Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: LIT01EFqSOywy7l8BVwn1+RPNpGZB0pReMPfsRLtcmw=
Subject key identifier: 5B:61:7E:66:22:42:17:95:5B:BF:1E:A1:F4:B3:D6:BC:8B:15:13:AF
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 0194BC052151567AA182DDD8B6389F6D7B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1351
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: IVhr5cv0HdFQtS0sbmVStKQWlOQX3XV3cxa8nvGGEYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:51:56:7a:a1:82:dd:d8:b6:38:9f:6d:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=5b617e66224217955bbf1ea1f4b3d6bc8b1513af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:d2:72:64:fb:8f:f5:00:32:be:be:42:27:
28:0b:2c:a8:77:14:d6:b9:46:87:ac:74:4f:75:2f:
9e:c4:84:b9:45:25:3e:9e:d9:5a:e9:cc:06:64:ee:
41:13:6e:b4:f2:60:99:11:06:0f:d2:da:24:c5:b6:
de:96:73:67:08:f7:7b:9b:4b:b7:b9:45:29:9f:c6:
9f:52:47:14:94:f0:ce:1d:70:91:75:1a:16:2b:86:
df:be:6c:a7:98:82:6d:21:b3:7b:96:99:07:12:07:
ed:c9:78:79:8f:fe:ab:92:52:2e:8b:9f:f5:49:8a:
c1:47:76:9f:97:77:01:04:5d:ee:9e:53:88:e5:60:
dd:44:39:10:ab:af:53:03:26:03:ff:06:63:0b:10:
f6:0f:53:fa:7f:76:22:72:19:4a:e7:7a:a9:54:aa:
52:29:d7:fe:c5:a9:a7:bc:4e:8e:a6:c1:4d:c7:06:
df:f7:10:04:6b:56:e0:07:53:b8:33:e0:94:53:bb:
c8:59:8b:6b:13:46:12:86:d8:56:d0:cc:72:25:ee:
1f:d2:e0:b4:3a:8e:14:89:e8:11:2a:18:d5:c7:01:
29:9e:e4:fb:d1:cb:be:39:42:c6:5b:f1:00:74:3f:
06:54:31:a2:8e:dc:46:ce:b2:ce:b2:51:64:a5:17:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:7E:66:22:42:17:95:5B:BF:1E:A1:F4:B3:D6:BC:8B:15:13:AF
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:fd:cc:fd:9a:df:51:5d:62:87:42:58:67:21:c4:8d:93:
1c:1c:f8:63:bd:d5:f2:a1:94:fe:8f:89:82:79:d8:26:dd:8c:
c1:c6:ce:03:a0:d0:ec:81:cd:35:2e:6b:fc:75:81:98:03:31:
4c:78:00:0f:3a:8d:8d:61:34:f7:20:51:90:21:27:82:fe:91:
b7:ab:57:e9:fb:df:da:ef:17:80:7e:7c:39:e2:a0:ff:ce:8e:
16:3e:52:dd:74:05:9d:64:a5:d6:18:df:19:34:34:1c:93:4b:
82:ab:f6:32:35:26:d4:31:88:dc:c5:f9:75:6b:f6:ea:b9:48:
6a:7c:0e:8c:36:99:d1:52:57:30:b7:7a:37:4c:15:52:0f:71:
f1:d6:b5:dd:67:4c:80:b5:87:4c:3c:a4:ef:b1:77:01:92:4f:
bd:f6:9c:78:16:79:9d:59:5f:c7:8b:c3:c0:cb:8b:24:42:05:
e6:e8:2a:33:f4:33:dc:93:0a:53:5d:59:e6:9a:58:ed:92:ee:
e5:fe:3c:25:62:94:85:a8:a6:4b:62:98:b2:c1:bf:d9:96:1a:
67:53:6d:0a:99:02:e8:88:5f:ed:d2:d0:78:fd:14:6b:b4:61:
84:fc:d3:68:ff:8f:00:93:07:be:78:d5:76:66:72:81:77:4c:
6d:19:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:51:10 2025 by rpki-client