Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
File: 9jmMMC0NFtqBmD54_0walvOElDw.mft (raw, json)
Hash identifier: 6nJsvRDN0h8Kul4gMM39aVxvZhwa3yY2j68tMtj2+yY=
Subject key identifier: 28:BF:3B:1B:ED:F2:DE:39:6B:CC:36:1E:23:BF:DC:45:6E:93:82:06
Authority key identifier: F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
Certificate issuer: /CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Certificate serial: 0194877297BF006B13D23EDDCE2CF0BAE1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
Manifest number: 0644
Signing time: Tue 21 Jan 2025 06:00:21 +0000
Manifest this update: Tue 21 Jan 2025 06:00:21 +0000
Manifest next update: Wed 22 Jan 2025 06:00:21 +0000
Files and hashes: 1: 9hsG7dvY2qOzN_FbrnnFv32AdEg.roa (hash: D8eXrayH1TOgnzre+xPPeq+E/rXm726lfZTPCZWOnGQ=)
2: 9jmMMC0NFtqBmD54_0walvOElDw.crl (hash: HuZPwSecl4eh0Ly8uJFoz6NuyX52jcUoGOl3r4bwaLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:72:97:bf:00:6b:13:d2:3e:dd:ce:2c:f0:ba:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Validity
Not Before: Jan 21 06:00:21 2025 GMT
Not After : Jan 22 06:00:21 2025 GMT
Subject: CN=28bf3b1bedf2de396bcc361e23bfdc456e938206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:08:71:c8:48:43:29:b8:4c:57:03:b7:31:
c8:15:e7:83:81:c7:d3:fd:5e:71:aa:8b:9b:23:43:
f3:2c:e3:d9:56:00:83:78:bf:bc:75:a1:05:7d:21:
b0:95:ca:c3:c1:42:81:65:af:a9:e0:ec:0c:4d:82:
f3:0e:a5:e9:ec:f2:51:70:26:41:28:25:88:dc:f1:
51:8e:72:57:dd:fb:73:a6:db:72:5e:ec:1c:9a:d2:
68:bb:50:58:18:a6:ba:4f:55:d9:e4:79:0e:c8:db:
17:90:f7:c3:8d:0e:ba:54:3f:9a:46:b8:ef:52:9a:
e4:8c:9b:83:b3:b5:3f:cf:96:00:7f:ad:a6:30:92:
b8:db:3d:00:de:d4:63:c7:06:1d:ab:cf:69:77:6b:
bc:de:c0:58:da:e9:bf:71:74:b2:09:14:da:4c:e6:
14:3e:c0:95:f8:b2:d5:ed:8e:8d:3b:d6:88:97:f4:
28:8f:0d:b6:33:d8:ff:d9:ab:71:89:f7:3b:f3:c5:
a1:88:aa:79:77:25:31:b3:9c:fe:53:52:04:6a:15:
ab:a4:65:a6:94:c0:cb:53:e7:4f:f1:dc:5d:1d:b5:
e9:52:38:b1:ac:83:b8:32:ee:83:96:80:ee:d1:b0:
84:f2:e6:92:f6:74:ce:cc:e2:3f:c6:cb:0e:f6:08:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:3B:1B:ED:F2:DE:39:6B:CC:36:1E:23:BF:DC:45:6E:93:82:06
X509v3 Authority Key Identifier:
keyid:F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:40:19:0c:b9:be:c3:d0:51:e7:1e:af:12:c7:bf:74:f0:
55:d8:bf:0f:4c:84:7e:64:88:67:4f:2f:8a:6a:72:4b:94:65:
dd:ea:a3:e7:53:29:3a:b1:4d:52:04:86:82:cd:05:25:f4:84:
d8:63:3a:50:d1:16:f6:52:0f:55:4d:45:12:2b:cd:fc:01:dd:
6b:4f:45:74:60:d1:71:ed:66:33:77:24:00:67:4c:88:17:d8:
f2:8d:23:97:d1:8d:c0:d2:ad:de:32:58:58:65:07:b6:fc:0c:
6d:1e:48:71:57:21:cd:25:89:69:03:1a:da:64:ba:44:45:a9:
3e:51:52:df:a6:6a:b1:31:29:65:a3:ca:75:bf:84:ba:a4:fe:
ce:38:f5:c9:1c:4b:86:55:31:6c:73:f5:00:4d:bc:c0:7a:55:
c5:28:96:6e:d0:7f:59:91:22:9e:fa:8e:a7:25:9c:19:2b:5c:
ad:6a:6f:eb:79:1a:96:c9:d6:a6:f2:8a:22:fa:38:22:10:51:
37:0f:d5:5f:44:73:1b:5d:0b:c6:44:01:ab:a5:aa:6d:12:35:
28:3b:f9:fb:bd:78:7b:5d:eb:4a:88:d6:e0:2d:bd:f6:63:95:
41:ed:7d:e2:44:f5:5c:8b:f1:fb:5d:c2:86:9e:00:34:7d:77:
3b:18:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:48:04 2025 by rpki-client