Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: Tju9OH5QMnxdZpH+bM7p6Z6+Re1weOrYMtIMG7XIgc4=
Subject key identifier: 9E:8B:31:24:17:76:B1:CA:FB:1E:61:F4:ED:B5:6B:55:F6:38:76:DC
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 0194BCE0ED7CAEDC3D7F44604DE1648AE339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: drTsiFeRa13d4bvvSi3mreC7EaPUkX40RYTBtVNCWl4=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ed:7c:ae:dc:3d:7f:44:60:4d:e1:64:8a:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=9e8b31241776b1cafb1e61f4edb56b55f63876dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:fa:f5:96:ec:09:39:ab:82:a7:c9:06:05:
9c:10:2a:52:ae:48:99:69:94:ab:23:17:43:42:d2:
72:49:70:16:bd:99:fb:7c:c9:91:b7:21:5a:b6:ca:
b7:ed:96:fb:4c:1f:d8:38:3d:20:ee:17:f7:d1:23:
61:d9:74:b8:34:65:f5:60:33:b6:9e:26:43:ea:e4:
f6:cf:4d:74:b3:e8:1e:51:b3:21:ed:22:34:e8:44:
7f:a5:c1:fb:3f:27:e4:86:a9:90:e7:43:82:30:87:
2b:a0:ad:68:8c:e8:b8:21:21:85:e5:ed:b5:bb:3a:
ae:59:a2:ad:91:a8:db:2c:f5:77:da:4c:05:b0:ad:
72:8b:85:10:a7:ef:ac:41:74:dc:52:50:38:80:6e:
77:d1:01:24:0a:56:33:9d:77:aa:61:95:11:a4:11:
8d:68:20:0e:72:09:9e:eb:24:49:72:73:8f:72:33:
46:65:3f:ea:c0:1a:78:5b:9b:e8:a3:25:5b:e5:b4:
2d:d1:75:00:24:77:5d:6f:f4:99:e1:66:38:f7:b3:
05:f8:78:a3:ba:60:4e:4a:09:c9:21:b5:f1:d3:d4:
2b:78:34:ca:d1:8a:dc:87:70:83:6d:f1:aa:05:a5:
18:06:b3:cf:e3:e9:d0:ca:cc:7c:fb:6c:b3:c1:0f:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:31:24:17:76:B1:CA:FB:1E:61:F4:ED:B5:6B:55:F6:38:76:DC
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:46:da:56:31:d9:36:54:93:f3:22:55:69:81:e8:b9:36:e2:
85:80:a6:17:17:98:05:98:bc:c8:e8:e3:2f:47:d1:0f:09:d5:
8a:8f:3d:58:c3:d2:36:fd:56:d8:2f:6c:c0:cc:00:db:5c:5f:
b4:82:bc:e2:4c:f9:2f:d6:2c:23:6d:d4:6c:70:67:e1:fa:c5:
fc:0d:b6:ba:17:ad:8b:2e:2b:c5:33:19:a5:a4:cc:81:64:7f:
83:2e:8c:e2:96:07:18:7b:4c:e2:c8:93:22:45:3c:2d:23:6e:
16:f7:97:cc:fe:86:ac:d9:2d:d0:2f:1e:6b:16:0d:2e:56:13:
89:2b:dc:e1:89:de:52:6a:d7:d5:63:9f:a4:dc:c2:97:dc:ec:
63:89:97:be:2b:ca:a6:12:8b:76:87:0f:a0:24:62:1d:e9:29:
97:47:ff:f6:0d:82:6c:a7:41:7c:56:51:ac:d5:2f:d1:19:a6:
2d:a8:64:5c:9e:0b:89:93:f4:5f:2a:26:39:2f:dd:7b:79:43:
f7:ac:8d:19:d4:7c:65:a2:8a:78:9c:62:c7:d1:1c:b3:91:1d:
2f:b4:d6:b7:74:66:64:fd:02:c8:31:79:cd:43:a3:5e:38:66:
e3:0c:a4:1f:50:45:b5:93:ca:b7:13:10:35:10:70:31:6a:47:
fd:e2:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:55 2025 by rpki-client