Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: xBbGQJMD2qAn1C6R7BCDDfWTu6VujNw0Pf0oTFghQvU=
Subject key identifier: F5:C2:A7:03:82:61:4B:B0:D6:FB:50:21:4A:DF:49:0F:26:E4:EA:BA
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 01962F3D50CDD4909A2EA8152F1C956430D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 0160
Signing time: Sun 13 Apr 2025 13:01:09 +0000
Manifest this update: Sun 13 Apr 2025 13:01:09 +0000
Manifest next update: Mon 14 Apr 2025 13:01:09 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: QuDZMFuTO0c7pedD9lQ1m9bAiaqvac8DX4YnL7jzIQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:50:cd:d4:90:9a:2e:a8:15:2f:1c:95:64:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Apr 13 13:01:09 2025 GMT
Not After : Apr 14 13:01:09 2025 GMT
Subject: CN=f5c2a70382614bb0d6fb50214adf490f26e4eaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:e0:eb:ad:e0:7e:73:e2:9d:89:b6:5c:f8:
85:3e:c9:b8:87:37:bd:1d:c1:fb:4d:39:19:8e:df:
0d:ac:e9:1e:fe:17:ec:d0:f6:db:9c:ad:2b:1c:ad:
6d:2c:f4:ac:4c:a9:ec:de:dc:40:87:22:ef:8b:db:
9a:68:0d:7a:37:bd:43:bd:30:ed:73:a2:af:09:56:
cd:49:73:34:b0:bd:b1:96:8f:a9:1a:67:80:fd:88:
fa:20:3c:61:07:ba:24:b0:52:75:e9:ea:6a:fd:8d:
62:21:02:35:11:1a:70:82:1d:c5:85:ba:5a:11:29:
5c:01:b0:ee:9a:50:59:21:bb:9e:ac:7f:d3:43:bc:
28:c5:a3:71:03:f1:fd:83:a2:b6:02:f3:3b:10:ec:
b9:ce:1b:a8:38:8c:82:88:eb:ad:48:ab:ab:ea:2e:
b5:34:7b:c4:1c:97:de:29:de:d2:9c:45:97:2d:81:
6d:71:9d:d7:8b:4a:ee:94:f1:02:18:c8:d0:b9:03:
17:08:ab:bf:49:96:a2:83:64:03:d5:a7:db:fa:32:
48:f8:06:4a:3e:fb:2c:9c:51:d4:be:6c:bd:5b:9c:
89:e2:04:e2:06:03:43:77:22:86:1c:7e:43:af:59:
15:3d:95:30:60:6d:0e:d4:23:95:9a:91:35:5f:bb:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:A7:03:82:61:4B:B0:D6:FB:50:21:4A:DF:49:0F:26:E4:EA:BA
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ae:a1:5f:76:7a:ff:7f:2e:23:ab:5a:54:25:ce:98:b4:28:
6d:4d:8c:2c:17:b9:9d:ed:d6:ba:ba:7d:d0:f0:35:d9:6c:40:
54:23:38:6e:0c:b5:7e:b7:2b:33:a0:a8:45:b3:71:3c:b4:71:
36:ee:4d:aa:de:10:0d:2c:c8:2e:d8:90:e6:c6:af:50:4a:0a:
e7:58:cc:35:c8:c7:dd:36:0c:20:17:54:ed:23:8e:9c:d3:b1:
f3:03:89:06:0a:45:36:d5:e7:c0:43:a4:4b:21:0d:a4:e0:f8:
55:bc:67:fb:8d:06:45:ee:ce:49:13:62:c4:9b:0f:09:6c:fd:
fa:5d:ad:a5:d3:ab:35:83:7b:19:74:df:87:bd:59:56:0a:d5:
c4:0a:33:df:e8:2f:ab:bb:2b:d4:71:43:94:1c:85:25:1f:51:
6d:59:cd:9c:5d:ec:07:df:30:1e:c2:df:f7:f8:9b:b5:08:8b:
92:e5:66:23:9a:47:8d:3e:a0:13:a6:ce:95:df:4e:63:0b:1a:
43:7b:95:a5:8f:23:ab:14:9d:45:b3:d6:c6:43:be:26:b6:76:
98:90:9a:95:d8:d4:6d:58:17:aa:54:52:e0:30:a5:d9:e1:04:
8a:48:da:e0:b6:27:7a:d0:c5:e7:86:60:03:c5:33:fe:78:9c:
f4:10:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net