Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: xiXbao4XXiCeeJiRQQgbOA2YwTS9z9Nf035aueYxVeo=
Subject key identifier: 0B:9C:4B:55:60:82:9A:25:3A:88:CD:E5:04:C0:BD:86:57:2C:03:CA
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 0195E1227E0034DCD14F3DC14F1DF2382087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 09:01:28 +0000
Manifest this update: Sat 29 Mar 2025 09:01:28 +0000
Manifest next update: Sun 30 Mar 2025 09:01:28 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: VN1Db0KsoyIftS/Pcv9iXM5du/8f30X9HsLyfXCD7CU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:7e:00:34:dc:d1:4f:3d:c1:4f:1d:f2:38:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Mar 29 09:01:28 2025 GMT
Not After : Mar 30 09:01:28 2025 GMT
Subject: CN=0b9c4b5560829a253a88cde504c0bd86572c03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:83:60:12:98:89:5e:a7:a8:d2:c3:4c:32:
79:db:b8:dd:00:a6:2d:db:21:71:e1:55:c2:97:49:
76:0f:77:04:5e:34:d7:88:b8:74:86:b1:6a:5c:15:
ff:91:43:ab:6f:1f:1d:0c:95:88:3d:4c:9c:92:d3:
30:18:55:5e:c5:85:0d:16:32:1b:3b:2f:23:35:46:
e6:8a:5f:d6:15:55:55:e6:05:72:ca:e1:dd:bb:dc:
8e:e3:f9:fd:f4:f3:3d:34:b4:13:0d:71:fc:fe:20:
e8:99:1f:6d:5e:10:29:af:8d:6f:5e:7e:87:3b:73:
62:38:4d:df:ac:63:3d:e6:49:de:3a:c8:3a:40:25:
5c:c6:0b:52:43:0e:52:9a:bc:91:a2:69:88:36:69:
0e:53:96:da:87:e1:1f:39:aa:2d:c8:ef:61:1b:31:
34:f4:13:37:b5:81:0c:73:9c:b5:70:1e:5f:1a:02:
7e:cf:a7:b3:eb:ba:e7:c8:55:b9:98:ef:9e:ab:e0:
d9:68:c7:aa:d9:e4:2c:2d:08:ee:80:95:a9:82:b1:
c8:9b:c5:58:dc:5a:8a:37:fc:70:c1:89:94:b4:07:
aa:59:e7:c0:b0:65:68:eb:71:43:cb:b7:23:85:9f:
c8:52:f0:e8:ae:72:64:5f:d7:23:45:01:e8:67:d0:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:4B:55:60:82:9A:25:3A:88:CD:E5:04:C0:BD:86:57:2C:03:CA
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:27:71:95:83:07:d2:83:37:4d:0e:58:e8:d3:f1:13:c1:
6e:a6:a8:be:9c:8a:ec:a1:de:a5:ac:26:3c:fc:bf:0c:a9:be:
6e:9c:95:01:f3:83:d4:ea:11:b9:f8:81:b8:d6:8e:11:c2:3b:
88:28:10:48:51:92:c5:ba:c1:5f:8f:dd:ba:5a:dc:30:e7:f9:
c5:9b:9f:04:7e:52:cb:8a:ca:d1:22:93:6d:c8:5d:09:47:d4:
a9:3b:82:d2:9d:00:74:59:85:fa:e0:96:58:23:1f:25:e3:40:
2a:ab:b2:59:90:53:4e:4b:6c:07:98:ef:94:ba:fd:b8:e4:59:
45:2f:e2:5b:20:82:2c:73:a8:8a:09:8f:c3:e8:1e:c3:a6:16:
51:11:38:f0:10:b6:fb:b4:fb:36:6d:74:af:c9:9c:bc:c5:67:
b4:fe:a8:06:4d:3a:e8:33:b7:92:55:ff:d8:f5:6c:96:4a:67:
0d:6a:a3:70:5d:a0:33:d8:25:36:df:57:d8:83:15:50:91:bd:
94:9b:73:1d:71:6c:a7:02:8d:b5:a3:9c:f2:89:dc:d4:2e:63:
e8:83:f2:9c:a9:4b:d4:77:70:38:c2:1e:d3:5b:5f:b2:7c:72:
61:5d:1f:3e:41:ca:d5:c5:8c:46:0b:7b:58:53:be:da:cf:d4:
f7:87:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client