Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.mft
File: JtCyopVLXnVxZERNQrvooUrZtp4.mft (raw, json)
Hash identifier: tpvQ1N/Wl9x4GqvYTmNABtP1fxy1HyIWvR38eKr0/B8=
Subject key identifier: 40:A3:7B:4D:9C:51:08:81:12:25:16:A4:E3:8A:5B:2C:A8:E3:E0:80
Authority key identifier: 26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
Certificate issuer: /CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Certificate serial: 01922154D480B1ED9D1FD0C886A8F0ABC559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.mft
Manifest number: 0803
Signing time: Tue 24 Sep 2024 00:01:00 +0000
Manifest this update: Tue 24 Sep 2024 00:01:00 +0000
Manifest next update: Wed 25 Sep 2024 00:01:00 +0000
Files and hashes: 1: JtCyopVLXnVxZERNQrvooUrZtp4.crl (hash: KOT05WgLTRYzAUAfRRKyBh0nQDLpT2Kw1S7txUX1BJs=)
2: Se17ukltnn_VdOiwi0F-9x7V0H4.roa (hash: cQI1a6UJ8odqRIdaupRKSqDmFwRoHs193l5zydhjWhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:21:54:d4:80:b1:ed:9d:1f:d0:c8:86:a8:f0:ab:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Validity
Not Before: Sep 24 00:01:00 2024 GMT
Not After : Sep 25 00:01:00 2024 GMT
Subject: CN=40a37b4d9c510881122516a4e38a5b2ca8e3e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:7c:8d:cf:ae:8d:44:a2:66:dc:72:3a:09:
a1:8e:65:20:1b:12:ca:d9:e7:c1:59:d0:9b:57:3f:
db:eb:8d:ff:89:85:62:2b:6b:ae:df:b1:96:fc:55:
fe:51:fa:ad:4f:15:e6:c4:92:b0:fb:09:13:1c:ac:
1d:c4:8b:95:d0:ae:d9:87:56:c4:99:d3:3a:3a:28:
f0:b7:da:85:0c:02:cf:5f:f2:eb:e4:b6:68:61:34:
3e:89:48:dd:4f:4e:94:11:f5:02:2f:19:37:7b:75:
8a:55:9c:99:5b:8d:49:39:0e:b7:ea:ac:28:40:95:
85:5e:f6:74:cf:77:31:87:6f:a8:f2:c1:1f:d9:87:
b1:d9:92:62:57:84:8f:8d:99:19:77:b1:db:7e:6d:
0b:3f:23:2b:c6:4a:37:b5:32:2d:63:14:95:80:00:
8f:cb:51:4a:e6:8d:14:30:4d:ed:f0:23:5b:f8:45:
88:4d:00:ad:17:47:34:84:c9:a0:4c:20:15:31:44:
1a:00:1e:32:62:39:2f:13:2c:27:00:ee:ff:61:71:
b0:05:a0:bf:75:5a:dd:d3:f9:1c:f3:ee:e6:00:76:
7e:45:e5:02:54:56:99:e5:a1:fc:df:ba:45:69:34:
da:ee:e7:e4:62:95:6d:01:40:30:ce:64:71:4f:75:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:7B:4D:9C:51:08:81:12:25:16:A4:E3:8A:5B:2C:A8:E3:E0:80
X509v3 Authority Key Identifier:
keyid:26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:04:9c:4a:5f:d6:38:8b:14:ef:7d:37:02:df:e2:af:ea:4f:
ab:e7:7b:df:ca:e5:33:51:35:22:21:41:05:87:c3:dd:bd:75:
85:2b:0d:aa:b7:15:8b:ec:3f:26:d7:d7:d0:ed:5a:7f:9b:14:
61:36:4e:94:e1:b4:64:8c:0a:2d:e0:db:5b:bc:33:c9:38:f2:
c7:17:95:1d:93:cb:92:4c:2e:22:29:64:19:38:34:ac:4d:bd:
43:09:75:67:0f:5b:3b:e3:eb:32:d4:d3:59:39:f3:68:a4:ae:
8f:76:f9:93:4f:1b:22:eb:2f:1f:a0:aa:08:f1:d1:14:05:a9:
49:69:f5:8d:37:9e:4b:47:83:f8:69:9d:97:dd:5e:11:38:04:
0d:53:eb:d6:eb:9f:78:e6:30:3c:0c:1a:20:83:32:0c:ba:aa:
ee:7a:63:7c:ef:ea:2a:8c:d7:b0:bc:00:26:dc:da:bd:2b:91:
aa:13:9b:9f:c1:34:b5:91:92:92:8f:f8:5c:b2:23:86:76:ff:
65:1e:b5:c9:71:68:30:91:6b:56:c7:ad:7f:6d:c2:9a:8a:34:
3d:8d:17:dd:a1:f4:43:3b:bd:09:82:cd:9e:5f:52:15:8a:48:
60:91:d3:e3:16:ca:2b:46:73:4d:b9:16:ae:17:66:58:35:ff:
21:2b:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:04 2025 by rpki-client