Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: edlOxTyQSBZjgBuTghqEmsE49tVCqYFSQ2UVXSCSOXA=
Subject key identifier: B0:E5:8C:FA:E7:F5:36:73:68:9D:17:A4:5F:55:C9:C4:3C:34:9D:D5
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 0194BD4EBC6F5482F6DDB67726722F2299D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 095B
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: UtHU67qpGlTUrHtAp3d1fBbIAxB/tv/E90gSemCk7hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:6f:54:82:f6:dd:b6:77:26:72:2f:22:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=b0e58cfae7f53673689d17a45f55c9c43c349dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:dd:e8:4e:04:2c:4a:5c:df:3e:19:07:bf:
f8:16:dc:96:64:1e:58:01:01:0d:fb:3c:ee:01:cd:
b8:00:84:6f:e7:21:0c:eb:a1:1e:8b:08:61:93:52:
c2:05:1f:9d:bb:b6:76:f3:8b:61:57:66:63:d2:f8:
b1:4f:a6:3a:b5:9e:08:93:5a:26:89:f7:57:0d:9f:
e6:91:f2:8b:f5:58:c3:32:be:6b:ec:04:11:5b:75:
b9:d4:77:f1:3b:ba:21:74:6d:09:b0:78:19:01:fe:
f8:4e:26:0a:c1:65:0c:30:45:9f:0d:23:7f:95:1c:
c3:c5:4c:68:12:a4:d1:59:17:8f:ca:89:a3:f8:e3:
55:34:07:aa:3e:aa:99:d4:c0:4e:f9:ab:00:76:7f:
c3:72:ec:1b:f1:d1:49:cd:60:91:c9:23:fe:1a:24:
8f:e9:eb:90:f6:3d:2c:b7:15:cd:61:f7:4f:03:8e:
2f:d8:64:90:c7:e9:f1:0b:dc:76:46:5e:2c:b6:f2:
83:18:79:64:98:43:4c:47:70:29:45:13:4e:df:9c:
21:0c:ac:94:d8:7b:b3:1d:be:c6:de:af:25:4a:fc:
63:1a:2d:b3:f8:81:40:30:40:79:fb:3d:f9:8e:bd:
45:de:3c:b2:ea:a7:ea:e6:3a:53:9a:6a:1b:04:a5:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:8C:FA:E7:F5:36:73:68:9D:17:A4:5F:55:C9:C4:3C:34:9D:D5
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:f8:5a:f6:32:0e:ed:6f:a0:2c:f0:70:a7:2c:28:f0:ae:
db:06:0b:b8:d5:ce:e5:10:fa:db:c2:14:95:5a:5c:84:50:13:
3d:2e:9c:36:9b:f8:6b:ae:c7:80:db:b7:73:00:fc:a0:30:f2:
15:83:88:fd:93:22:ad:eb:ca:7f:a8:77:95:e0:ae:3e:78:87:
7c:74:ae:fe:99:2d:fe:15:4c:41:6f:e6:31:db:5c:2e:ad:96:
18:2f:23:cb:ff:92:26:a8:5c:29:81:78:0d:61:fa:4b:8b:c0:
d3:29:5e:46:93:17:16:5e:27:9f:63:a6:04:48:b8:43:69:03:
f6:b4:81:2b:3a:d4:37:b4:1b:60:0c:d2:b2:ce:a4:80:08:bb:
43:e9:94:fa:51:40:b8:c8:8e:e1:aa:6f:88:b9:07:80:c3:c7:
5c:e3:d9:c8:e7:35:c2:57:46:9c:c4:dc:de:d3:3b:a1:33:f3:
2b:09:c6:9f:65:63:d4:0a:c8:95:63:56:fb:c7:9b:0c:c4:1c:
e6:7c:1c:a0:b9:93:64:b2:b0:5b:73:4e:71:82:22:c3:17:6f:
64:a6:d1:d6:bd:35:66:8c:8a:25:fb:a1:fa:b1:c3:f6:f6:e4:
28:20:2d:60:11:3b:ae:a6:f3:48:3a:0f:49:8f:4b:1a:29:45:
ce:e3:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:17 2025 by rpki-client