Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: 8sjvqhH49+FDCgObPRKEs2OuQHdCiEZTEI5ZkJVounM=
Subject key identifier: 76:F5:FB:D1:AD:F3:D4:3C:0B:8D:69:97:B7:89:6C:44:62:86:01:DE
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 0194BCE074203EB0644831312889AEC8617C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 123A
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: Y9SWIntZMUvr63K59cfX4i7TBQsNEpTEZsskoJnkzkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:20:3e:b0:64:48:31:31:28:89:ae:c8:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=76f5fbd1adf3d43c0b8d6997b7896c44628601de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:18:1d:ab:57:a3:99:10:f6:01:75:72:d9:
2e:0f:01:8b:41:23:9a:37:91:db:92:bf:7f:5c:c2:
b7:6b:98:f7:ab:be:c8:ef:91:f5:0e:e5:89:96:ed:
d2:e6:97:09:85:88:9c:fa:db:08:47:57:9b:7c:3e:
ef:07:a0:ec:93:22:10:b5:87:10:1a:bd:2c:9c:ac:
73:87:70:c3:a0:f7:08:e6:70:a0:96:16:ea:c0:40:
31:71:1a:dc:c1:a9:c0:71:d6:9e:c6:65:7d:05:a0:
56:ae:f1:ca:99:b1:a6:27:b3:61:ea:87:4f:75:ec:
d4:87:03:e1:ac:00:2e:aa:4e:c0:4d:b8:ca:c1:f7:
63:30:6d:32:00:35:4a:9c:52:a2:40:88:5c:f2:f1:
a3:01:06:bc:32:17:1f:24:e2:71:6a:7f:c7:d4:b2:
7e:5f:1e:02:6d:b4:ec:e4:c3:6d:df:9f:b4:c8:01:
85:9d:d5:5c:7f:95:9b:87:bb:7b:52:99:d2:e4:dd:
0d:0a:af:83:8e:9f:bf:83:56:f4:8b:d1:86:71:30:
b7:f3:d4:7f:b0:b2:ce:ba:60:2b:00:38:af:4c:c4:
b2:27:03:71:82:74:3a:d5:06:67:a4:b5:5a:a9:69:
9e:0d:37:65:51:e2:c6:f0:4d:5d:47:80:c1:05:8c:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:FB:D1:AD:F3:D4:3C:0B:8D:69:97:B7:89:6C:44:62:86:01:DE
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:09:88:44:c6:03:f7:b0:f4:cb:80:14:af:f7:a9:2d:80:fe:
5d:93:c4:22:92:e8:09:49:e7:d7:86:05:3c:2e:9b:2a:47:f6:
93:3c:f4:f4:22:3f:4b:af:cb:ce:12:2f:d1:71:61:b2:92:ba:
ba:05:b3:a5:a0:6a:b6:b8:9a:84:6d:97:5b:92:4d:1d:01:7d:
ed:8b:59:fa:75:79:17:4e:70:d7:4c:58:5d:ca:df:bb:9c:87:
09:8b:c4:2b:93:98:fe:63:a3:ad:50:5c:93:56:b9:2d:f9:59:
43:3b:6e:65:b2:59:18:a1:f0:97:f9:95:00:41:48:4a:75:7b:
df:34:e3:a1:aa:61:60:df:f0:6b:37:e0:ab:f4:22:65:2c:a2:
8b:9f:bb:4c:f1:a7:6f:ef:8f:ff:8d:b1:9c:b1:4b:10:30:21:
55:d7:d5:88:53:eb:bd:b7:b9:63:7a:81:e2:da:7e:b4:06:fc:
14:b6:cd:1c:05:cb:97:99:14:8f:ba:e7:ac:d3:79:f9:fb:5e:
28:72:19:93:5c:a0:cf:e1:e1:fe:34:15:87:4e:f4:62:42:df:
e8:e5:e5:e0:ba:06:f2:7f:30:d1:c8:71:09:b1:25:69:a9:73:
b5:e3:8a:25:43:57:9f:08:5c:2d:21:2b:57:7c:2a:45:2b:18:
d3:5c:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:50 2025 by rpki-client