Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
File: jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft (raw, json)
Hash identifier: j0efI0RTF2eDjI1j2534iPJXp19nVq2eGSCIVrWI0yY=
Subject key identifier: B1:69:03:28:9E:7B:71:36:2B:8D:97:C3:FC:5F:E6:9C:B3:06:93:0D
Authority key identifier: 8D:2F:07:91:B0:52:51:59:72:0B:19:1C:41:1B:CC:47:42:0F:1C:E2
Certificate issuer: /CN=8d2f0791b0525159720b191c411bcc47420f1ce2
Certificate serial: 01941B8515A110E2F78E35EF13267571BFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS8HkbBSUVlyCxkcQRvMR0IPHOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
Manifest number: 118A
Signing time: Tue 31 Dec 2024 07:01:33 +0000
Manifest this update: Tue 31 Dec 2024 07:01:33 +0000
Manifest next update: Wed 01 Jan 2025 07:01:33 +0000
Files and hashes: 1: 6mFWWvmAT5bsbpGhrdS4280FBZ0.roa (hash: hhnVXV6NbpaD8wWoWB6TkszRJCN8jzZOHkVGDzev+wo=)
2: jS8HkbBSUVlyCxkcQRvMR0IPHOI.crl (hash: 5PuN0/KPYDNT9W2I40x6YevmkIbzDSNStgPNgKe7B6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:85:15:a1:10:e2:f7:8e:35:ef:13:26:75:71:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f0791b0525159720b191c411bcc47420f1ce2
Validity
Not Before: Dec 31 07:01:33 2024 GMT
Not After : Jan 1 07:01:33 2025 GMT
Subject: CN=b16903289e7b71362b8d97c3fc5fe69cb306930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:8e:1a:30:cb:67:6e:5b:9e:c0:f2:2a:61:
e6:eb:31:94:ec:91:4d:4d:5c:8c:00:c2:f2:af:2d:
ce:de:fe:97:56:61:70:b2:59:0b:fd:96:db:50:83:
51:3e:cf:16:a8:7b:63:ad:d9:f8:2e:41:b9:e7:5a:
dc:57:00:a0:35:0b:90:8f:12:00:ea:7a:52:dc:06:
cd:6c:58:56:bc:8a:84:f5:3b:fd:81:64:97:60:e4:
7b:48:1e:88:a0:de:88:e0:17:62:57:a0:30:b1:05:
f3:c0:0f:20:bc:d3:b9:34:5e:a3:ba:f1:d5:55:8c:
13:27:e4:92:a8:53:82:aa:9d:2a:2b:97:63:bf:54:
45:42:7e:1c:8c:e1:50:9e:49:41:6f:62:4f:83:e0:
06:9b:59:7a:db:14:bc:cc:18:d1:47:b4:71:f3:9c:
d7:a2:ad:ac:fd:15:dc:72:d9:02:3d:1f:98:f1:e4:
51:93:5c:09:d5:95:81:52:25:2c:04:dd:4c:b1:11:
2c:04:87:78:9d:96:90:d9:49:64:af:c3:68:c6:f2:
b2:b2:5b:60:71:4b:dd:0c:7c:87:a5:a0:43:29:19:
e2:f6:c6:cf:a4:88:1c:55:2d:bb:5c:54:2e:0f:5c:
07:ad:b5:2d:a5:fd:b2:dd:0c:87:3a:5e:43:0d:78:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:03:28:9E:7B:71:36:2B:8D:97:C3:FC:5F:E6:9C:B3:06:93:0D
X509v3 Authority Key Identifier:
keyid:8D:2F:07:91:B0:52:51:59:72:0B:19:1C:41:1B:CC:47:42:0F:1C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS8HkbBSUVlyCxkcQRvMR0IPHOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a5:2c:99:a6:6d:a5:61:3b:45:81:93:1b:16:35:3a:7a:97:
18:b5:0c:d6:ca:d6:5e:b6:21:f1:e2:f0:63:23:d2:d3:26:2f:
25:77:16:5a:b9:70:2c:8b:b4:87:2a:5c:e3:c9:4f:40:2b:b2:
cb:58:68:df:29:43:b1:36:69:95:e0:fa:d6:04:18:52:01:4e:
b5:4a:11:4e:c5:1a:85:41:fc:2a:e6:6a:1b:e2:03:db:75:71:
9f:ba:0d:f7:9a:f5:c5:89:39:cf:29:e3:0a:ef:d4:66:7d:69:
9e:f7:9f:96:89:fa:f3:5f:78:cd:95:7d:05:06:78:0d:62:cf:
ef:a7:36:15:a0:12:bd:71:10:cf:37:42:77:07:e6:a6:4a:bb:
b6:d2:4c:ba:44:e9:26:a2:00:67:c7:ad:bb:fe:86:25:ab:06:
70:69:07:10:29:ee:3b:26:9e:a7:76:48:81:ba:ca:6d:6f:51:
53:fa:8c:0b:f8:eb:b2:5b:52:a2:c3:2f:a2:fa:20:19:87:41:
2e:02:c0:e0:ec:d3:97:6e:25:6d:21:a2:69:9f:0e:87:16:c6:
ef:4b:32:52:cb:00:ba:f2:69:18:bc:bf:14:47:3a:11:a6:10:
4c:f0:2f:47:23:20:18:f0:91:1b:47:7a:47:d8:3b:8b:4c:1e:
c7:b8:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:21 2025 by rpki-client