5DjnND7Q64jccI/WZSkCQVkeP6NzBc=)
3: pGzRbO_F0LsjPyCl5sKVkyT75Bo.roa (hash: yG1El46aKYr6nMZGPVYpfh94NvWlqZDwSjkT1AEwnpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bd:78:fd:27:bd:91:b3:a4:35:7d:8c:c7:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=eb51fed22e92d8d2075c9ce41fcdadfcdca012b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:a8:4a:d7:06:bb:0b:c8:61:6a:fb:c4:7a:
52:af:80:af:b3:cd:9a:3e:4f:c9:10:f2:ba:6a:94:
9f:6d:c7:44:0a:bc:07:2b:05:d4:80:bf:a0:87:10:
04:ca:7b:b6:0d:69:12:13:1a:dc:fe:bf:4c:5e:bf:
ee:cc:bb:de:5f:0e:d4:fa:c0:18:1a:f0:63:34:b6:
75:0f:1b:0b:e1:96:ef:ad:4a:2d:f3:22:39:d9:2d:
33:4e:f5:a7:e1:e8:07:47:c5:12:e1:9e:da:8e:a7:
a7:a3:89:62:a6:1a:b3:20:0a:f1:f4:d3:b5:33:d5:
6b:32:c1:61:b4:2c:91:60:31:0f:ea:c7:a2:d6:80:
31:36:1e:77:41:3c:a4:c2:03:04:89:a5:18:dc:38:
9b:b0:ec:b6:8f:e6:31:e6:fb:83:0f:77:51:77:c7:
dc:44:7c:bb:bb:0b:ef:c8:e1:e9:13:ee:18:51:93:
9d:7f:b7:61:a8:52:69:b5:7e:e4:ae:9b:e0:21:5b:
d9:13:a3:5f:da:5d:db:1c:67:81:f8:c3:bf:ab:0a:
5a:6e:a4:83:55:81:94:b7:c1:65:b0:b8:38:19:f6:
9b:00:26:10:59:36:f9:a2:a1:d9:9e:0c:0d:9c:c9:
1b:4c:08:28:3a:74:96:23:17:23:f5:7b:4a:19:0f:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:FE:D2:2E:92:D8:D2:07:5C:9C:E4:1F:CD:AD:FC:DC:A0:12:B7
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:96:ec:d3:57:5f:20:4c:24:df:ea:36:f4:02:1d:8a:27:
60:67:9d:32:57:16:27:f1:4f:79:66:ec:f9:c9:03:e2:72:69:
82:c1:f4:2f:77:61:c1:17:10:1a:12:0a:6c:6f:5b:9d:c6:3e:
f6:8f:f5:6c:f1:25:f3:b1:5f:b3:7c:57:68:cc:40:1d:c3:fc:
e6:b3:f4:53:93:ee:af:19:6a:f8:64:a0:00:f5:7c:04:9c:ef:
f2:92:f6:e1:d1:a1:16:8f:72:2a:b0:da:33:7d:cf:fe:12:15:
d3:a9:35:dd:26:e1:7f:d3:db:c4:40:cb:9d:33:10:2c:fd:b3:
81:6b:b4:43:ec:b4:31:d3:be:c0:69:a5:1a:6b:87:a4:19:79:
3a:ac:cc:9f:c8:d1:b1:98:64:ad:ee:3e:4a:5f:2f:bd:e2:c3:
2e:87:c9:ee:6a:f1:e7:4e:28:f3:87:8b:11:46:0a:63:25:d3:
29:2f:fa:fa:8d:76:7a:56:6f:dc:81:71:9d:15:f9:8d:26:c9:
2c:00:cb:20:98:f8:a3:8d:ce:1b:d1:93:61:22:f8:49:3a:d2:
6d:7a:43:86:a8:49:b4:15:22:59:e8:82:df:1d:14:c4:32:7f:
b7:f6:31:8f:b9:46:09:0d:fb:aa:85:81:f0:ab:f6:73:c4:e8:
7b:d6:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client