Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: 9gHoCZDfiy71zgnvhdYMgLTv1oR+S73h5DCrcBO02yE=
Subject key identifier: 73:C0:6F:CD:E4:93:CC:30:EF:B7:74:FA:A3:63:8E:8B:30:3A:AE:38
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 0194BCAA05CA72651193D47E0DCDC000ED8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: h7ceOvuC6W3/TI1foBmqeX5zq8hd3w02s1NRq7C30UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:ca:72:65:11:93:d4:7e:0d:cd:c0:00:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=73c06fcde493cc30efb774faa3638e8b303aae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:1a:69:cb:71:01:b8:31:9b:b7:31:a2:15:
f5:03:8e:0c:c4:f8:07:89:7a:c9:b5:7d:38:bb:07:
8a:52:77:3a:77:2e:c9:34:f1:b4:37:b9:ad:f2:6c:
e6:48:27:f6:4e:38:ee:2a:da:2c:2e:3f:fb:10:51:
09:c9:ed:53:cd:5b:1d:60:53:a8:b9:4c:14:c2:63:
88:28:f1:f6:7d:31:15:96:6c:ac:f3:e0:25:b1:b2:
29:4a:d9:db:1a:8d:35:88:d1:c3:7e:bf:84:65:9f:
be:e1:8f:1c:77:51:fd:4e:90:60:27:67:43:60:09:
a1:43:62:9a:92:c6:27:7b:20:55:57:e9:00:4e:05:
41:4a:04:48:fd:43:60:4d:68:22:4e:5b:ba:b1:80:
86:9c:ca:94:c0:c5:d1:7c:5a:0d:74:d2:ec:be:94:
7b:61:cc:e4:34:d9:5c:41:dd:f4:8b:25:d2:40:c8:
38:65:2a:da:c1:69:86:94:02:29:5f:ad:8f:da:02:
8a:bb:87:fb:4c:65:fe:da:2f:d6:ed:77:27:e9:f1:
46:71:e2:c0:0a:6f:b0:6b:a2:1e:f2:7e:c7:1f:7c:
ee:c3:b1:e0:3a:7f:df:d0:dc:7a:d9:16:8f:33:fc:
a4:fd:ea:ce:72:40:58:fc:3e:4d:dd:91:0c:a9:05:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:6F:CD:E4:93:CC:30:EF:B7:74:FA:A3:63:8E:8B:30:3A:AE:38
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e4:a0:74:e3:e2:65:a7:d5:f7:90:73:f6:06:da:8c:8d:26:
51:a9:6b:65:ef:d4:ea:93:36:ee:c4:ff:ae:a0:8f:61:54:c7:
6c:ea:65:88:53:60:b6:a7:8c:10:73:84:28:72:f1:2f:a0:cf:
51:97:72:45:a7:f1:a5:ee:3a:0b:6b:69:aa:7e:e5:b4:b7:84:
b3:cb:1e:9d:30:7b:bf:20:32:b5:c4:11:d9:65:4f:99:58:d1:
55:9c:60:4b:5a:19:a3:2e:3a:a9:6e:2a:54:4b:67:26:8c:8a:
0c:1b:f5:46:aa:4a:4f:7f:c0:19:44:30:1c:d0:d7:f1:ff:a8:
44:e7:ca:19:58:83:0d:18:93:97:7a:94:c8:c5:71:f2:88:e2:
47:34:1b:dd:87:3d:5c:6f:ba:e9:b8:3f:c5:ee:6c:53:c1:d3:
82:f9:b4:5a:f3:02:82:85:ac:f8:f5:4a:75:3c:9d:1e:9a:25:
b8:60:f5:b0:90:4d:01:2d:16:6a:1d:71:14:ff:09:c1:b2:67:
b5:48:cb:1a:e2:8b:20:bb:a9:ab:be:dd:83:c7:45:c2:e3:3b:
54:e3:23:c2:eb:a4:de:3c:5e:77:12:5e:d4:c6:a6:3e:2e:a1:
17:1d:22:be:5b:cf:bd:c2:ed:ba:25:c5:5c:38:11:dd:ad:f1:
3b:9a:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:20 2025 by rpki-client