Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: A4fwc0f67q6bEcsA3wil/tgCivLMpTmlHQI5kDUNy0w=
Subject key identifier: 98:AC:03:56:B5:BE:8A:BB:E4:78:2F:E2:57:6C:ED:D1:38:53:F4:09
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 0194BD8566EF661116B663ACF594692E0C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: A60RBGadDjKdPHVlJg0uqTD974Q.roa (hash: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=)
2: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: e+Q1wrPXVtW95WMdkQKqpN5n1VfvCIbaCoFHlNnzrlA=)
3: ai_RgbT0zKstqqt2SbvFvSaAldI.roa (hash: +RxVDzpwxX0PVjGcCVeFRTO/OITdBFvoCwZmWeh/ZW4=)
4: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (hash: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=)
5: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (hash: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:66:ef:66:11:16:b6:63:ac:f5:94:69:2e:0c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=98ac0356b5be8abbe4782fe2576cedd13853f409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:d7:d5:39:19:75:92:1d:3c:aa:c0:5c:19:
3b:55:07:6c:a0:42:52:26:26:34:9e:4a:6e:2c:19:
c5:c3:fc:1c:d1:9e:42:ee:d5:7c:76:36:f4:b9:c9:
e2:a4:92:36:0d:d8:f4:61:2b:ef:9a:cc:97:e2:b8:
80:d9:91:5f:0c:0b:6e:7a:19:ee:89:46:76:06:84:
e3:bf:98:fa:7c:a8:7e:6c:a2:1e:ba:45:9f:58:f3:
c5:ac:49:ab:41:38:05:9c:44:72:b6:7b:4c:1e:27:
15:65:5f:8c:c1:40:fa:25:12:0d:a3:a6:41:f8:05:
1d:8c:4d:a1:94:5f:66:85:31:d8:1d:56:f0:b5:79:
7a:70:5d:bf:54:a9:42:07:89:b6:bc:32:85:ec:cc:
30:da:8a:da:9b:eb:f9:c3:f1:0b:32:a2:c4:c9:62:
ba:ff:0c:7b:c3:b8:6e:96:9a:b3:47:47:ab:f6:bd:
7f:2c:58:8b:09:bb:ef:68:a4:fa:19:a3:04:68:ed:
61:0d:c5:ed:a0:11:d4:2b:cf:f3:a8:69:ba:62:8b:
18:8b:8f:f8:6d:02:3f:54:24:8e:8a:a3:80:7e:42:
1e:18:30:67:77:4f:0c:31:b1:f5:f8:2e:a4:5b:da:
b2:59:74:8e:95:52:12:28:0a:16:e6:aa:55:16:71:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:03:56:B5:BE:8A:BB:E4:78:2F:E2:57:6C:ED:D1:38:53:F4:09
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:62:57:5a:a9:fd:de:f8:0d:79:37:38:45:8d:83:20:9d:
ae:cc:db:10:72:57:39:e9:bf:98:b8:db:83:90:76:71:0e:11:
c2:eb:e7:15:cd:6f:1a:c5:aa:55:5b:b8:2f:fb:b9:05:f7:3c:
fe:f1:2a:99:34:e1:7a:d8:98:1e:e6:17:d9:ad:84:01:b2:1f:
96:17:e3:3b:b6:fa:84:11:da:98:ce:b4:18:96:d8:63:50:35:
38:35:51:c5:81:2b:de:ad:e9:84:f0:c7:20:79:a4:fc:f1:3d:
0b:e3:2a:d2:74:aa:23:ae:fa:80:0c:7f:a2:15:40:30:e8:12:
87:96:08:8b:8e:56:76:4c:05:a0:68:86:b5:17:cf:b8:a4:97:
42:2f:f9:62:9d:2f:c2:c9:ab:87:7a:1b:92:d7:b1:36:a6:2b:
20:ef:34:d9:85:c5:92:09:b6:c2:94:ac:94:87:a2:7e:c1:c1:
99:9d:57:c8:46:3d:f5:86:dd:f2:c4:ab:2f:11:71:fa:73:81:
75:23:2b:4a:4c:67:b1:03:e8:ed:1e:29:72:a3:f9:2e:f0:c7:
62:84:2b:e2:5f:a1:c5:87:50:ca:b2:de:f5:5e:87:f0:e0:c8:
1a:88:04:eb:64:16:72:fa:80:1f:a4:ef:3f:43:23:45:d7:28:
e8:45:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:42 2025 by rpki-client