Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: d87+GZY5v6039ClQJmkx1OOAiQNWwlthiCgFgNkirrQ=
Subject key identifier: D8:86:F0:93:90:66:88:75:80:9A:0F:B2:91:AD:BB:18:AF:E7:9A:61
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 0195E1224011A319FE5E4A7EFAC4CE15EF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 0F9C
Signing time: Sat 29 Mar 2025 09:01:12 +0000
Manifest this update: Sat 29 Mar 2025 09:01:12 +0000
Manifest next update: Sun 30 Mar 2025 09:01:12 +0000
Files and hashes: 1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: TMAtfDD+dXO+hpX11ZkVhAn2isK0c4e9/TB3um4hgGI=)
4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:40:11:a3:19:fe:5e:4a:7e:fa:c4:ce:15:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Mar 29 09:01:12 2025 GMT
Not After : Mar 30 09:01:12 2025 GMT
Subject: CN=d886f09390668875809a0fb291adbb18afe79a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:6c:6a:6b:dc:df:7f:a7:7d:59:4a:1b:2a:
10:3d:e2:a1:98:c7:0d:76:8b:b1:03:ff:8f:c3:09:
93:95:eb:a8:16:b3:26:1d:b8:e3:11:32:98:a8:af:
a1:b9:fb:91:b5:84:d8:d4:26:03:55:e0:97:ac:fb:
67:d9:0d:a9:ca:6f:b2:71:da:83:b5:24:ac:80:0d:
6c:ff:fe:31:54:f3:e6:da:62:91:bc:1e:df:3f:98:
10:81:63:16:b0:96:a1:c3:c2:55:0a:6b:6d:3e:4f:
51:b7:f6:87:89:ed:c7:0c:b6:c5:85:17:e8:50:22:
9d:75:fc:a9:4e:c7:33:1e:9e:98:68:9c:72:c8:8e:
95:fb:a1:89:2c:65:87:ba:06:86:73:14:db:6e:14:
c2:9d:e0:8e:a4:ef:4f:d1:08:57:78:77:74:dc:10:
77:3e:c5:79:27:e3:bc:41:a6:33:2d:bc:85:c3:da:
16:3b:a1:8d:8b:61:9e:5f:6a:7a:24:74:a6:db:91:
f9:a3:da:1b:01:3e:56:69:85:2d:a9:cc:be:51:fe:
45:55:4a:8f:7d:2b:6e:62:34:85:23:03:9b:78:b7:
8c:74:d3:b1:59:6a:73:e3:14:65:07:4d:b8:2a:b4:
38:72:2f:5d:01:92:35:f5:9e:52:dc:c3:e3:54:2f:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:86:F0:93:90:66:88:75:80:9A:0F:B2:91:AD:BB:18:AF:E7:9A:61
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:f1:10:de:ed:5f:94:91:30:3d:4a:b2:b2:9b:dd:a2:60:
d5:01:22:1f:ae:f3:48:ed:64:b8:6b:f0:83:09:55:bd:79:af:
b6:9b:b6:22:2a:78:86:2d:db:56:2a:d6:91:cd:1b:20:d6:e1:
5b:2b:28:b9:33:a5:45:2a:40:b7:70:c6:8a:51:b0:8e:fc:b2:
40:52:df:ed:a0:a5:d8:9e:36:3b:cb:20:8a:a1:48:3e:85:67:
f9:c2:76:cd:32:ab:32:5f:67:e7:0a:b9:85:e6:42:d9:8c:93:
34:b7:be:61:9b:f7:90:78:9a:65:60:ba:a9:ba:79:79:eb:d3:
0d:2f:2c:5c:4e:5e:1c:5c:ce:f1:a0:39:8b:33:7a:47:68:4b:
9d:54:12:7e:e7:eb:a6:26:a7:76:f4:5c:43:69:ee:c8:f9:14:
e2:43:74:0b:5c:c8:b9:04:3b:54:a1:7c:05:fa:c9:d3:59:f4:
44:9f:de:37:05:81:58:78:f5:c0:e7:b3:a9:18:91:e9:21:9d:
0b:35:24:2f:a3:d0:cc:3f:2d:d4:35:e7:03:15:37:aa:ff:27:
1e:ff:3f:9d:5e:a9:12:9e:3f:72:d3:7f:62:c4:80:f1:a4:42:
da:47:72:dd:eb:2c:fc:8e:4d:56:8d:f6:d6:48:60:a8:81:69:
f1:e6:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:36:59 2025 by rpki-client