Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.mft
File: Jc9QaGbXuF9-9oir2DBsJJac_s4.mft (raw, json)
Hash identifier: PejJWxZ3cjb8olLpgI/vtWN0N40Dp3xAGBYNggy/0mA=
Subject key identifier: 29:F3:2A:87:36:77:DB:79:B4:53:49:39:9A:AB:34:54:3D:5F:67:66
Authority key identifier: 25:CF:50:68:66:D7:B8:5F:7E:F6:88:AB:D8:30:6C:24:96:9C:FE:CE
Certificate issuer: /CN=25cf506866d7b85f7ef688abd8306c24969cfece
Certificate serial: 018B6A2472CD099D91DFC05A01CD82D5B977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc9QaGbXuF9-9oir2DBsJJac_s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.mft
Manifest number: 01D0
Signing time: Thu 26 Oct 2023 04:00:55 +0000
Manifest this update: Thu 26 Oct 2023 04:00:55 +0000
Manifest next update: Fri 27 Oct 2023 04:00:55 +0000
Files and hashes: 1: Jc9QaGbXuF9-9oir2DBsJJac_s4.crl (hash: IAnR6v7dW4s2m2KaPFauU36lXEH0WIOXEW32PkkoijY=)
2: qPByctRkaKni4seqo9qZDMgaFFg.roa (hash: rRtdnlHPoBz9kCQZ7kovXaJ6P1HzhxWgV+P53Te3zls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:24:72:cd:09:9d:91:df:c0:5a:01:cd:82:d5:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf506866d7b85f7ef688abd8306c24969cfece
Validity
Not Before: Oct 26 04:00:55 2023 GMT
Not After : Oct 27 04:00:55 2023 GMT
Subject: CN=29f32a873677db79b45349399aab34543d5f6766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:06:7c:f9:01:7b:de:c4:25:03:c3:33:2e:
60:41:0e:f8:d4:67:b8:3d:d6:21:17:25:fa:47:95:
4e:6d:10:40:8d:59:cc:86:9b:63:e3:dc:19:75:5a:
b2:e4:71:b4:cf:00:78:87:05:04:9f:ce:be:49:8e:
81:17:3d:62:18:82:90:88:45:c1:01:24:60:d9:7f:
f1:b4:67:f1:76:a9:29:2b:ab:fb:6c:8c:04:e9:61:
1b:cd:51:df:a6:6a:33:30:6a:c0:ed:79:68:2f:03:
24:20:e0:8d:dc:11:ed:a5:f6:30:59:52:e6:52:da:
a9:3c:ad:5f:21:3b:3f:f8:35:c5:78:e7:b6:c0:79:
24:ae:0a:f1:bd:3e:e9:b1:97:26:89:a2:51:11:3e:
0d:3b:83:07:86:f1:ae:93:75:24:86:7f:47:c3:b6:
60:8e:2b:33:32:1b:b6:a6:10:a0:29:9c:80:ea:51:
5d:2a:3c:43:4d:e1:20:bb:1c:23:77:1f:a8:2b:d2:
ff:3b:3a:d6:57:54:27:ad:13:44:c6:01:5a:d3:00:
50:4d:61:2d:62:0a:66:29:63:7e:2e:01:af:ea:45:
8c:40:a9:e9:07:8b:b3:7f:2c:1d:cd:c7:27:1e:7d:
75:bb:df:e3:0b:e7:c2:41:0a:96:92:f9:39:4d:2c:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:2A:87:36:77:DB:79:B4:53:49:39:9A:AB:34:54:3D:5F:67:66
X509v3 Authority Key Identifier:
keyid:25:CF:50:68:66:D7:B8:5F:7E:F6:88:AB:D8:30:6C:24:96:9C:FE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc9QaGbXuF9-9oir2DBsJJac_s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:e5:07:19:21:6a:18:ca:ef:24:5b:bc:dd:44:65:97:22:
6f:28:b2:8d:bb:7c:0b:d5:9d:59:b3:e9:c8:67:ff:3a:9a:dd:
e2:10:6d:19:5b:c2:f3:60:b8:ee:72:37:bc:9d:9c:1f:aa:02:
f8:72:59:47:3f:2c:26:17:97:c6:db:d6:f1:72:36:0f:56:dc:
7f:1b:4d:04:e0:e3:88:79:6a:75:77:5d:d7:0a:71:3f:ec:a1:
ae:23:5f:ec:51:3c:8a:01:0a:f5:d9:04:2f:5d:fc:17:6b:95:
d3:01:a8:c0:9f:60:e8:1e:e4:da:2a:1a:1e:19:f7:d4:ee:ff:
b4:d3:2b:d0:dc:fe:cd:e0:ec:06:d2:90:8a:69:c3:31:95:1a:
74:70:8e:e0:1a:50:4f:23:48:2d:5c:14:a0:81:1a:04:61:c3:
06:94:44:38:01:86:f6:8f:9d:0f:31:34:a6:5b:6d:ce:7c:10:
18:07:88:f1:be:5e:db:b5:2f:d3:19:41:25:7d:aa:7a:f4:41:
a3:f0:a7:fd:41:b9:0d:f1:bf:08:f1:10:e5:a1:a3:7e:4d:e6:
83:0d:43:b5:5f:78:a0:3d:03:7e:79:71:0b:47:fc:19:e5:b1:
92:b4:03:80:7c:11:76:4a:b3:12:96:fa:0d:98:38:ed:77:0e:
fc:b5:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:16 2025 by rpki-client