Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cad244-3995-4d41-886b-ac463e221974/1/jX3LNj2aw0vcm2mA8mht0hnVAlc.mft
File: jX3LNj2aw0vcm2mA8mht0hnVAlc.mft (raw, json)
Hash identifier: u3nOF0gcnMq+TLMENnS59tSv+BLTNSwNFSIniw7n6Fo=
Subject key identifier: E4:AA:61:15:4C:BA:F9:33:27:68:86:2D:0C:00:D3:1B:A6:43:C6:44
Authority key identifier: 8D:7D:CB:36:3D:9A:C3:4B:DC:9B:69:80:F2:68:6D:D2:19:D5:02:57
Certificate issuer: /CN=8d7dcb363d9ac34bdc9b6980f2686dd219d50257
Certificate serial: 0194060EF9A8BD14DD867C7F37C62C6E3C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX3LNj2aw0vcm2mA8mht0hnVAlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cad244-3995-4d41-886b-ac463e221974/1/jX3LNj2aw0vcm2mA8mht0hnVAlc.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 03:00:32 +0000
Manifest this update: Fri 27 Dec 2024 03:00:32 +0000
Manifest next update: Sat 28 Dec 2024 03:00:32 +0000
Files and hashes: 1: gmos_o1cMaNkUUUQtaQu8rmgHtI.roa (hash: PEW0KvbqwEERgExWNMUIVGd0yP+2+2oycXIcXkPHl74=)
2: jX3LNj2aw0vcm2mA8mht0hnVAlc.crl (hash: lzyXJyTFNucgcBAHuUyK5fQsR1V4B7TtpBBkqkGlxP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:0e:f9:a8:bd:14:dd:86:7c:7f:37:c6:2c:6e:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7dcb363d9ac34bdc9b6980f2686dd219d50257
Validity
Not Before: Dec 27 03:00:32 2024 GMT
Not After : Dec 28 03:00:32 2024 GMT
Subject: CN=e4aa61154cbaf9332768862d0c00d31ba643c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:93:61:26:c0:d5:cc:63:83:e9:dc:11:bb:
7e:20:23:03:5f:53:26:50:96:94:6e:ae:57:f0:8f:
90:9a:dd:22:e5:92:8d:c3:70:4e:96:d2:82:f0:f1:
cb:b6:27:1b:d6:00:bd:a7:42:16:a9:d5:b0:58:49:
b6:f9:e4:f1:bf:d2:42:2f:01:67:5e:fb:53:28:9f:
53:76:c8:d0:c2:b7:41:59:b1:25:25:27:ea:14:2f:
4b:3d:06:f7:7f:f9:a5:eb:e5:4d:9f:7b:65:d6:90:
ba:14:2d:82:b8:cb:d2:ea:26:02:68:ee:e1:d6:fb:
52:f4:0e:dc:14:42:75:e8:0b:de:3c:fa:d1:cd:7f:
c9:ec:fe:64:43:3a:b7:d1:0f:d1:52:10:81:ee:a4:
39:0c:f3:17:78:77:7a:3a:5b:f9:5d:62:1e:a3:6c:
53:39:81:1b:50:91:3b:66:e3:57:f6:5b:1f:2b:8e:
cc:b0:a0:84:24:5c:e9:62:20:80:e8:37:d8:7e:14:
f1:8a:e5:45:98:1b:8e:06:0b:a1:1d:35:03:bf:03:
f1:38:09:42:5f:4a:bc:7f:be:df:63:b2:57:cd:1f:
d2:2f:a3:63:06:8f:86:15:b9:1c:aa:d6:7a:31:93:
f3:5e:8b:c9:46:e7:be:a5:6d:aa:6e:d5:5f:13:d2:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:61:15:4C:BA:F9:33:27:68:86:2D:0C:00:D3:1B:A6:43:C6:44
X509v3 Authority Key Identifier:
keyid:8D:7D:CB:36:3D:9A:C3:4B:DC:9B:69:80:F2:68:6D:D2:19:D5:02:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX3LNj2aw0vcm2mA8mht0hnVAlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cad244-3995-4d41-886b-ac463e221974/1/jX3LNj2aw0vcm2mA8mht0hnVAlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cad244-3995-4d41-886b-ac463e221974/1/jX3LNj2aw0vcm2mA8mht0hnVAlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:ba:3a:9f:4d:8a:1f:95:53:c7:b7:37:2c:78:35:7d:ac:
6a:d8:d5:57:f8:60:34:e1:fa:0a:41:eb:17:32:3e:10:af:9c:
f9:ef:4d:67:b9:7f:12:34:ba:69:97:3f:ce:e5:73:ef:01:53:
6d:26:50:77:ab:c6:2b:1f:08:6d:32:98:1e:83:e3:42:60:20:
93:43:a7:bf:e2:25:66:ee:5f:c9:34:ad:b2:db:18:f9:75:c0:
d0:b5:eb:b4:4e:66:cf:b6:8a:c9:bd:b7:34:f9:cc:35:a6:62:
fa:19:19:54:29:13:a9:1e:d2:49:72:91:7a:8b:24:13:2d:a3:
cb:25:f9:da:64:df:8b:3a:fa:c9:54:6c:3b:18:e4:0c:e7:6c:
e7:6d:05:f7:a1:cd:43:13:0e:94:75:aa:8e:69:e7:7c:69:60:
21:4a:01:01:63:19:5f:dc:fd:6e:33:6c:09:43:43:be:89:9c:
bd:31:8f:76:28:19:a4:9c:c6:65:61:5c:fc:e9:a2:84:54:cf:
d5:e3:18:bf:46:1e:9a:14:50:3f:11:2f:7d:0b:1d:66:95:65:
3a:e3:a6:e9:09:fd:40:7d:51:c0:d9:7f:b2:5c:79:20:78:72:
d0:b9:e2:0e:fe:ad:bb:7d:04:51:a4:36:4e:d3:e9:c0:a3:0a:
a3:24:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:47 2025 by rpki-client