Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: b9v6odB6UvDc2nNRneIJHGYxmx4Zh/UfVtwsNB9zkvw=
Subject key identifier: C0:16:52:90:DC:51:63:3A:BE:43:8D:55:A6:80:25:C2:A3:EB:90:A7
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0194BD4EB9C8DDFB3571EC87CA750E43E13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: WCPDccBSJK8+KAmvf1OVGLKuw2nXqXTnpwL/BxMBCKA=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:c8:dd:fb:35:71:ec:87:ca:75:0e:43:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=c0165290dc51633abe438d55a68025c2a3eb90a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:d9:96:b9:8c:25:96:8f:61:ba:5b:d9:e2:
47:35:9a:e6:60:eb:31:eb:4d:00:00:f2:57:4f:a0:
be:7b:30:59:c8:2d:20:1b:2e:83:27:60:e7:de:af:
8c:0e:af:ae:51:77:76:06:da:24:90:cd:79:4e:41:
c3:5e:51:3c:81:46:95:01:97:2c:51:b5:b0:f3:58:
7c:13:18:19:82:bf:67:27:e4:f0:b7:c4:0e:52:2d:
c5:14:d0:37:41:b4:fa:3d:4c:89:a3:dc:6f:1f:c8:
0b:d8:ad:ad:20:5d:d9:da:11:73:f8:51:3c:07:dc:
06:8b:43:94:ba:3d:ba:b9:5c:9d:43:f3:9a:3e:ef:
35:97:bf:69:b6:bb:04:db:bb:5b:68:c7:46:3d:85:
10:d5:d7:30:4a:54:a7:d5:de:47:7f:4e:ad:b8:b3:
ae:bd:93:83:1f:73:08:eb:c9:e8:d4:e6:04:d8:d8:
48:07:3c:b4:6e:d6:60:d4:17:31:a0:24:15:5a:ef:
64:45:a0:65:cc:17:82:4c:0b:52:c9:57:51:20:af:
f1:70:a3:88:12:80:0e:bd:5c:5b:46:a3:fc:b4:0e:
21:dc:81:71:fd:13:4b:14:2c:2b:28:58:c6:73:4b:
2a:bd:ab:b4:4e:5b:e8:14:40:25:e3:b4:19:c5:fa:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:52:90:DC:51:63:3A:BE:43:8D:55:A6:80:25:C2:A3:EB:90:A7
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b6:30:6d:78:ef:6a:6c:1c:97:04:14:95:7a:6a:55:2c:2f:
6c:be:b2:8f:51:93:fa:52:1f:c1:61:fe:90:0d:31:d5:d7:81:
89:fc:aa:ea:59:58:db:e9:4e:6e:7b:05:a6:1d:c3:40:0f:8e:
0a:c3:24:72:76:7f:62:25:39:fe:dd:69:c0:7c:3b:5e:93:96:
97:15:67:e4:a9:3a:b0:9d:4b:01:f6:70:5c:d7:80:be:61:d4:
e0:23:46:1f:10:04:74:92:9d:8d:44:8d:bb:a2:ce:6e:06:63:
12:a0:a5:1e:b7:91:c3:ae:f3:52:b1:2a:a1:4b:f7:63:03:07:
01:db:f4:0b:9c:f3:02:3b:70:86:70:4e:43:75:fe:15:c0:d4:
e3:b9:3c:25:2c:47:10:f5:e5:46:51:0c:55:37:ee:8a:df:bb:
68:2d:de:69:72:02:ff:be:dc:9a:c9:af:e5:2e:1e:55:c3:91:
0b:66:ba:fc:0a:5d:4b:06:98:f5:80:f1:e7:e1:1d:1b:9f:e1:
77:af:ab:ad:d3:03:9f:54:7c:d5:41:33:95:c6:df:c9:f0:63:
15:4c:4b:b4:2d:28:9a:04:f9:f9:ed:8c:96:f1:b6:9b:0c:3b:
62:d3:00:ea:c6:0c:d6:8a:25:7d:1a:c8:13:94:70:6a:ef:b4:
ae:d3:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:22 2025 by rpki-client