Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File: jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier: /YU/ptjFHKjMyVxQGjxUFkeUSG7XwujIxKq9USREDfs=
Subject key identifier: B4:65:45:0C:B5:FC:06:98:EC:4E:98:89:8A:35:31:4A:FE:83:CD:09
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer: /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial: 0195E1597FFC1C6D05BA8A00F4B920DA5BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number: 0642
Signing time: Sat 29 Mar 2025 10:01:33 +0000
Manifest this update: Sat 29 Mar 2025 10:01:33 +0000
Manifest next update: Sun 30 Mar 2025 10:01:33 +0000
Files and hashes: 1: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: pBCZkWhUwY8dxRyi/xEw+xRMyjxw97D9N1GSfiilvFo=)
2: rhQc5qUM2MDBH4p36Kio4nVEz6k.roa (hash: awMdOXUFz2DrxlzCVZjnG6myrcErsUVUML7kWjxlY24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:7f:fc:1c:6d:05:ba:8a:00:f4:b9:20:da:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Validity
Not Before: Mar 29 10:01:33 2025 GMT
Not After : Mar 30 10:01:33 2025 GMT
Subject: CN=b465450cb5fc0698ec4e98898a35314afe83cd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:78:94:07:92:65:ab:94:5c:2e:14:08:7b:
3f:d7:51:5c:ef:fb:9c:22:ff:e1:ac:3b:a8:2e:aa:
33:8a:30:29:d7:4c:b4:86:34:45:34:e7:07:3f:04:
a3:f2:0f:0a:4b:06:74:b0:77:07:00:e1:2c:a4:e7:
21:1d:a2:66:01:76:04:49:00:2b:22:bd:8e:94:f6:
95:2e:b7:e6:c6:eb:8e:70:73:2e:96:a8:a0:f6:5a:
9f:44:4f:29:56:65:43:a3:dd:70:46:03:55:e7:07:
d2:ee:4f:0c:9c:e8:ea:be:e9:c7:b8:75:de:51:85:
07:00:5c:83:a3:d1:cc:65:ed:1d:a7:44:8c:ac:0c:
45:af:33:68:07:12:2d:5f:ad:5d:03:7d:0c:29:e8:
0f:f4:e4:6d:04:cb:eb:b7:62:aa:4c:a5:67:24:89:
c1:aa:cf:59:4e:f4:3b:fc:ac:7b:71:be:6d:9c:e3:
81:d9:a0:8b:72:58:51:65:37:a3:82:fa:75:27:77:
b7:86:18:a4:d2:81:85:14:9c:49:20:54:46:8d:7c:
00:9d:cb:87:91:ca:a3:cb:d0:63:93:09:b6:2d:92:
4a:3f:09:fc:b5:ce:5b:ef:80:b5:30:b3:d8:f9:47:
8f:1e:3e:90:0d:05:fb:f3:bb:23:6a:65:b6:e6:f8:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:45:0C:B5:FC:06:98:EC:4E:98:89:8A:35:31:4A:FE:83:CD:09
X509v3 Authority Key Identifier:
keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b2:89:35:34:39:bc:0c:81:d6:68:78:20:c7:f2:4e:fc:31:
29:61:31:c8:1f:f5:4c:71:b5:a6:01:3d:d4:7a:5d:8c:54:55:
63:e7:7c:99:28:f4:c8:d9:47:13:7d:82:2a:1d:aa:4f:df:93:
a6:90:26:c5:6e:4d:8a:57:79:19:0b:50:50:e4:b3:f0:49:71:
a8:43:c4:e3:b1:ec:ae:24:c5:c6:9e:85:51:93:ba:2c:60:14:
d9:ec:31:1a:95:12:54:60:8f:f6:ff:08:0a:80:8f:a3:d5:52:
e6:4c:54:7d:d2:ad:99:be:8d:bc:c2:ab:14:82:a3:4c:f5:28:
0d:2d:94:ba:6d:80:87:71:68:3b:79:bb:25:94:5c:e3:36:64:
3d:1b:c4:8c:03:3b:15:5a:59:35:f1:23:51:06:72:30:91:a2:
48:e8:43:5b:29:24:54:27:20:6e:38:69:28:b6:02:11:62:3e:
98:de:6b:92:25:02:6a:dc:3e:2e:39:65:8b:51:d9:09:1c:e8:
0a:6f:ce:b7:34:c5:47:30:83:bd:0a:46:bf:2f:04:84:05:c0:
bd:ea:f8:b6:30:a7:c0:4b:1e:dc:92:f7:39:71:96:19:b5:7f:
68:e0:2d:03:b1:1e:29:de:8b:cf:6d:93:92:e0:3b:50:90:7c:
71:d5:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:35:40 2025 by rpki-client