Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier: cUkV3tbOPcNL/alCEW49AaWAC6Cojvh5NDNwTqM/6vY=
Subject key identifier: 8B:51:FA:2F:7F:56:50:AF:7C:DC:2D:E1:5C:12:3C:F9:BA:07:80:AB
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 0194BCA9B9FBAFF1521E895EAABB14FE857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number: 0FD3
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: pKJcXndu8LzbzjZwLguxZT69YllwmJNUbBrDyLxRigg=)
2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:fb:af:f1:52:1e:89:5e:aa:bb:14:fe:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=8b51fa2f7f5650af7cdc2de15c123cf9ba0780ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:29:12:ef:67:01:fa:71:fd:8e:65:cf:45:
c2:21:cc:19:9a:d3:4a:8b:aa:bd:ac:f5:23:12:e2:
22:15:17:f2:f1:40:b9:67:44:7c:8a:03:2f:b3:ef:
bc:98:d3:d6:1e:4a:1a:a3:78:c6:d3:59:fb:95:36:
1e:5f:c5:ad:d7:94:11:e2:b2:0e:cb:38:46:df:dc:
af:87:1a:ae:52:19:f6:27:71:56:e4:c0:f0:c2:79:
31:b9:36:01:27:9a:d5:0f:5e:65:6c:b1:9f:d8:28:
c5:70:9b:b4:4f:33:ba:3a:1a:60:74:0d:c7:20:39:
e1:aa:c8:fe:e0:86:73:0f:09:89:18:3e:18:9a:52:
1a:ad:e4:d1:c9:c8:7f:51:76:25:4c:1d:88:a7:d6:
b7:23:34:e7:d7:e4:01:aa:0a:3e:3f:45:a7:58:a6:
26:70:a1:68:3d:02:4c:63:57:b9:88:8f:65:99:75:
64:ef:32:f8:e1:a0:d2:f4:fc:29:48:88:9d:72:8b:
03:bb:6c:36:ac:6c:26:7a:02:98:63:f2:f8:40:0f:
11:d2:84:88:04:13:f4:20:da:34:c6:86:24:54:f0:
f9:c8:f9:8d:dd:1b:da:38:b5:6b:3a:5d:11:a1:68:
48:cb:a2:b2:14:0a:5d:ec:87:88:9c:23:a5:85:2b:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:FA:2F:7F:56:50:AF:7C:DC:2D:E1:5C:12:3C:F9:BA:07:80:AB
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:5a:5e:41:8d:9e:42:9f:a8:8a:84:9f:32:43:b2:63:ba:
ea:8e:08:f5:06:50:3b:83:c5:d3:b2:bd:85:52:77:58:00:9d:
eb:1f:e0:c8:cf:0c:2f:36:84:23:67:2a:bd:82:8b:d5:d7:2c:
db:27:1c:04:3a:a3:e0:b5:c2:62:ae:39:75:80:a2:55:55:b9:
0c:b4:ba:b7:5a:90:f7:c6:7b:a3:04:88:a1:0f:09:d0:35:ca:
e7:e4:0c:66:b2:73:59:27:42:b8:12:4c:1b:4c:f3:d5:7c:4a:
66:26:4e:24:e8:e6:82:a6:ef:42:05:fe:39:f8:fa:cc:70:ef:
43:2b:b0:6f:6f:e7:8e:eb:35:21:fb:a4:b9:0e:62:fb:56:2b:
bb:62:cd:29:c0:82:f4:5c:e3:50:03:f3:aa:77:06:cc:ff:54:
d1:33:94:14:56:85:dc:d5:de:58:e9:2c:46:cf:c2:c2:1e:78:
73:1a:17:7b:1b:c8:e7:81:4c:2e:37:e5:f4:21:4c:7a:75:66:
fe:f4:bc:b6:cf:5d:84:bb:7e:04:d8:5e:1e:cc:a9:23:b8:54:
c7:78:51:e7:78:4b:ad:37:7c:4e:ae:22:c5:4e:e2:70:e1:13:
af:54:fe:e9:f8:13:34:6e:a2:86:85:8c:4f:b7:86:58:e7:48:
f0:25:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client