Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: fYiKHc2Ngc4w+peDMbcvVJhC92LC1X7Pk8Nl47z2kJg=
Subject key identifier: 63:24:6A:10:09:5F:8E:4C:2B:6A:05:EF:A9:7A:71:71:BB:82:A2:CA
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 0195E0B4943BA809B6C5B5B699E6FBAEA4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 10E8
Signing time: Sat 29 Mar 2025 07:01:25 +0000
Manifest this update: Sat 29 Mar 2025 07:01:25 +0000
Manifest next update: Sun 30 Mar 2025 07:01:25 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: //cWP4WHicc4nmcY34Vpk89TvULQe/ZyJ5rmlgLAH2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:94:3b:a8:09:b6:c5:b5:b6:99:e6:fb:ae:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Mar 29 07:01:25 2025 GMT
Not After : Mar 30 07:01:25 2025 GMT
Subject: CN=63246a10095f8e4c2b6a05efa97a7171bb82a2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:be:27:19:9c:1f:96:43:18:f8:ec:51:99:
94:92:06:ef:66:bf:3b:67:5f:48:b4:92:a8:55:24:
cf:44:63:9a:80:1c:71:8e:fc:d0:f1:45:25:92:ec:
a6:18:16:35:8b:9c:86:56:74:3a:79:74:e4:27:ca:
45:20:80:9e:bc:83:2c:11:64:0d:7d:b4:64:af:e1:
79:2a:54:ce:5a:8b:a7:5c:b0:c3:1c:2d:54:9d:ab:
29:8e:47:84:fa:30:63:9d:18:eb:07:ad:8d:03:c6:
0c:3c:71:e1:1e:1f:61:f8:7f:89:31:48:4b:b0:b7:
c2:d0:56:9f:59:ad:f5:9f:7b:d0:69:e3:03:36:ce:
6c:00:88:8a:3d:84:9c:27:9c:6e:28:6c:fc:2c:e5:
3d:62:6f:03:66:86:14:9a:47:17:e8:04:9c:89:56:
85:9d:37:e6:20:5d:9a:e0:93:e3:08:83:13:ba:73:
61:bf:59:b8:b8:aa:ee:76:e9:68:67:69:d4:66:5d:
f1:9e:37:7a:f0:d5:70:f5:ff:ed:00:4b:fc:a7:4e:
8c:23:e6:d8:bb:ea:06:f8:3a:ed:0f:cc:53:a1:30:
75:cb:49:d9:be:dd:25:ce:54:29:39:fd:0d:7b:79:
2e:3e:c0:3c:14:33:5c:a6:5a:53:d4:4c:da:b2:b5:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:6A:10:09:5F:8E:4C:2B:6A:05:EF:A9:7A:71:71:BB:82:A2:CA
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:79:61:57:1b:d4:27:a9:62:fc:0a:d2:d9:fb:b0:9d:5e:
0b:c0:af:4a:d3:5c:d2:31:24:dd:39:dc:3b:d7:ca:04:2d:83:
cc:c9:fe:b5:a5:1a:1d:43:5b:77:c8:e3:3a:6a:bd:b8:fb:14:
52:ab:6e:a7:65:3d:f7:46:c4:0b:11:84:58:86:55:bc:38:26:
5f:cf:94:0d:75:4a:54:c0:54:24:9a:df:a8:86:9e:59:5e:1f:
ee:02:e3:87:60:8a:22:14:d8:45:39:29:19:cd:0c:7b:4c:8c:
fb:62:d9:98:fa:94:4c:a7:49:25:41:3c:ad:7c:d1:14:94:36:
de:9d:50:05:e2:24:7c:1b:f8:8b:e2:87:3f:5b:48:09:21:e4:
b6:62:d7:fe:a0:49:b2:04:4f:d3:fd:a3:6d:ff:dd:4a:5e:a3:
84:c2:d3:db:ce:81:45:95:21:0e:a0:ef:49:f9:7b:0f:93:7b:
af:f2:78:16:d9:78:1e:09:d1:23:8f:7f:88:6f:43:05:a0:e7:
2a:6f:6b:9e:a4:e2:fb:55:89:78:06:56:0a:b2:e0:05:2a:41:
32:55:ee:5e:30:ea:ce:5f:2b:9d:fe:e1:96:8b:41:8d:e0:45:
91:f9:68:77:a2:d0:89:85:82:86:eb:02:4d:9e:41:56:3c:86:
04:0e:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:13:37 2025 by rpki-client