Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: 0vgZYiSTq0CNXcuQuLH6tvFWV2D4Cst+ZzXcZ8znh4s=
Subject key identifier: 36:70:A1:91:E2:4C:92:31:CB:37:65:D9:AF:44:0D:B5:59:F6:1B:A0
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 0194BD852B42EFE4B883E1DDE7C6A1934E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0953
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: Yj+mRr4N23KyP0cWWwuLg/Oogko/d4Xfe2Yfo7J/6hk=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:42:ef:e4:b8:83:e1:dd:e7:c6:a1:93:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=3670a191e24c9231cb3765d9af440db559f61ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:42:93:dc:c0:e6:91:23:39:e8:20:7f:bc:
9e:c0:c8:f0:6c:96:51:4d:55:55:0b:4c:cb:97:ba:
ec:c3:a9:88:10:42:7d:d3:c8:b5:90:ec:22:03:41:
c1:09:c0:96:34:01:0f:d8:c9:8d:bb:23:46:5a:d3:
6e:bc:26:48:6d:4a:b0:31:60:42:c1:24:77:0f:69:
76:b6:13:1b:0c:12:61:99:b3:e1:c7:15:cb:3a:48:
03:5a:83:ec:ed:84:01:51:ec:fe:f8:e1:cc:dd:a7:
31:30:fd:dc:02:97:da:46:92:1b:d9:11:6f:96:88:
c5:22:b7:cb:c4:b6:40:b7:0d:95:d5:01:f9:eb:c5:
03:01:b8:0b:0f:bd:ce:c1:50:18:4d:35:12:ca:61:
ea:54:c7:3f:e9:24:a0:b0:8e:9e:74:f8:6f:91:bc:
8e:37:7b:70:98:3a:2e:aa:0e:fb:3b:29:72:c1:c0:
c6:68:6f:5f:3b:b3:9b:32:a4:89:41:ff:dc:88:78:
5d:de:3e:b6:a2:9a:23:c9:af:f2:25:db:da:29:95:
2e:6b:70:8e:66:42:b3:15:63:dc:40:26:e6:e5:3e:
09:2f:e9:8b:42:41:bc:ed:a6:d3:52:21:36:4f:96:
cc:55:53:71:07:e0:23:67:13:a3:1f:95:fc:4c:c8:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:A1:91:E2:4C:92:31:CB:37:65:D9:AF:44:0D:B5:59:F6:1B:A0
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:b6:40:f8:2b:22:bf:5b:1e:ee:b2:92:41:56:43:d5:27:
d0:6e:67:7e:c0:8a:fe:df:66:e2:1a:7b:dd:18:a8:db:a0:f0:
b6:07:a3:e7:d5:fa:26:e9:f0:cf:be:71:f8:91:e0:1e:95:2b:
b2:27:34:b0:4d:ac:b8:10:23:1b:ce:33:48:8f:9b:41:99:82:
7b:ee:3a:49:e9:eb:1b:d9:53:b0:96:c6:cf:58:27:4a:33:9f:
ba:ee:e8:c1:a0:2c:4b:41:8c:63:a1:be:e7:b3:9e:87:4c:bb:
bb:6d:52:65:2b:44:26:2e:05:e3:ae:19:b0:58:89:98:73:87:
5f:76:13:7f:b0:22:bb:13:87:8b:80:7f:a6:61:4c:9e:77:aa:
12:5b:84:fe:d5:94:36:67:12:88:5c:88:c7:af:a7:11:25:01:
63:f9:ee:fb:ee:2b:6e:96:cc:cc:8c:2a:27:5a:66:2f:70:ec:
e0:0c:bc:d5:35:c5:bd:bf:8f:3a:8b:29:d8:0a:86:56:e6:cd:
7e:cd:a2:5d:ad:2f:d4:96:88:03:ba:7b:50:e7:36:a5:db:48:
cb:68:ce:a2:c6:75:07:a8:3a:be:a7:5a:86:6a:66:31:86:90:
e0:49:61:b9:be:3a:ca:f5:4b:da:0e:51:88:33:98:b3:3a:22:
29:8e:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:30 2025 by rpki-client