Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier: 7/hsbAIvZZk0d2yhXprxL8BWR5SLvBtkQ0DPjAuyo+g=
Subject key identifier: 5C:B3:E5:6D:26:21:1E:1C:66:EF:E0:BF:50:CE:B8:25:D6:46:CB:17
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 0195E190770D33EBE8218E61ADE0B322DFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 11:01:36 +0000
Manifest this update: Sat 29 Mar 2025 11:01:36 +0000
Manifest next update: Sun 30 Mar 2025 11:01:36 +0000
Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: Urx3Mv4+BXPKYy32e70FE+X6qFbLqL48huQtL8DAo1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:77:0d:33:eb:e8:21:8e:61:ad:e0:b3:22:df:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Mar 29 11:01:36 2025 GMT
Not After : Mar 30 11:01:36 2025 GMT
Subject: CN=5cb3e56d26211e1c66efe0bf50ceb825d646cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:12:ba:c0:95:30:91:f0:68:c4:9d:6b:7a:
fb:03:1b:3d:c8:ae:25:b4:8e:d0:b2:29:cb:7a:80:
1e:9e:c2:3a:26:e7:f5:9e:a0:bf:c2:c5:75:bf:34:
5d:fd:63:df:b5:d8:6d:fd:37:ce:26:ee:45:a7:fa:
8a:6b:34:5c:1c:23:d8:63:11:64:20:8c:b2:5b:21:
64:4e:42:3c:a6:58:1b:96:09:ce:45:6e:59:9a:e7:
3e:ea:09:05:d8:dd:66:64:e7:83:f2:1f:6b:d3:51:
32:9d:92:9d:b7:63:b0:51:a2:e5:e8:36:f3:7d:03:
e0:f2:6c:a0:60:45:96:94:3f:67:2b:01:44:57:8c:
35:78:d3:bd:f7:86:bb:41:e0:76:e9:28:63:12:4b:
21:cc:1f:e0:68:b7:89:22:32:56:05:db:03:e0:d4:
32:1e:ac:34:1d:85:1f:c2:32:ae:b1:c6:13:a1:48:
39:c8:92:41:cf:29:24:ce:c2:ec:ed:a9:7e:03:55:
b1:d5:8e:cc:e7:6e:8e:e8:f1:e8:e7:d4:63:3d:6b:
5a:48:9e:d9:7f:6f:d9:5b:01:8a:c6:b4:6a:c5:f3:
6a:cf:74:b8:b1:5a:fa:84:33:9d:ca:36:17:15:66:
87:92:be:8d:fc:57:13:8f:92:86:ce:8d:42:a2:de:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:E5:6D:26:21:1E:1C:66:EF:E0:BF:50:CE:B8:25:D6:46:CB:17
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:45:2a:ee:96:37:1f:47:12:f0:b6:ae:e3:6b:25:40:f8:ee:
6b:50:48:35:cb:e8:b9:7e:b5:d7:d6:70:46:10:6b:6f:5b:e6:
48:d1:8b:09:2f:ce:37:a2:43:54:0e:95:40:1a:40:43:ec:45:
f9:7e:34:25:cf:90:ff:a4:1b:74:e5:5f:7e:ca:64:85:43:e9:
f8:98:a5:8c:85:3e:13:e5:42:ea:ec:77:40:54:6c:84:70:00:
c1:f8:09:2a:e2:77:10:c0:6f:93:12:d8:f3:80:78:24:18:fa:
14:0a:ac:0f:c8:09:da:9f:1e:54:42:4a:a8:ce:b2:84:9b:df:
49:10:74:12:c7:0d:74:da:d5:81:91:6b:b6:91:28:06:37:b1:
0c:16:83:ab:89:06:de:c0:d2:38:4a:b3:e9:9f:18:87:46:5e:
b7:89:ed:10:51:35:c2:16:0a:20:18:46:25:3f:18:13:83:1b:
45:cd:95:83:8c:55:53:61:98:d5:4a:78:d8:a7:10:f4:e6:5a:
af:8f:db:37:21:55:a6:fa:ce:a6:6e:86:a2:c0:a3:49:96:ca:
3a:c0:c8:63:d8:7f:61:ae:e2:33:20:88:da:36:e0:28:18:2b:
bd:b4:0f:2d:f4:0a:bd:97:0b:38:4f:21:81:18:52:77:95:c7:
1f:80:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:29 2025 by rpki-client