Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft
File: jMoVfE7xVVRt3X68j6eL-uRTdZE.mft (raw, json)
Hash identifier: 9oGIdcMM9lRBkgI1n6nyVSYX7UKWXU131FiePieobCI=
Subject key identifier: 56:F7:8B:96:D8:CB:DF:B4:C8:04:71:E0:FA:F7:F4:21:5F:21:AE:02
Authority key identifier: 8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91
Certificate issuer: /CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
Certificate serial: 018A5E22F39BE9CE8520E5D16050B3261731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft
Manifest number: 8E
Signing time: Mon 04 Sep 2023 03:01:03 +0000
Manifest this update: Mon 04 Sep 2023 03:01:03 +0000
Manifest next update: Tue 05 Sep 2023 03:01:03 +0000
Files and hashes: 1: jMoVfE7xVVRt3X68j6eL-uRTdZE.crl (hash: nKqT0ImkTigFezmkXQ6YCa1FdMoNKpjAY3b2MskbI4A=)
2: tsVKA0S--uoKLyQStmhEUTv3MUo.roa (hash: rd036jnNgIw1diGye/V172ABuJ+hByTMdshKNByuOjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:22:f3:9b:e9:ce:85:20:e5:d1:60:50:b3:26:17:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
Validity
Not Before: Sep 4 03:01:03 2023 GMT
Not After : Sep 5 03:01:03 2023 GMT
Subject: CN=56f78b96d8cbdfb4c80471e0faf7f4215f21ae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:89:c8:35:b1:3e:dd:ef:cc:50:59:91:1b:
9d:a9:61:d9:9c:93:4b:91:57:94:3f:e3:68:ef:76:
76:2f:99:e3:32:a2:0e:86:15:d1:ed:09:54:f8:ba:
a7:a3:92:a6:6d:53:1f:56:44:49:2f:c4:09:7e:4d:
6e:85:b1:65:f8:a0:66:fd:a9:64:01:f9:15:81:eb:
17:df:f7:6f:d0:18:3a:b6:06:c8:59:f6:6f:6d:ec:
00:5c:81:fb:82:f5:03:ae:04:4b:93:79:40:c7:50:
93:65:cc:21:d2:a3:40:de:36:be:5e:b0:eb:d5:ae:
3c:f0:8f:ac:b4:4d:2c:9a:a5:4f:1d:f0:ee:b8:b4:
c3:d5:0b:d5:5f:a2:ec:41:c4:56:6e:c6:0e:d8:78:
aa:f7:69:be:8f:90:99:11:b5:9a:3f:f4:c7:8b:bf:
77:ca:24:75:ea:e7:65:57:4c:ed:89:10:69:59:0e:
87:fa:1e:54:dd:2c:9b:07:2f:5e:5d:c4:2c:13:d3:
b4:c0:e1:8c:20:e5:22:01:8e:43:4a:61:df:08:46:
5f:09:b9:0f:08:a4:15:e2:24:3a:31:05:18:c6:23:
49:0d:69:86:d7:59:ba:59:b1:f0:5a:7a:17:88:45:
fa:d8:02:9b:fe:7f:87:59:8a:ad:d0:f3:55:6a:c7:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F7:8B:96:D8:CB:DF:B4:C8:04:71:E0:FA:F7:F4:21:5F:21:AE:02
X509v3 Authority Key Identifier:
keyid:8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4a:f3:8d:9c:c3:86:83:22:aa:d8:d9:b1:d4:5b:d4:14:9a:
71:6f:74:d2:b9:34:2e:3e:21:57:38:7a:ff:b5:16:84:a4:c6:
ea:6a:d7:ca:ed:86:9f:4e:80:5f:fa:ca:ad:89:2a:c3:1b:60:
b3:81:5c:6f:ae:23:28:11:52:8c:51:2c:3f:81:c5:a9:06:25:
c3:03:1d:c9:95:97:21:fc:cc:da:f1:2c:6a:56:f5:1d:d4:5a:
fd:26:67:b3:a2:ae:b4:49:65:34:84:f8:0d:42:a8:4a:3b:fe:
e4:17:23:1e:93:b8:3c:e2:df:18:31:47:cb:2f:d3:76:c5:20:
76:5a:36:fd:3e:48:f1:a1:3b:14:c4:2d:a1:aa:61:5c:d0:2b:
0d:36:93:cf:83:18:9d:e2:fe:65:02:df:1f:8f:75:54:1d:32:
e9:d6:32:ea:aa:c8:53:c7:87:d5:44:5a:b7:69:64:50:d7:3e:
a7:77:4b:98:29:aa:91:23:be:f7:45:8a:27:1d:81:a2:05:af:
09:1d:bd:c0:d6:c5:87:ae:be:e8:1e:19:f3:2f:60:d3:29:0a:
45:d4:0a:70:cc:24:ef:bd:16:cb:d3:b7:2b:7e:2e:8c:7e:bd:
0f:f2:2b:f0:9d:36:a7:53:9f:34:c5:e3:7f:b3:d7:ff:66:f2:
80:a9:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:28 2025 by rpki-client