Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: 1SkCMos8eF7WUnUh14knSbkhsBRD93ttndCkAauXwI4=
Subject key identifier: 69:46:6F:0F:A8:0B:D9:E4:32:90:4A:C7:5F:57:8D:DE:2A:8B:E4:65
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 0194BCAA3910759419772A61BED1D879FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 091C
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: BBcaCdlYwQErBh5LH03qnYf2X48JPqIM3pvQqnRS/wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:10:75:94:19:77:2a:61:be:d1:d8:79:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=69466f0fa80bd9e432904ac75f578dde2a8be465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:39:1e:ac:79:ff:2d:11:3a:68:79:04:ed:
56:98:95:b0:05:9d:de:09:92:58:68:d6:9a:67:b8:
ad:86:76:90:41:1b:d1:b8:91:09:4d:38:6d:9b:de:
d7:4c:09:46:71:ee:66:84:90:f4:29:80:66:21:dd:
ed:10:52:f0:b0:4c:14:d7:d1:a0:57:3e:75:41:42:
98:31:36:ef:aa:41:f7:df:07:fc:fe:8b:bd:57:de:
85:69:0d:9a:84:b3:85:e5:d1:bf:bc:9b:5b:62:17:
cc:cf:24:8b:57:ca:55:ae:21:eb:c7:b9:38:d1:45:
41:02:63:43:09:49:5a:15:45:71:00:53:76:d5:6d:
ee:34:84:37:b9:da:3a:e8:f6:c1:de:e5:77:f7:e0:
33:39:dd:92:4e:56:f8:c6:51:a3:bb:47:f6:f0:2c:
60:53:a8:53:85:89:99:b9:6d:4b:d6:4d:4d:6e:15:
8a:8a:ce:50:5d:2c:f2:3e:2f:ce:1f:28:d5:20:f8:
96:36:d5:8c:11:4b:e5:18:99:42:e2:cb:75:e7:54:
3b:a4:24:76:8f:ba:0e:44:0d:db:66:bc:11:5c:9e:
b1:15:d0:c1:dd:70:ec:06:64:3d:ab:c5:34:c0:4f:
d8:1a:29:cc:65:6b:da:a0:23:48:87:e2:be:e6:0c:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:6F:0F:A8:0B:D9:E4:32:90:4A:C7:5F:57:8D:DE:2A:8B:E4:65
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:7b:1b:c0:fc:08:a0:18:29:07:49:fa:50:64:d1:c5:f7:
d4:f1:9d:cd:a1:b2:d8:d3:60:5c:51:33:75:80:33:e9:9b:d8:
8c:3c:03:35:c5:f4:01:1c:09:e7:a1:dc:c0:9e:d7:11:f3:11:
74:f7:0b:51:8a:b4:62:3f:5a:52:ad:07:10:4d:29:89:45:59:
96:53:57:69:e0:66:00:f1:37:d9:71:fd:0d:cb:cd:db:a6:d8:
1d:58:29:31:ce:93:b6:7f:b1:e4:81:44:2b:87:ce:74:4b:8a:
89:6b:51:fd:22:32:0d:38:96:c5:7e:59:0b:83:9c:f2:14:b6:
8a:f4:1b:98:83:15:5c:db:c4:1c:fb:b1:f0:c8:e1:f8:2c:4b:
bd:41:2d:0e:99:38:13:cd:0e:7c:b8:2f:08:23:d7:09:9c:7e:
6c:c8:49:3d:2e:34:e4:b9:23:68:9b:84:cd:a4:1e:72:fe:8a:
f2:e6:8b:9c:e9:a6:cd:da:17:18:87:c2:77:58:97:1d:59:1c:
48:b5:2e:a5:1c:be:20:b9:8a:28:38:35:5b:78:09:2e:d2:92:
bb:3d:96:fc:a4:06:4e:77:3e:d9:ce:f7:5c:7e:20:61:5a:64:
d7:fb:08:0c:2a:dd:30:0c:dd:dd:42:e2:7d:d9:b4:ef:4d:4b:
4a:aa:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:23 2025 by rpki-client