Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: 4fuKGzab4Q4IueRU4NqBpYnvidczMNH+57ypOIUtqGI=
Subject key identifier: AF:E2:0E:E8:19:C2:0D:3B:EA:03:3F:6C:DA:3B:4A:BB:67:BD:D0:FC
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0194BC3BCBB1E5D3ADE99620A35B6C192050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 1185
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 4aD_diZcqz66cb-gRuWxY7oFFaE.roa (hash: QK/zRnnVk7Mczgmmt/LmV82yLkcxUeWcSJEu6zoorXU=)
2: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: pli6a5EmniNozQCHHQgQFb7Xi8VgojI6wuKs5KC6r80=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:b1:e5:d3:ad:e9:96:20:a3:5b:6c:19:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=afe20ee819c20d3bea033f6cda3b4abb67bdd0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:f5:a9:bd:9f:a0:54:44:60:e5:7f:1a:e9:
81:4d:f8:39:14:6c:10:c5:c5:5d:12:9f:2a:1d:08:
bd:79:ea:f9:4d:29:68:23:96:0d:de:c1:6c:33:4b:
11:b7:3f:2f:ee:ad:33:dc:2f:ca:a4:4a:37:96:e6:
2d:1c:46:45:4c:b1:bc:f0:c6:f6:8b:68:3b:3a:6f:
fb:e5:5e:85:b1:f6:90:a5:79:c8:13:79:a3:07:6b:
e6:7f:9f:92:da:81:ca:52:b8:ff:3c:bb:9b:0a:b8:
57:db:26:1c:07:3d:3d:8b:d7:11:c0:c4:23:92:af:
ab:35:12:56:37:b5:ce:8f:c9:34:b0:a9:d9:8b:6a:
83:01:74:70:6b:25:99:04:40:1e:73:6c:cf:90:a3:
4a:66:d7:4c:cf:3a:ba:53:24:3b:b7:20:49:81:50:
9a:53:95:33:c2:e4:91:01:e6:dc:3e:05:c9:fd:63:
54:20:d2:81:ad:a6:35:b5:8e:85:53:92:6a:e6:6d:
35:69:86:a3:6c:7a:1a:bc:20:36:b8:77:89:14:d9:
42:50:86:ae:e2:e2:d8:90:bb:56:2a:be:58:73:67:
ad:db:e4:18:9d:d2:5d:bc:12:4d:bd:86:c1:a5:20:
82:67:a9:da:e7:76:43:24:19:20:bc:eb:d0:53:10:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:0E:E8:19:C2:0D:3B:EA:03:3F:6C:DA:3B:4A:BB:67:BD:D0:FC
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c6:18:71:ba:50:7c:7e:91:db:8a:43:80:84:81:8c:b1:e0:
2e:fe:e8:04:50:b1:3f:b8:c9:48:69:79:1f:de:7c:d4:a2:98:
f1:41:2e:d7:f0:08:da:f2:aa:01:05:11:af:b2:04:52:35:42:
a0:62:66:8c:95:bc:27:8b:41:3d:3d:b4:b7:b3:4e:88:98:d8:
74:4e:46:e7:31:fc:d0:5f:7d:4f:9c:bd:73:79:19:78:61:a9:
8a:59:6d:71:a4:a0:ec:c1:e2:b0:69:d3:2b:3e:df:25:39:1e:
33:c2:dd:55:4f:90:e4:b3:8d:4b:50:8c:ad:10:8d:43:a4:a5:
b8:3a:d1:c9:79:09:13:b9:e7:04:a3:4e:21:20:45:a8:35:a5:
9d:de:55:c2:e4:67:b7:78:49:9e:9a:70:9b:2a:af:d0:87:c1:
55:62:23:f5:a0:dd:d9:ee:88:84:b7:01:d4:c9:99:71:20:04:
7d:59:f9:98:0c:c8:9f:c7:ef:5a:54:78:53:7c:be:32:98:23:
14:d3:11:24:d6:b8:24:99:e9:2a:80:92:f3:f7:1b:30:05:c1:
0d:18:a2:b4:99:21:3c:4d:3d:ce:d7:92:d3:b2:bc:56:8b:c2:
67:61:4a:e5:ad:b7:00:99:84:75:13:96:ec:69:3f:ac:33:b0:
ec:57:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client