Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: ZefZDBAeyV9lBmHg8Ick5TpTk0DAzW7SrFb0uBf3zIc=
Subject key identifier: FC:62:A1:9E:4B:08:C7:C4:88:05:DA:37:4C:DF:38:11:99:44:B7:9B
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0194BCE0AEE0FA62BCC237DC13A7EFB0008C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
2: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: BwA0/t6tPhzxjXjazGT5hBic29HiNO5HobwRHJZ9+bY=)
3: uMipqaBEPsKFmFa7P6LE1GLvmcY.roa (hash: DeZN9WBuwTV7YL0ji91sXglOapll+9+y355iMo+VLtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:e0:fa:62:bc:c2:37:dc:13:a7:ef:b0:00:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=fc62a19e4b08c7c48805da374cdf38119944b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:e9:5a:bc:40:1a:07:ac:a9:3e:09:f9:b1:
01:f3:be:07:d9:e2:a1:ed:8a:af:9e:cf:28:0c:f0:
a5:cd:04:00:9e:c6:09:5f:12:6c:cb:0b:cc:f9:c1:
10:9c:49:7b:02:59:7c:38:e5:7b:cf:72:e7:ce:a6:
58:0f:c4:29:fc:21:96:62:80:1d:a5:88:ca:53:fb:
a5:b5:f1:99:cc:24:cd:eb:8d:49:6c:eb:bd:29:fa:
12:79:da:35:4c:d9:81:8f:33:76:43:ba:e9:a1:8c:
57:32:d6:4d:bc:4d:d7:bd:69:38:2f:d5:18:51:eb:
3f:0a:43:1b:2c:c9:b8:3b:d4:87:a4:8e:23:4a:b0:
83:4c:a3:de:71:92:13:81:35:31:6b:b0:d5:3c:ce:
fb:dc:fc:78:d8:dd:fc:ba:73:2b:7e:35:37:ec:54:
7e:0f:c1:45:90:06:c8:a2:09:f0:21:47:c5:32:16:
fc:42:16:d3:31:14:5f:ea:72:8f:4e:39:0c:ef:2c:
45:a4:8f:82:4b:f0:3c:ee:26:e3:ff:06:70:1d:81:
0a:1c:5b:08:1d:ff:b6:81:7d:5b:0a:97:32:56:07:
5e:b6:be:27:61:4f:58:2e:ab:cb:4a:c5:4e:2f:d7:
42:98:1d:8c:f0:01:7d:b3:1f:2a:cc:f3:93:e2:52:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:A1:9E:4B:08:C7:C4:88:05:DA:37:4C:DF:38:11:99:44:B7:9B
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4d:90:00:0e:6d:07:77:0b:fd:f8:4d:e1:cd:fa:ea:d6:53:
42:b7:b1:d6:c2:85:f1:f4:5d:f0:ad:8a:e6:38:2f:bb:2a:7d:
c8:04:2e:fe:15:75:0c:b4:33:14:da:e2:fa:cb:2d:86:9f:7d:
3b:3a:2a:38:f3:ca:c2:fb:56:bc:36:7d:f0:6e:32:91:c4:a0:
42:27:a4:2e:6d:4b:51:6c:6e:45:5b:9b:f3:bf:94:f5:93:66:
78:84:e3:27:6b:14:68:a4:e8:9a:a6:3e:84:70:a2:c7:b2:1f:
d6:52:79:3c:01:56:28:d7:51:91:b0:59:72:fe:86:4e:68:58:
19:c5:85:8e:42:22:76:d7:ce:88:99:ba:29:b0:d1:0a:fb:5f:
1c:96:a9:76:15:72:5b:6f:c8:98:35:ab:9a:45:b3:2e:dc:c0:
8b:1a:dc:e0:b9:bd:42:e7:15:5b:66:73:32:8b:4d:3b:16:ad:
88:c1:d7:26:53:8a:6b:44:e6:8f:64:af:1d:ea:9a:a9:dc:94:
64:ec:ad:b7:0d:be:e8:df:e9:5c:bb:0b:bc:d2:b3:34:88:d2:
53:4d:52:c7:8a:c0:1a:fc:3f:76:4d:1a:a3:e5:10:fc:a8:79:
50:ce:48:59:75:17:a5:3a:cb:8e:c3:14:84:d6:a1:e4:c2:9f:
d0:da:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:30 2025 by rpki-client