Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File: JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier: cblo03zZYCBuelbQgQZfnC9UK3TUnvvKaUkZAUSSTxE=
Subject key identifier: F2:0B:D4:05:EC:9C:0C:46:DC:BF:89:FD:74:A9:05:90:97:11:A4:D5
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0195E1224479FF3CAFA0EA6AABD4AECEFB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number: 0229
Signing time: Sat 29 Mar 2025 09:01:14 +0000
Manifest this update: Sat 29 Mar 2025 09:01:14 +0000
Manifest next update: Sun 30 Mar 2025 09:01:14 +0000
Files and hashes: 1: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=)
2: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=)
3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: KCjSXy+H+WOSbcufaV6UUkuIVktUt53nLjyRjFO87gI=)
4: NOYpdId-JNJf9_sRuwA-DUzQlYs.roa (hash: eZi7sfmH9LgjRlcvnNcPttx33RWbBfBnGD1dU/ZoYek=)
5: _VjKlmvzYVy8ktZu-wqjmjiAJmo.roa (hash: sT06t+r7xF4EKER4Eq9ja2KenwXiwwXnRLng7zaXna4=)
6: oLLFimpiIjJAatRY99k9UQMOCQQ.roa (hash: wTcQB20VYZ/GbSK9GTTzmMAtJntg2q+//028FiIAhtc=)
7: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:44:79:ff:3c:af:a0:ea:6a:ab:d4:ae:ce:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Mar 29 09:01:14 2025 GMT
Not After : Mar 30 09:01:14 2025 GMT
Subject: CN=f20bd405ec9c0c46dcbf89fd74a905909711a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:ec:4b:e0:16:c2:76:d8:ed:76:50:6d:1a:
d6:34:97:44:e4:fc:b2:86:18:49:87:03:c5:90:21:
dd:bf:37:cc:50:37:d0:ba:85:fb:80:4b:34:d3:c4:
ee:43:c4:03:3a:cc:88:e8:33:c0:16:82:9b:13:ba:
5f:0a:d5:5d:75:1a:33:63:c4:15:88:c3:bc:a2:60:
7e:c6:58:ce:94:9f:c2:20:98:b8:4b:06:52:00:4b:
5d:3b:b2:24:e9:67:a4:3d:88:06:5a:e9:64:7a:d7:
01:5c:02:3f:ec:0d:bd:fc:6b:58:14:d7:c2:31:27:
1f:84:3e:1c:0f:03:bc:85:f6:f8:05:5f:81:bc:43:
1f:d7:18:41:6e:20:91:74:ed:71:f9:3c:17:8a:10:
f8:0b:3c:93:60:0d:b2:0e:ed:64:aa:1f:e2:45:e0:
b8:9d:d5:2b:e6:0d:eb:ae:17:35:6a:d5:fe:96:c5:
79:d3:0c:7c:03:0f:f9:f9:9c:8c:49:86:aa:fa:cb:
03:b4:7c:b7:f8:50:d0:52:9a:8a:62:69:de:29:c7:
1f:31:7f:22:dd:eb:12:44:e9:88:0d:bb:4b:3d:c6:
f6:74:63:b0:eb:2d:c7:09:75:e9:2b:0a:ec:e4:c8:
30:53:66:13:3d:53:78:71:11:0c:ec:ac:84:c1:bf:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0B:D4:05:EC:9C:0C:46:DC:BF:89:FD:74:A9:05:90:97:11:A4:D5
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:fe:e3:3b:69:3a:02:30:0c:f4:5c:5d:7f:d8:65:4b:2d:
c7:a0:1d:07:a2:8b:da:ab:84:c6:a7:b2:2c:ae:2b:ae:06:10:
65:59:ab:84:12:16:38:2e:39:a7:aa:e8:e2:0e:d2:e9:d8:7d:
7d:1a:e1:34:6b:f4:cd:25:78:45:cc:fa:4d:5e:39:c5:60:de:
fe:79:cd:85:03:6f:1a:b9:e6:38:c9:db:8b:2e:a5:ee:a8:b8:
ca:30:c1:7c:0c:78:64:3c:69:d6:f5:00:df:af:5d:f7:31:18:
44:c7:48:c7:aa:cc:17:f1:4b:38:ed:a8:c7:c3:f8:32:88:36:
60:92:d6:71:b2:db:e9:9d:bb:7b:ed:d6:90:af:77:e2:03:43:
ec:23:cc:5c:f0:df:e9:71:b6:93:30:c8:cc:58:e6:cb:6e:86:
25:3b:ea:a8:d6:71:f6:0f:52:ef:e1:2c:64:c0:9e:09:97:d0:
43:74:79:bc:e2:d2:50:4d:30:2a:76:f9:18:bb:96:d0:f0:ca:
9a:1e:23:d0:be:19:66:0c:58:b7:97:25:51:0f:b8:f7:b2:df:
fc:18:eb:c4:87:ff:a6:7a:f1:49:09:1d:39:cf:ba:82:50:f9:
0a:97:93:ba:dd:a2:d0:c4:5e:71:db:84:a2:ee:89:4c:a4:3f:
86:a1:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:18 2025 by rpki-client