Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: ISf8qEksEQdM+N5x8WPC4bwE2nZ8GhU27ZU6Wh5b7AQ=
Subject key identifier: 6B:D8:2C:D7:E5:AB:DF:5B:29:63:6C:5D:40:C9:8F:F8:C0:77:15:82
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 0194BBCDF65A3685C66E6DEEF3CFD717345F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0B38
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: 4Wp5cKkLq/CsA7ucvBhUEJdAGqOoSnNMypfGNeUNFyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f6:5a:36:85:c6:6e:6d:ee:f3:cf:d7:17:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=6bd82cd7e5abdf5b29636c5d40c98ff8c0771582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:b4:6a:86:16:5f:19:98:a7:aa:0e:14:d0:
b4:7a:d4:85:fb:8f:52:3f:4a:3a:a6:64:c0:e2:e5:
ad:5e:c5:ff:5b:40:4f:a6:f5:04:4c:09:e1:e4:5e:
6d:89:84:1d:42:36:2a:a4:95:da:60:31:8e:d1:ea:
1c:64:e4:ab:21:97:a2:81:db:6b:66:08:a4:57:5d:
a8:28:20:7e:00:50:da:d3:94:a9:cc:b4:b2:15:e1:
a0:7f:8d:95:3c:08:aa:ef:f5:6b:c7:6b:a5:f8:a4:
db:a9:d7:6c:f7:72:68:5a:a9:00:63:85:96:d5:79:
d4:04:91:59:65:96:a3:c2:46:b2:0d:c3:a1:1e:51:
82:21:d4:3c:64:de:9c:5d:f1:af:0d:eb:4c:14:c8:
8a:dd:f7:f5:00:d3:c3:82:3c:e1:e1:a4:30:99:e2:
65:8c:78:1d:30:6e:5a:7b:a7:b0:67:a3:ca:ab:7d:
91:19:10:f9:2b:2b:19:9c:32:06:a5:3c:0e:25:fc:
ad:5c:f4:f4:9b:11:71:c3:64:e7:27:fe:3d:93:d5:
25:af:5b:2f:34:f5:c8:8f:4a:6c:b5:fa:41:1f:f0:
ed:5b:05:02:c7:ed:39:81:03:90:99:2c:81:ad:ea:
14:03:1a:42:28:59:cf:cc:8f:bc:1f:43:5e:e8:db:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:2C:D7:E5:AB:DF:5B:29:63:6C:5D:40:C9:8F:F8:C0:77:15:82
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:ff:94:d0:55:90:6a:ea:95:1d:5e:68:0d:32:d9:aa:7c:
8d:81:71:26:c5:0e:39:72:e7:5b:1c:fc:23:f4:e8:28:be:34:
40:2a:e0:54:bb:f1:5c:8e:3f:7a:24:59:4b:8a:d0:b8:f5:74:
79:86:33:07:f8:f9:4f:a4:bb:b0:7a:ef:a8:0f:f9:f3:99:79:
f6:0c:41:0b:df:fa:0a:0c:37:0e:24:5f:56:ac:7c:c3:b0:4a:
b4:2c:18:d2:e0:89:5e:4d:10:67:c6:e4:80:fb:df:81:e1:f4:
38:02:1a:4c:be:2b:b3:7f:36:1e:af:fb:75:5d:f1:aa:d8:3c:
72:53:de:22:66:e9:ce:e3:66:29:f1:85:9e:72:a4:7b:0d:fa:
a2:f5:a5:43:3d:d0:5f:90:80:44:64:43:c7:b4:9a:b3:f7:da:
43:1a:8f:27:c7:7c:bc:9a:ca:08:1e:c8:5d:5a:f8:bf:6f:b9:
f1:c4:38:0e:8d:48:4d:79:63:76:37:28:c0:76:c9:bc:eb:37:
0a:c9:a5:39:48:e1:51:30:39:f7:2f:d3:42:77:81:93:b9:6d:
4c:30:cb:03:67:9d:c0:c8:04:b3:93:39:f0:0a:17:5e:05:53:
45:44:ee:a8:e6:e1:d1:df:5c:02:e9:15:28:46:16:38:2a:38:
37:3c:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:56 2025 by rpki-client