Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: 1Rg4Xf308v8HaLkqidYqXqqSvbdlOCBbqyLAH50FMDQ=
Subject key identifier: D4:9A:65:CC:16:5B:EB:26:2E:DB:91:6E:C3:D3:7E:00:A0:1B:02:F9
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01962E618A8FAA4CF18F57D338C0AFF70335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 0FDE
Signing time: Sun 13 Apr 2025 09:01:06 +0000
Manifest this update: Sun 13 Apr 2025 09:01:06 +0000
Manifest next update: Mon 14 Apr 2025 09:01:06 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: kby1Qa5I5S6GR+7NLkPomvptplMzpjRcr5EtUaUIeKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:8a:8f:aa:4c:f1:8f:57:d3:38:c0:af:f7:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Apr 13 09:01:06 2025 GMT
Not After : Apr 14 09:01:06 2025 GMT
Subject: CN=d49a65cc165beb262edb916ec3d37e00a01b02f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:d0:ca:64:9c:ce:07:da:37:8a:6b:04:5a:
dc:80:29:23:29:e3:96:d4:df:54:74:09:fe:ad:c7:
17:ba:0f:29:60:db:c4:62:73:e6:2c:07:f3:f4:92:
06:10:a9:f7:90:7d:6d:0e:88:f7:61:da:e5:fd:50:
41:2a:cc:2a:b7:b0:a9:f9:4b:c4:a5:4e:b7:af:db:
ea:28:2b:78:ec:64:13:39:b6:9c:3b:97:b6:9d:34:
05:b4:ee:8e:30:71:eb:56:46:fb:bc:29:22:53:0a:
16:89:2b:8d:20:89:96:17:db:c1:7c:97:5b:3e:4b:
43:47:cf:4d:0e:e4:b7:8c:5f:44:ab:0b:07:cb:e6:
17:ec:c6:dd:cd:06:79:0c:dc:06:33:91:07:27:90:
36:b7:18:2e:27:ac:00:d8:54:b3:a4:50:3e:5e:55:
47:57:0f:3e:9b:af:0f:d4:b8:bc:39:0a:0f:44:9a:
9a:a4:d5:34:2c:c7:da:50:e7:07:eb:a2:fb:9e:e1:
f2:f0:65:26:ba:02:a0:2d:b9:20:2a:de:57:bf:4a:
d4:64:82:3a:08:ad:88:80:e6:94:5a:79:45:54:d6:
c9:78:79:63:21:52:f1:88:ab:24:d7:9b:47:bf:65:
fa:58:69:c1:ea:f7:16:d7:bc:72:77:69:8a:a4:9f:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:65:CC:16:5B:EB:26:2E:DB:91:6E:C3:D3:7E:00:A0:1B:02:F9
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fc:eb:e3:04:83:63:d7:26:c0:8b:1d:ae:40:4e:de:be:6c:
30:4c:42:56:b3:b1:66:3e:76:ac:49:b3:df:0c:ee:14:2b:40:
a0:3b:c3:f0:eb:8d:33:d1:ac:86:8c:ce:ba:cd:c3:bc:84:a6:
71:1a:89:6c:91:47:3c:5e:e8:e9:0e:e0:f0:fb:91:ff:a6:71:
3f:12:38:15:3d:2a:23:a8:23:f6:dc:a2:70:40:73:17:a3:9f:
c3:2b:25:3d:b9:0d:dc:61:6c:5d:29:25:ab:83:33:97:c2:be:
e5:eb:43:0f:46:66:43:1f:f1:fe:ab:29:5b:b2:67:42:e9:8b:
8a:6f:f7:6b:f8:8a:e6:15:70:86:c9:83:72:f1:b2:57:a2:84:
b3:9b:ea:c8:fd:ab:ac:ae:10:0c:a6:48:4b:4d:60:90:3c:79:
2f:7b:0b:6f:cf:d4:84:f6:e4:f8:64:20:06:30:e4:55:a1:db:
8c:2c:49:fe:e4:52:1f:47:36:ea:00:6d:87:c5:2f:b2:2f:f9:
0a:1e:da:18:6d:6d:f6:1a:d5:85:a3:7a:52:df:75:df:db:a3:
04:fb:8e:63:14:13:a9:bc:ec:b4:46:96:6d:da:9d:83:5a:76:
ed:9b:7a:bb:cf:a3:62:de:05:f5:cb:06:86:d4:92:c6:3c:4a:
d2:31:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net