Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier: /NE9SQ1ZDLpu4Q9HlNNDJZ+WPetiRgXkPmSDaxNggeA=
Subject key identifier: D1:D5:E6:4F:C0:5E:4A:6F:87:A0:42:5D:23:24:89:4A:9D:61:D8:8C
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial: 0195E07D8F8FCBB4CFCA55743E893D1FA3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 06:01:19 +0000
Manifest this update: Sat 29 Mar 2025 06:01:19 +0000
Manifest next update: Sun 30 Mar 2025 06:01:19 +0000
Files and hashes: 1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=)
2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: FjEPl0Tvz3MKp4NzrjM8l6qrgyvligzdYAGTn5H2zWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:8f:8f:cb:b4:cf:ca:55:74:3e:89:3d:1f:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Validity
Not Before: Mar 29 06:01:19 2025 GMT
Not After : Mar 30 06:01:19 2025 GMT
Subject: CN=d1d5e64fc05e4a6f87a0425d2324894a9d61d88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:25:02:88:bb:79:d7:52:e8:dd:4a:b0:db:
3f:73:19:39:50:7a:a8:8e:52:8c:0c:59:ae:6e:83:
27:d9:09:af:b0:ce:68:e0:2b:ed:69:75:48:b2:c5:
90:3e:9a:43:be:77:58:99:49:11:0a:78:a3:25:2e:
0c:d1:a5:4f:b6:5e:10:b1:5d:b6:78:07:f4:0b:0c:
22:8f:4c:b0:fb:66:13:3c:0b:50:89:64:55:83:49:
86:7d:18:66:1a:a5:49:82:00:c2:9a:04:bc:df:3f:
5c:f3:8d:15:a1:d5:fe:50:96:db:d8:16:e2:f2:22:
f5:cf:2a:ef:cd:50:44:24:af:77:59:70:1c:f3:e7:
d4:bd:86:bd:44:0b:b0:ab:b9:e9:cf:02:e3:d3:da:
85:a7:81:42:94:c2:b2:40:20:90:5f:0e:5d:6f:1f:
45:ea:15:0b:2c:53:27:12:e6:6f:fa:11:7b:77:b6:
1e:32:df:5c:9d:d1:b2:35:19:fd:9a:f1:74:71:30:
62:b2:a0:78:f5:6d:fa:bb:75:83:47:17:a4:60:14:
6e:54:e5:32:81:db:aa:d7:b5:fd:3c:a0:c1:da:21:
8d:d3:38:20:a9:66:5e:c9:86:64:27:68:e3:9f:7d:
92:22:72:75:a2:58:35:c7:9a:0b:cf:4f:b2:51:06:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D5:E6:4F:C0:5E:4A:6F:87:A0:42:5D:23:24:89:4A:9D:61:D8:8C
X509v3 Authority Key Identifier:
keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:19:b5:92:8f:35:50:5b:2b:6c:a1:93:8a:61:eb:94:ca:
44:82:54:29:88:1d:72:ae:d8:06:06:d1:52:06:6c:b6:9b:f5:
21:01:fe:46:f1:da:3a:b6:6d:f9:27:a7:89:45:2a:8d:14:21:
a9:ba:31:3d:cb:9a:0c:bd:30:f3:f3:62:dc:35:43:0e:3c:b6:
cc:cf:19:84:71:11:1e:0b:b4:c2:17:6a:83:39:fb:c4:bf:48:
bc:15:8f:0d:e1:62:ca:b5:c6:4a:bf:b4:89:46:a2:22:e0:f5:
17:e9:fd:e9:56:f2:b4:c6:1e:fa:ed:ac:84:90:52:2e:a1:0c:
30:75:79:a0:34:53:6a:6d:b9:c1:60:a6:7a:4b:ea:6b:5d:47:
6e:12:87:1c:db:97:ea:8c:81:61:7e:c4:13:fc:8a:97:11:ab:
07:60:1b:04:c8:e8:59:a6:63:70:de:5c:7d:78:4c:e5:f6:ff:
3b:be:e8:07:09:d7:bf:9e:34:8e:52:b9:f2:3d:47:f6:d4:46:
5e:53:23:24:e5:86:73:2b:11:98:8e:db:c6:ef:69:04:09:9f:
23:f2:c2:46:ed:3e:e6:43:08:a3:c5:5e:78:d5:e3:55:6d:ef:
7a:5c:25:ad:ec:49:29:2e:89:58:98:b2:ab:64:01:ac:11:35:
ea:b1:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:06 2025 by rpki-client