Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: tkYDyjh3UsGK42VXl29D7cOJf79A4528g8rcmpIAAEU=
Subject key identifier: D8:3A:BF:21:2A:9C:D0:3A:27:2F:59:1F:40:08:93:B7:56:79:42:4D
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 0194BD4E8B093B1CD1AEB136F70BE11B35FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0900
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: OE8AcYBZV8JgE11P9bkOeXfcKhsYmmAgQ2CmFCrMKlI=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:09:3b:1c:d1:ae:b1:36:f7:0b:e1:1b:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=d83abf212a9cd03a272f591f400893b75679424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:02:ea:5a:74:b6:5b:5d:a4:23:58:bb:39:
e7:04:71:1c:e9:52:a5:94:7d:68:c7:27:73:f6:7a:
50:14:43:3c:75:88:e6:08:34:f9:ce:21:63:99:68:
7f:fa:d8:6b:c9:e1:6d:ed:07:c3:54:bb:3d:15:73:
98:39:4e:1e:3a:6a:4e:3e:1e:8a:a4:5b:bf:9b:82:
3c:e3:ad:d7:51:16:26:19:82:02:bb:65:29:19:15:
e6:b9:27:bc:df:d3:2a:e1:af:26:5e:05:46:ff:22:
95:7a:eb:25:3e:5a:74:be:ab:53:d4:47:41:28:94:
2e:89:59:d8:0b:7a:34:4a:7d:a5:84:33:53:b9:5d:
7a:73:23:73:08:75:18:8f:c3:ae:64:8a:cc:57:f6:
0d:d1:43:03:c5:ad:60:7c:50:3d:50:0c:c8:b3:04:
bc:08:ba:2e:6a:c4:0b:34:d5:ff:43:e1:c7:13:4f:
b3:a4:d1:f0:20:93:11:52:e1:d8:5e:f5:dc:29:6e:
ec:f0:ba:e6:e7:60:a4:9a:5e:f3:42:ea:be:47:08:
74:11:47:06:a0:1c:a7:d0:83:a0:7f:4b:0d:12:b8:
5c:1c:7a:35:49:d1:0c:b8:2f:04:13:c8:2b:50:d6:
23:88:a3:8e:1c:3d:6b:37:9d:80:99:1e:2c:a2:c3:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:BF:21:2A:9C:D0:3A:27:2F:59:1F:40:08:93:B7:56:79:42:4D
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:db:cb:d2:d6:0a:29:ef:32:53:07:4a:0b:8c:c0:42:d7:67:
62:c4:3f:83:e0:24:38:d6:e2:14:b4:61:d9:2f:ea:ba:b8:d4:
f1:0c:d8:05:61:9b:4a:4f:e2:53:07:77:39:9b:b6:d9:fd:21:
36:ba:73:83:1e:d3:ae:aa:a1:11:36:78:d7:d5:12:62:ac:4e:
85:b0:e5:65:cc:26:70:b2:40:2d:48:b9:4d:23:3a:23:f9:b6:
c5:de:62:87:7c:cf:c1:ac:9d:cc:11:b6:a7:f1:2d:97:f0:c6:
15:aa:46:0c:30:08:ad:3f:68:08:67:41:7d:b6:1d:cb:e6:b0:
ad:15:95:aa:d9:4f:14:67:90:69:cd:78:07:99:45:96:d6:d7:
b5:a5:08:3b:df:61:d8:b4:41:99:4c:04:e9:30:fc:c5:42:c4:
03:62:7c:cb:ac:f2:4b:6a:b3:1d:cc:0f:50:88:22:33:14:ae:
e1:88:35:1c:fd:aa:e9:9c:61:21:f3:65:65:44:95:ce:17:45:
95:f3:a4:35:c1:a3:0a:ea:b3:43:e3:5e:ad:e4:68:0f:de:13:
55:f9:53:61:71:1d:fc:cf:8c:20:17:6f:dd:66:a9:fa:1c:7d:
b2:9d:8a:e6:80:c8:88:b4:71:ed:9f:80:92:0f:99:5e:7f:0d:
d5:4d:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:30 2025 by rpki-client