Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: zKywIG3wXgQ2FuHAXNW5WBBMIzvDHNEQT8mPk189MJE=
Subject key identifier: 85:46:1E:A3:71:A1:35:30:06:90:12:AC:1A:06:45:69:F5:B5:96:D2
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 0194BC727CE3D26AE99FFCA7D6D187BDA9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0866
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: z/1kwSwoKAVGKsRSPRQBfy/QtXDWOqOsucNuZVe7+Oc=)
2: _l8jrf0myWSyZHEusIZ6cmnQafE.roa (hash: gjseV+JPjv3tCrp8kMrsCJYjL6BjqLfcHlxvbKTgJog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:e3:d2:6a:e9:9f:fc:a7:d6:d1:87:bd:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=85461ea371a13530069012ac1a064569f5b596d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:09:a6:62:c6:b2:53:97:5b:b7:27:74:62:
ed:17:3d:63:e9:91:56:71:70:47:b4:d9:7f:8e:8d:
1f:cd:47:e7:3e:b9:eb:75:78:43:74:5d:fe:03:d2:
b2:f2:54:76:97:f4:03:5d:07:54:14:e1:1b:21:08:
f4:f5:8e:2a:be:63:93:3e:62:f1:54:bd:22:3d:6a:
f3:37:4c:ff:d2:f2:de:6f:9c:e8:14:a8:68:25:41:
6b:4f:23:ef:da:c0:01:a3:0c:19:ff:75:90:67:b8:
8b:14:c0:eb:b1:2c:30:50:42:bc:dd:ca:c1:b2:8a:
bc:6b:e6:b8:de:65:d3:38:22:bd:76:0f:1a:87:4b:
55:4e:7c:fb:f8:0d:ae:a9:0a:69:52:d5:12:1e:4a:
31:1f:5f:72:aa:ab:67:0b:b1:84:b0:c0:88:d7:88:
be:b6:f7:34:26:01:e0:6e:95:9c:1d:f5:29:c8:fd:
d6:f5:e1:d4:e3:75:67:36:15:1a:2a:1e:f2:7c:43:
c6:d4:25:e0:3e:33:65:fe:6d:75:df:78:29:33:c6:
19:14:fd:90:23:52:f1:90:03:f3:71:58:60:5b:c5:
cc:f6:90:cd:77:67:f3:b2:ad:a2:6d:50:dc:ae:fd:
98:5c:34:8a:58:02:b2:5a:c0:23:a6:30:ef:5d:1e:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:1E:A3:71:A1:35:30:06:90:12:AC:1A:06:45:69:F5:B5:96:D2
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:83:fb:5e:2f:c4:91:d2:56:ae:5b:79:1b:90:0d:d5:eb:2c:
d7:ed:b8:78:05:ec:21:b2:ef:60:18:02:a5:f2:b9:45:bb:fd:
bb:f0:16:07:9d:89:1e:c2:40:55:31:1d:5f:95:64:e7:bd:20:
10:80:ed:0f:59:90:7b:5a:63:e0:9f:22:f0:50:e8:78:b6:9b:
fb:55:cc:31:e4:a9:ea:ea:be:3e:cd:02:ff:88:ff:57:55:1b:
1f:f7:39:22:a5:77:e1:5f:47:d9:3b:af:b4:a0:db:4e:6e:e8:
f5:ec:ba:2f:29:d4:f0:1e:c4:84:ae:84:88:10:09:64:65:26:
6e:1a:8f:73:f3:6e:cf:0f:d2:be:3a:0d:7b:09:4b:36:7a:8d:
de:e7:83:62:43:e5:66:53:a1:80:11:b5:8d:6c:b1:c4:32:fd:
b4:df:23:f9:20:3d:cc:52:af:c1:a2:5f:ea:d6:6e:16:38:af:
56:39:a2:84:bc:a0:de:97:46:b5:e3:6b:e1:ae:e2:12:c9:96:
b1:f2:4d:97:a6:59:17:78:ff:80:c1:32:04:a1:49:8e:21:5d:
42:eb:a3:b4:96:99:5d:da:8f:44:16:58:70:39:4d:76:5d:2c:
4e:04:4d:9d:e7:c0:41:19:be:72:ac:c1:84:86:b1:30:4d:e0:
59:76:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:54 2025 by rpki-client