Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/jVA8D1MDRr072Rrij2REL2eW578.mft
File: jVA8D1MDRr072Rrij2REL2eW578.mft (raw, json)
Hash identifier: o5d2mnC1K8TGOigAlKK9H3lYioQJ+4AboQ6YtUSOVXQ=
Subject key identifier: 5A:D6:6B:C1:0F:86:CD:D9:EC:98:61:B5:86:E4:B1:1C:31:7E:34:AE
Authority key identifier: 8D:50:3C:0F:53:03:46:BD:3B:D9:1A:E2:8F:64:44:2F:67:96:E7:BF
Certificate issuer: /CN=8d503c0f530346bd3bd91ae28f64442f6796e7bf
Certificate serial: 018C62311C72A3411839B4C5BDA06C90E821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVA8D1MDRr072Rrij2REL2eW578.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/jVA8D1MDRr072Rrij2REL2eW578.mft
Manifest number: 08A7
Signing time: Wed 13 Dec 2023 08:00:34 +0000
Manifest this update: Wed 13 Dec 2023 08:00:34 +0000
Manifest next update: Thu 14 Dec 2023 08:00:34 +0000
Files and hashes: 1: 7kMJyS2uD5GdI6wZCq6oZqVA-1I.roa (hash: qjBe5hBNyAmR7DkkEZH2JYRHlkJIfTTMi+Bs+OdbSxg=)
2: jVA8D1MDRr072Rrij2REL2eW578.crl (hash: OqFIPFOvnMuVmBpayDCqroShLlz1DqCZw6WIAPr6S4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:31:1c:72:a3:41:18:39:b4:c5:bd:a0:6c:90:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d503c0f530346bd3bd91ae28f64442f6796e7bf
Validity
Not Before: Dec 13 08:00:34 2023 GMT
Not After : Dec 14 08:00:34 2023 GMT
Subject: CN=5ad66bc10f86cdd9ec9861b586e4b11c317e34ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:99:ce:69:df:01:2c:38:46:aa:82:bb:08:
e1:fa:ad:6b:a1:89:31:d6:ad:bb:ec:72:80:96:40:
57:2b:c0:ad:12:cd:9a:00:82:27:d8:33:88:13:f2:
b9:36:6d:cf:c3:21:61:8b:c6:1c:b8:af:3f:81:4c:
4f:3f:10:8e:6a:89:1c:2e:57:29:f7:fd:7c:18:d9:
0f:d0:f4:47:41:14:89:a9:67:c4:15:c6:aa:d2:ee:
8f:e8:35:10:6d:26:df:d8:45:91:7d:c6:2d:2d:d6:
d4:9d:4d:1c:52:26:d1:a0:2d:98:ce:54:94:59:6d:
a2:de:71:41:75:7c:a8:2a:26:b2:73:76:f5:55:ff:
99:76:88:4d:0f:06:c6:a7:34:5d:d0:e0:93:2f:a1:
49:46:cb:3a:69:13:d0:5b:c1:6d:b6:5d:e8:f5:89:
2b:36:91:f9:4c:09:3e:27:2c:19:ef:68:b3:fd:20:
09:16:ec:9c:13:6f:21:9e:49:d2:8e:03:18:72:1a:
71:a7:4c:09:52:c4:e0:7f:04:35:24:db:25:38:5d:
3d:a1:de:49:f1:6f:9c:b4:01:ec:d9:55:78:f9:e6:
db:97:d0:3d:16:a5:db:be:6a:31:46:0b:b6:e3:c0:
0e:b1:1a:38:c2:7b:ef:64:0f:6d:e0:4b:5f:53:99:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:6B:C1:0F:86:CD:D9:EC:98:61:B5:86:E4:B1:1C:31:7E:34:AE
X509v3 Authority Key Identifier:
keyid:8D:50:3C:0F:53:03:46:BD:3B:D9:1A:E2:8F:64:44:2F:67:96:E7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVA8D1MDRr072Rrij2REL2eW578.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/jVA8D1MDRr072Rrij2REL2eW578.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/jVA8D1MDRr072Rrij2REL2eW578.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:d3:23:90:3e:e4:ca:41:f5:20:c4:99:0d:76:ce:44:48:
e8:df:5c:55:08:34:21:bb:c5:92:43:8c:80:97:18:9f:d6:53:
53:e2:6a:cd:e9:11:bd:72:a9:1d:e9:96:2a:01:db:89:ac:1c:
4e:a5:1e:0f:66:ba:35:7a:94:50:25:08:64:f3:2d:9c:de:71:
a0:10:64:0a:43:1c:f3:70:1e:6a:29:b1:91:fe:ed:c1:cc:dc:
e2:90:ab:9e:b2:ec:1f:7e:7f:6f:6c:15:3a:f5:f7:20:01:b4:
33:ad:05:7c:ff:29:e4:83:f4:6b:72:ed:f5:ea:25:76:55:66:
c5:a2:29:e7:b3:25:cd:3c:69:a5:1e:31:c4:38:19:dd:f2:73:
30:57:4e:ee:4b:cc:5d:45:70:88:8b:43:e7:f9:68:0f:1c:da:
68:f1:7d:0b:f6:77:ea:2e:b8:de:2d:84:e5:35:93:1c:c0:9b:
41:9e:56:89:fc:d1:f4:63:ec:da:4e:1d:59:b9:f6:9c:95:cb:
c7:f4:16:ef:a3:b2:78:3d:43:f9:10:dc:ab:8d:55:61:37:b1:
be:aa:ad:75:39:49:69:0f:2f:eb:2b:ac:be:f4:a2:9c:d9:00:
4e:6b:93:dc:8c:fb:0e:9a:c6:c6:29:f5:b2:11:fd:82:61:22:
cb:35:d7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:55 2025 by rpki-client