Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: nsLfYqgY2AiKPww5KcBNq8nsy2ND0wd5UMrPJeYQKq0=
Subject key identifier: B1:F8:F8:DB:B3:C3:6A:B7:F8:F0:83:B5:67:D2:0E:B8:88:39:6C:AF
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0195E1901D80E148F343CE29D40FC816900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 1387
Signing time: Sat 29 Mar 2025 11:01:13 +0000
Manifest this update: Sat 29 Mar 2025 11:01:13 +0000
Manifest next update: Sun 30 Mar 2025 11:01:13 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 22OEm3KWIw+681UM7iRZZJWrv8LAZcJJeBN9HwIf5co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:1d:80:e1:48:f3:43:ce:29:d4:0f:c8:16:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Mar 29 11:01:13 2025 GMT
Not After : Mar 30 11:01:13 2025 GMT
Subject: CN=b1f8f8dbb3c36ab7f8f083b567d20eb888396caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:a2:d2:a1:38:09:35:6d:d9:15:50:85:77:
4f:a8:a1:59:bd:89:b0:fa:e9:fb:69:41:6d:b6:8b:
a7:e4:89:44:1c:a2:39:d5:e0:47:14:fc:f3:48:a1:
31:78:f9:ea:a7:72:96:60:0e:bc:5e:21:40:ff:ee:
b1:b4:04:10:b8:97:3a:36:e2:3e:c5:ad:98:7e:d2:
c1:79:30:f4:87:f1:b6:fd:1b:26:6f:fd:7e:93:0f:
22:b2:04:53:70:6f:00:dd:db:57:09:40:88:74:e8:
69:82:99:5a:70:16:0b:70:d4:ec:18:65:39:bd:e3:
fc:1e:0f:66:8b:71:b3:48:88:44:f6:05:fa:ce:f1:
38:08:56:9b:a2:11:14:8f:2c:8d:56:d6:e6:4b:56:
d8:0c:39:59:ff:fe:0f:64:0b:4d:34:25:de:dc:d0:
d0:e3:1f:bc:44:f8:b9:09:18:0a:d5:f2:cb:86:b7:
1c:4d:7e:3e:10:23:cf:9c:76:7d:08:85:7c:0b:95:
bb:7d:d6:74:6c:93:3e:c3:69:b7:a3:5d:0a:e6:0f:
fa:68:f4:8e:b3:55:b2:4c:51:d5:33:66:dd:81:1b:
6e:08:e9:2b:32:65:99:1c:45:1a:8a:73:87:a7:a2:
e9:9a:d1:53:62:9e:d2:5c:7e:09:c7:28:94:49:58:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:F8:DB:B3:C3:6A:B7:F8:F0:83:B5:67:D2:0E:B8:88:39:6C:AF
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:aa:a4:ea:ca:21:08:15:49:b5:18:19:a2:9d:c4:00:99:4e:
b7:d7:f4:29:5a:1a:d4:7d:9f:4b:a2:6d:29:ef:96:f3:6c:60:
91:74:21:13:cd:43:3c:a2:cb:01:4f:54:18:c7:bb:a0:14:be:
dc:2a:e5:89:7d:73:c6:18:1c:ba:e0:fd:c2:55:01:42:f0:0a:
0b:54:31:8f:85:1f:d3:2e:a7:86:16:2d:c3:b5:35:ee:ac:3f:
89:b6:37:f4:82:04:c5:7a:6f:dc:78:c7:1e:83:18:7c:93:6f:
0c:5b:8e:7c:5e:d7:55:9b:5a:c6:71:4e:9f:90:ad:af:76:40:
65:a0:19:7b:62:6e:f3:71:8c:e2:8d:86:af:cc:10:b1:ef:7c:
06:22:d8:ae:a8:33:85:d0:c3:3f:e5:4a:c5:ac:1f:b9:be:df:
f3:e9:20:51:84:70:b2:ee:b2:fd:b1:3b:a3:5f:1d:ba:b0:59:
10:c0:45:34:88:ee:b5:b0:5e:30:fe:b1:c4:4f:c8:ad:ba:5d:
77:3d:da:36:38:dd:bd:1f:88:2b:83:e6:5e:07:b3:ce:cb:3d:
12:09:6f:88:cd:05:23:ac:b0:75:4e:8d:e0:93:c3:90:f3:cb:
66:b6:a6:2b:dc:3b:b0:93:03:aa:25:29:80:db:63:29:91:6f:
42:11:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:06 2025 by rpki-client