Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: XtK4J05vuQ4x1PzPrOJpWhitROW6BV24CSbztBsGs2A=
Subject key identifier: 0F:6C:2E:46:71:68:14:17:FC:43:C4:B5:4C:6C:14:85:83:3F:26:3A
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 0194BC04EE2FA9BF69219E98230FE619D33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: BB
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: T4JES5/mnb/hP3q8z359WzXDKfMBIf9GpaV0zGpN7kE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:2f:a9:bf:69:21:9e:98:23:0f:e6:19:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=0f6c2e4671681417fc43c4b54c6c1485833f263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:7a:7a:b7:4d:51:17:0f:ab:35:48:52:76:
ba:d6:ee:3f:41:e1:ba:16:78:10:cd:20:e4:e3:65:
c7:05:4a:6c:f7:e5:b3:0b:be:31:75:f0:bc:09:ad:
20:cc:4a:f2:e5:0a:cc:22:a6:ff:1d:98:47:e6:f5:
bc:66:bc:4e:fa:d6:47:bf:5a:b2:e5:c2:d3:fa:0a:
ce:8b:50:98:8a:a8:d9:6d:ef:ab:62:52:12:14:5f:
72:18:34:aa:83:07:1d:6c:37:07:76:cc:71:5e:2e:
8e:08:b5:68:c9:4b:e4:98:81:60:60:53:12:f3:f0:
3e:b3:1c:6d:0a:69:80:a9:f1:3f:8b:21:27:ce:fc:
5b:56:10:f3:18:e2:d6:55:16:62:f0:9d:98:f8:32:
f1:e1:62:75:94:77:65:cd:4c:44:37:9c:82:7c:3c:
77:c2:21:3f:7c:b3:12:ea:a8:f4:10:d5:7d:16:f7:
e0:02:8e:8b:e5:05:80:2d:9c:c8:27:46:41:32:62:
d2:90:6a:80:f9:ff:61:e3:0c:f6:72:b4:73:d1:52:
fa:cb:81:db:5a:a4:a6:ed:57:05:f5:a9:df:b6:c0:
21:82:34:b0:67:fa:88:84:aa:4d:ec:b9:06:1e:28:
21:d3:3c:93:ca:01:85:8d:b8:d4:97:6e:af:05:84:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:2E:46:71:68:14:17:FC:43:C4:B5:4C:6C:14:85:83:3F:26:3A
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:42:62:8f:4a:a6:e4:cc:ed:af:b1:13:2c:1a:64:b8:c7:17:
b5:a9:4f:73:02:5b:44:27:5f:6a:5e:de:84:57:53:22:92:a8:
16:32:0e:8b:36:a0:9e:b6:c4:d5:e6:6f:ce:f6:99:d2:c1:0b:
b3:cc:ee:72:1f:36:bd:76:7c:b6:02:0f:34:0b:5e:02:23:f1:
3a:ea:d9:95:d8:bd:ad:1a:15:8c:2f:73:ca:81:24:a6:aa:5a:
af:4b:31:cd:67:80:42:b7:6e:06:75:f3:a8:6d:80:b4:0e:70:
81:d0:b8:cd:e3:0e:04:f3:27:dc:e5:26:b3:e7:29:f5:3b:6d:
e5:1e:36:24:71:00:c6:46:fe:5e:f5:7f:25:2c:84:a1:fc:f5:
0e:05:62:dd:18:5d:e4:02:73:d1:53:15:e9:13:56:55:67:d6:
5e:9e:46:aa:30:58:4a:b5:c3:b6:b8:68:68:5b:05:ac:10:b1:
ec:dd:f7:cb:51:79:1b:0c:16:31:8b:c8:40:f2:75:04:06:ff:
ee:b0:f7:29:b3:77:d1:99:4e:f3:51:42:fb:4a:4d:89:a3:93:
a8:4b:90:00:97:0e:f9:7d:58:22:6d:0c:d5:23:dd:d0:6d:b3:
a7:85:8f:90:69:b2:02:c6:fd:24:b9:aa:14:25:d6:69:69:8d:
5f:ce:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:28 2025 by rpki-client