Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: NYNkZctyM5KpAMdJj/ZlmPKPjiUzPt1Pejcd/QdIjuc=
Subject key identifier: 68:79:1F:D3:3D:91:58:BE:92:CA:9E:40:AB:E7:78:6B:8B:00:18:16
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0194BD4E5CF63BBEE8FA992772DB4CE0B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: QwH/fkupO34ZkH7/KO2u7XvmXLHtA5azvud7Mpszle4=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:f6:3b:be:e8:fa:99:27:72:db:4c:e0:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=68791fd33d9158be92ca9e40abe7786b8b001816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:ba:67:96:0a:3b:f3:da:5d:a9:b6:78:3c:
65:c6:e0:26:f9:ab:74:2e:11:9a:d3:ac:c3:c5:c5:
e4:0f:2a:53:89:66:25:10:f4:82:cb:9d:ed:5a:12:
be:1d:85:85:4e:46:7e:57:9e:69:6e:64:e1:3e:27:
18:6c:5c:a7:25:8f:ae:10:6e:34:cd:ce:9c:1e:f8:
53:4b:7e:67:08:2f:4f:70:9d:28:27:1e:b7:1b:d7:
b6:1c:35:6d:eb:46:6c:7d:4e:a2:be:ab:0f:76:e8:
0c:24:b9:14:64:63:26:49:6f:89:48:2c:78:df:43:
fe:6f:2f:16:0b:21:fa:4f:81:a1:85:4e:34:bd:71:
d6:52:ba:33:f8:7f:bb:9f:89:ea:c6:5e:40:97:a7:
5c:76:4e:0d:66:6e:56:41:e5:cf:71:15:d1:9e:28:
e3:c1:7d:58:db:97:fc:3f:c5:ab:cf:68:bf:3e:d0:
eb:b3:bf:7d:72:cf:a0:6d:06:eb:36:88:21:e5:fb:
e9:f2:bc:32:e3:d6:10:91:22:85:b3:78:4c:98:cf:
12:e9:fa:81:85:bf:30:d8:01:c0:e6:bd:4e:6d:e2:
63:ba:a1:c9:18:3c:9b:55:d0:d7:39:88:99:e5:06:
03:57:87:a5:4a:ca:f1:f7:5e:18:79:02:23:95:6f:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:1F:D3:3D:91:58:BE:92:CA:9E:40:AB:E7:78:6B:8B:00:18:16
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ed:c8:88:7d:19:0e:05:6c:16:fb:d9:94:9b:a7:18:a3:88:
1c:60:2e:3b:43:bb:20:ee:88:a4:f6:8d:f4:0a:92:7a:56:1f:
02:84:d9:f7:5f:7c:cc:8f:18:ae:33:62:8a:50:77:fb:02:16:
ec:f8:3b:77:03:99:7c:25:d0:56:a8:b2:ab:6c:8b:73:cf:b2:
fb:3e:df:a9:e9:89:f0:dc:ac:f6:59:73:6c:5c:bc:7a:9b:f0:
0d:09:9a:be:11:22:27:4c:4f:62:54:95:99:34:6f:45:9c:71:
17:1d:51:c2:79:02:48:97:47:d9:2b:ea:86:02:4d:fc:a7:5b:
38:98:8c:13:96:a5:73:9d:92:8a:2f:cc:c8:f9:0d:cd:f2:b9:
7e:d4:5a:c1:78:23:0e:8d:61:75:33:66:51:26:b7:cc:4c:2c:
af:f1:7a:ab:3a:70:e6:1f:02:6e:0c:49:bb:48:f4:4b:79:27:
a7:63:be:c9:89:40:7d:18:2c:ea:07:34:b5:c5:6e:b0:ec:fe:
ee:5f:42:37:78:ba:fa:73:dc:33:f6:8f:15:c5:1c:85:e8:23:
f7:2d:ec:44:5b:d5:5c:75:67:c3:89:7d:07:24:fe:5f:63:6d:
74:a0:5f:06:5b:57:c0:a9:07:84:e8:71:51:27:3a:34:59:ac:
4c:30:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:54 2025 by rpki-client