Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: 62skOdJ/nHpxTIJRBeScyusuOy1JYjhAlnneFlqwM08=
Subject key identifier: 52:0E:30:BC:F4:DB:7F:22:2B:AB:A0:84:30:2A:B4:0F:27:E6:EF:B7
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0195E046EF77635F5FB74DCE71416549D395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0CDE
Signing time: Sat 29 Mar 2025 05:01:39 +0000
Manifest this update: Sat 29 Mar 2025 05:01:39 +0000
Manifest next update: Sun 30 Mar 2025 05:01:39 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: muF6bagjnYJ+m7rvqke0nkUlAm13rIor1xNMI4BjIw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ef:77:63:5f:5f:b7:4d:ce:71:41:65:49:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Mar 29 05:01:39 2025 GMT
Not After : Mar 30 05:01:39 2025 GMT
Subject: CN=520e30bcf4db7f222baba084302ab40f27e6efb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:f8:c5:07:dc:08:df:5a:ce:93:25:0d:a3:
b5:f0:8a:24:4d:fc:e7:53:6b:20:04:1c:a1:d8:67:
b4:b3:b2:37:6e:5a:c2:a3:d8:0e:00:d9:f4:9c:21:
16:f4:28:b0:3e:6c:ab:8c:ad:a0:f1:85:85:de:dd:
70:1e:a3:f3:ce:a4:29:06:f8:84:d4:45:69:35:2d:
bf:f6:d5:54:22:6a:0b:20:98:e1:82:12:64:51:35:
e9:70:4e:86:8a:b6:c5:c8:19:b0:b4:46:9b:79:86:
80:5f:cb:d8:0a:c2:a3:ed:c3:93:3a:f1:f8:6d:ec:
3b:2b:3d:87:3a:4a:9e:d3:bb:1a:95:89:24:22:af:
8d:ca:c0:25:5e:64:ae:5b:91:bc:98:64:e4:b8:5d:
1e:b4:d9:63:75:3f:ce:d5:6f:53:2b:eb:ea:cf:75:
48:5f:b2:4a:41:3f:d3:3a:56:0b:c6:9a:37:94:24:
35:c8:98:b0:d9:74:7c:06:7a:14:a7:81:f0:b1:99:
dc:5b:01:bd:36:15:1b:6b:3b:fb:68:ff:48:fb:82:
3a:4f:31:71:71:36:e8:7b:b2:3e:b1:ef:b6:30:92:
a2:6a:99:1b:a8:2d:52:3b:6b:bb:70:67:2e:56:15:
76:20:04:4e:40:45:46:5a:0c:a5:26:4b:22:e2:cb:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:30:BC:F4:DB:7F:22:2B:AB:A0:84:30:2A:B4:0F:27:E6:EF:B7
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f1:90:6e:bd:ff:c8:d5:0d:58:a5:67:96:22:1a:46:a3:8b:
0e:f0:5b:5f:0a:97:4f:18:66:3b:19:1c:44:2b:b9:61:9d:a3:
80:90:ae:07:1e:44:31:01:7b:96:4b:79:8c:56:ec:ad:df:b2:
e4:13:7e:4f:84:d9:2b:6d:8c:25:f9:62:7c:74:a2:58:98:4a:
29:a8:d6:bb:0c:0c:64:70:3c:04:a9:60:f4:49:62:bf:4c:e0:
24:52:b2:81:d9:ac:2a:bd:24:91:bc:29:8a:6f:ac:6f:2d:25:
bd:b3:fa:5d:9a:34:c3:5d:c5:9e:4f:e1:c0:12:0e:95:b3:65:
9d:7d:11:ab:5e:ff:6c:81:c5:5e:23:20:56:ff:86:07:1b:7c:
6a:1d:09:23:03:a1:1c:8c:c8:8a:4e:ca:78:8b:7e:f9:b5:08:
72:16:e5:d7:14:b4:35:24:c8:79:47:2a:74:1c:27:ae:30:2e:
4c:e7:c7:35:63:a4:43:b4:11:87:d0:c1:7a:23:d9:05:b0:99:
12:27:23:2d:f4:c7:41:c7:92:e2:15:c6:5f:97:27:e4:5b:f5:
2c:c8:f2:75:4f:39:a7:6b:2c:c3:d2:81:06:c0:77:3f:43:ea:
73:ed:43:10:dd:46:56:cb:78:19:4b:80:c2:65:02:a2:8f:de:
f5:c5:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:29:21 2025 by rpki-client