Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft
File: j6cSg9iXNAnZYIAPb3_NyNOjCss.mft (raw, json)
Hash identifier: euO1u8QdXcQbwXxUkaor2zkAFGjAPnietbul+waqtVM=
Subject key identifier: 62:FA:F5:D4:96:F8:DE:C0:AC:9B:F3:EB:1E:F3:31:26:46:7A:C5:F6
Authority key identifier: 8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB
Certificate issuer: /CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
Certificate serial: 01941A3AABF79D342F06822FFD562D115EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft
Manifest number: 0EF1
Signing time: Tue 31 Dec 2024 01:00:40 +0000
Manifest this update: Tue 31 Dec 2024 01:00:40 +0000
Manifest next update: Wed 01 Jan 2025 01:00:40 +0000
Files and hashes: 1: 3Ji6EsRbVhlzuRDCLI86xE597fY.roa (hash: Zmq7UubgavNvTfLTxu28W+/YjHF0IfKHoMEPtTLr7/w=)
2: j6cSg9iXNAnZYIAPb3_NyNOjCss.crl (hash: M3ashwk8ktkF6Qhp5vgFyhCBkXhXNqH7mpoH58TnS40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:3a:ab:f7:9d:34:2f:06:82:2f:fd:56:2d:11:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
Validity
Not Before: Dec 31 01:00:40 2024 GMT
Not After : Jan 1 01:00:40 2025 GMT
Subject: CN=62faf5d496f8dec0ac9bf3eb1ef33126467ac5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:ac:f9:d0:bc:02:f5:52:2c:6e:82:aa:f4:
12:22:62:3e:91:72:a3:62:40:b1:99:5c:0f:b2:18:
9d:e6:f0:0e:2e:4b:32:f9:fd:47:4e:bb:d0:7c:0d:
37:a9:e3:d9:e4:a9:8a:37:56:91:9e:5d:e7:22:c4:
9b:ec:9c:81:e3:4a:1c:83:90:62:af:95:63:f6:d9:
66:d2:64:bb:e7:7f:f9:0b:29:ff:a7:ab:90:a4:16:
b9:a1:a9:77:05:95:02:36:4f:37:aa:5c:89:53:68:
e0:5a:c6:b5:ab:b5:1d:40:e0:69:0d:1e:6d:55:89:
cf:a5:f3:e3:03:62:d7:b5:bb:15:de:71:d8:f8:28:
af:05:f2:26:07:27:3b:6f:52:55:43:08:68:8a:2e:
0c:ef:63:62:aa:6c:f9:e9:9d:20:d0:04:8a:b9:b2:
e9:14:fe:02:c1:4f:1d:e8:0f:05:86:8a:96:0e:18:
02:88:94:c4:bc:87:d9:66:ed:25:6d:ed:d3:50:c8:
88:57:e7:36:6a:b5:2d:ca:66:0d:a5:e5:3b:0e:ba:
b4:e8:16:44:07:9d:f8:f7:65:aa:a0:c0:cb:02:c7:
2a:a3:0b:40:64:d1:b2:c7:c0:8b:6c:49:39:0a:c2:
d0:82:80:16:cb:dc:19:f3:71:aa:c0:69:c2:f1:63:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:F5:D4:96:F8:DE:C0:AC:9B:F3:EB:1E:F3:31:26:46:7A:C5:F6
X509v3 Authority Key Identifier:
keyid:8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0d:1a:cd:5a:f6:18:e3:80:a4:e5:af:a1:68:5c:92:04:47:
fd:e9:e2:43:f6:b6:e1:74:a8:2a:1b:13:ba:ee:94:7b:95:32:
0c:36:f9:e4:c0:fb:0c:4e:b4:90:c6:1d:31:29:34:4b:61:25:
0a:76:ce:2d:ee:01:e8:be:9c:cc:53:de:02:85:c5:fe:48:f3:
6c:c2:93:0c:ff:2a:8f:33:8f:40:85:0b:9d:70:2d:4b:89:95:
30:9f:59:9d:7b:13:68:f6:71:dc:dc:eb:9d:74:59:2c:e4:ea:
bb:9a:f0:40:76:10:ca:dc:68:fe:8a:cb:9d:8d:92:e2:de:a5:
b2:4a:bc:2e:ab:68:84:ed:ac:a2:04:40:76:1a:b5:93:8a:ad:
6a:8d:85:6d:61:21:e1:73:b4:af:c4:93:bb:59:b4:f8:a2:e9:
34:97:db:d2:1f:7a:0b:46:22:d1:6b:84:09:bb:f9:2d:01:a9:
4a:c2:12:39:f3:c9:b2:41:4d:76:36:b9:32:d8:89:47:e2:fd:
6f:07:43:55:0f:7f:8e:39:ac:4e:ef:2d:73:11:8e:27:85:8a:
7f:75:cc:88:bd:f7:1c:98:14:a0:54:ec:4e:9f:2c:35:dc:86:
e0:27:ba:20:96:a3:03:41:23:42:5c:c6:f4:2c:6d:ed:6c:bf:
4e:89:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:16 2025 by rpki-client