Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
File: jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft (raw, json)
Hash identifier: UIQGRg1uTWGmMT7d2FFNMtHiY6XTguE3TF2Foo8a7Ls=
Subject key identifier: D6:72:E9:BB:BE:67:37:FD:C4:A8:DB:BB:CD:B0:F4:0D:29:01:92:9C
Authority key identifier: 8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
Certificate issuer: /CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Certificate serial: 019490E3F33CDB6F7452222314B6A6102971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
Manifest number: 96
Signing time: Thu 23 Jan 2025 02:00:45 +0000
Manifest this update: Thu 23 Jan 2025 02:00:45 +0000
Manifest next update: Fri 24 Jan 2025 02:00:45 +0000
Files and hashes: 1: jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl (hash: 2sv9cYBFVF82QyxQj8DXoGlWz8qYSjRTsrNwewo6hTQ=)
2: lc_ZnzmkngY0sodcizkIqhuzC70.roa (hash: ai21H6Ojd+rIxdvz8BuEQbQ4xb1pH2HpdJMIDMXYIWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:90:e3:f3:3c:db:6f:74:52:22:23:14:b6:a6:10:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Validity
Not Before: Jan 23 02:00:45 2025 GMT
Not After : Jan 24 02:00:45 2025 GMT
Subject: CN=d672e9bbbe6737fdc4a8dbbbcdb0f40d2901929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:ce:d8:f2:31:1d:96:ec:8a:2f:5f:2d:96:
b9:6c:be:dd:06:de:c2:5f:7a:a2:23:dc:b9:35:c1:
26:21:a4:4b:78:9a:de:19:97:b7:21:33:44:90:65:
1d:9d:3f:f5:bd:2e:eb:d6:3c:fe:c2:92:72:37:c1:
0a:5f:2d:03:2f:3b:b2:59:81:79:85:c1:42:7c:1d:
4b:33:f2:cd:a1:04:d2:55:25:ee:e2:30:48:6b:82:
73:47:6a:f2:3a:95:bc:7b:db:f3:56:49:70:2f:78:
71:9a:b5:14:9b:6d:4a:56:b8:d5:f0:01:a2:41:29:
4d:cb:25:50:50:d9:34:b4:60:5b:f6:99:19:b7:77:
1e:47:82:3d:f2:24:2c:b5:00:10:b4:a6:c6:3d:2f:
80:6e:c0:fc:0a:77:59:e7:c9:66:16:bd:85:16:1f:
cd:32:7a:81:64:ea:17:21:50:d2:c2:2e:56:10:4e:
0e:c2:1d:8d:53:be:c2:50:a5:da:ea:1c:90:ce:66:
67:5a:e4:a3:c1:5d:51:f8:4d:75:a5:2e:57:92:b3:
a0:f3:1e:ab:6e:b1:e6:35:4f:94:f2:9e:c5:f3:56:
99:4c:8f:d0:00:ce:c0:64:86:83:72:86:01:48:50:
cd:68:72:4b:56:eb:ad:3d:f8:bf:6b:ff:4e:94:e4:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:E9:BB:BE:67:37:FD:C4:A8:DB:BB:CD:B0:F4:0D:29:01:92:9C
X509v3 Authority Key Identifier:
keyid:8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:55:0a:f6:00:93:7f:fe:f9:b0:98:c3:a7:7c:0c:b2:17:1c:
13:7d:15:38:6a:44:88:0f:6f:86:a3:68:b0:62:7f:6e:1f:ff:
21:2f:2c:e3:3e:21:4d:6e:1c:1a:f7:d3:57:1f:6c:f7:ef:10:
58:d3:6a:8f:c5:05:e3:ae:3a:4e:40:77:8a:4a:3e:52:89:2c:
bd:97:d1:4e:81:c5:c3:ec:c4:f2:38:22:0c:21:55:92:14:54:
8a:71:73:2f:f7:f1:69:18:01:f9:cd:9d:d5:97:82:e4:70:48:
7d:16:03:fe:c2:a6:2a:b4:6b:55:99:3e:b5:3b:c0:88:e1:70:
23:9c:83:f8:c3:63:2d:e0:7f:1b:d2:7f:bb:bd:c4:a7:20:cf:
bb:2d:e8:c0:e9:17:52:79:04:e5:29:00:49:6d:34:2b:39:67:
a5:2b:8d:1c:01:97:7e:65:93:cb:f4:42:79:cb:88:f9:98:fd:
33:81:c0:2e:e7:14:53:82:ba:4a:58:eb:13:a8:0c:11:1e:31:
03:cd:ad:bb:d7:c7:94:48:a8:38:91:b5:85:9a:5f:02:0a:65:
97:d5:b1:8b:f1:d1:4a:16:d9:91:98:a7:92:e9:90:a6:f8:58:
e0:64:c4:0f:c1:93:94:3d:5c:e3:81:ce:54:2b:b6:63:ce:22:
e3:9b:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:42:50 2025 by rpki-client