Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: uAQLP+pM36lzud4uXarfrrSOnY1Q714UY51zXFzwZ68=
Subject key identifier: 9C:F9:8B:6D:71:BE:43:E7:9E:12:5F:CD:72:28:40:65:38:26:7D:31
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 0194BBCE5154221363AD9E93B1E8B2B2C436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 028E
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: +lkfBpxFoQjHo1ucyeO45mMTg8TWWK/g0Rr6LtVSYnk=)
2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:54:22:13:63:ad:9e:93:b1:e8:b2:b2:c4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=9cf98b6d71be43e79e125fcd7228406538267d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:bf:16:ae:f3:46:2a:47:3f:b4:2e:f8:9f:
67:4e:06:d5:4a:65:d3:98:1b:d5:f8:9f:8d:33:c9:
40:09:83:1b:50:ee:ad:5a:a9:f5:4e:74:5a:68:d9:
2d:ce:2e:c9:7a:32:77:48:c2:3f:ed:69:af:79:66:
71:1f:94:30:8c:cc:49:a0:3e:fe:5f:ff:69:d0:b5:
4a:ba:05:cc:6a:44:21:2c:5e:b1:5b:96:38:7b:75:
27:f9:25:3e:01:58:a0:c9:13:f8:17:95:09:33:65:
ed:cf:a1:0a:92:82:3c:f6:e0:d8:2a:35:f3:de:27:
6e:88:73:80:6f:bd:d4:c2:88:20:4b:1d:bc:b4:31:
16:83:e3:5a:65:bf:f3:0b:61:47:54:a9:aa:c6:80:
a2:f9:f9:57:36:d6:22:e9:ce:f3:de:7e:e0:43:f5:
29:6b:29:5b:e8:55:a5:89:03:73:4d:26:bc:ea:f4:
d8:a2:84:94:60:44:07:ef:6f:01:82:f8:26:4d:9b:
73:58:cf:72:2d:e9:13:4d:39:21:6d:92:5b:28:ff:
43:c4:28:d3:55:e4:66:ab:7b:44:09:54:9e:08:b9:
11:de:25:8e:b1:42:3e:2e:96:be:6f:df:88:fc:9e:
56:25:77:29:5f:be:eb:d2:e7:32:e0:ba:41:d3:50:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:8B:6D:71:BE:43:E7:9E:12:5F:CD:72:28:40:65:38:26:7D:31
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5d:31:3f:18:cf:22:eb:64:fa:fa:b8:77:69:f5:e6:39:8b:
3e:fe:40:31:43:2b:4e:30:71:83:97:c0:7c:e0:93:16:8e:6d:
b5:00:56:21:b9:8d:86:5c:71:0e:ce:f0:55:b6:81:c7:da:be:
9b:af:b2:1c:c9:55:d1:8d:5d:78:be:ba:95:b7:38:d4:61:f5:
df:7d:22:ef:6f:3b:c9:39:0a:82:48:68:51:6c:d6:98:15:52:
96:55:77:12:c2:48:43:21:fd:dd:49:e0:c4:df:1d:e3:2b:33:
a5:7f:1a:22:cf:0f:97:37:c9:89:31:23:ab:81:1b:eb:1f:17:
a4:0f:e7:32:bf:cb:3e:cf:0b:85:71:b4:a5:48:13:a7:d4:71:
02:f4:14:90:d9:67:c6:3f:b5:a6:50:13:c7:09:46:44:ba:54:
5c:96:ac:70:3a:d1:13:87:a4:ae:86:c5:1e:9a:8a:e1:6b:22:
cc:92:55:f2:af:cf:cb:b1:c5:03:87:cb:ac:d9:44:ef:e2:53:
c2:e9:6d:05:d2:35:9c:19:4d:00:c9:83:d0:71:52:04:83:10:
f4:f2:56:74:b7:07:db:e1:ce:9b:61:c4:9d:e8:e6:b7:c4:e0:
5a:ad:d5:df:4a:37:3b:86:3e:17:db:4c:c6:ab:e8:ad:d5:8e:
be:79:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client