Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: RMnnzq/SGhlYExQdt0ZpqPumE7SPtKFyaRSTeVguSco=
Subject key identifier: 6E:37:33:D4:02:A3:7C:88:37:7D:CE:D9:FF:E7:25:96:8F:49:D3:D2
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 0194BD8557A500F5BFD0CB47F1676F9224D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: Lrx2FH9tOTlvS/VgdgU9ZDnw9jNJ4RgmjXtf6SU4FFk=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:a5:00:f5:bf:d0:cb:47:f1:67:6f:92:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=6e3733d402a37c88377dced9ffe725968f49d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:7f:d5:53:1c:20:32:1b:51:5a:10:ec:d7:
b2:b7:42:09:c1:fa:d9:a7:b3:2e:28:08:59:2f:96:
db:3a:b7:2c:44:67:e7:23:22:0a:4e:04:ee:9c:27:
4d:af:e7:e9:74:5e:d8:6b:0f:d6:7c:5d:3d:91:57:
d3:50:07:86:53:97:e0:8e:e5:55:04:7d:ff:66:a4:
0a:17:1b:33:26:ed:44:0c:bc:5c:d2:86:3f:d5:fd:
48:84:29:68:cc:0e:b6:79:1b:2e:5e:f4:bb:12:db:
f0:a6:5e:f9:ad:dc:27:44:a8:aa:b6:c3:be:af:f4:
f5:90:9f:56:a6:81:f9:ee:1e:0d:e6:27:c1:b3:1f:
70:09:e6:b4:8a:ff:0c:bb:a4:0e:f6:b9:3d:67:26:
43:9c:4d:e3:49:46:68:81:7b:80:a1:26:e1:24:e2:
6d:92:55:12:f9:3a:9b:a2:bf:ef:17:38:a4:cc:00:
46:76:5b:d3:3e:6c:6e:8c:9d:ac:e2:dd:b9:be:8e:
4b:a3:bc:10:45:c4:d9:05:b8:e4:71:70:6d:90:13:
42:8a:b2:cd:c7:05:0f:41:fc:4b:a3:d0:55:78:eb:
1c:dc:03:45:19:ea:77:0a:24:2d:b2:f9:42:29:50:
54:13:72:33:79:a8:20:97:05:b7:1f:eb:bf:51:9e:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:37:33:D4:02:A3:7C:88:37:7D:CE:D9:FF:E7:25:96:8F:49:D3:D2
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bc:dc:30:96:f0:1d:cd:82:bb:1a:78:33:51:ca:58:61:02:
b3:d4:5d:d0:7d:1d:ff:64:11:2e:ff:71:fd:2f:10:ca:a9:ac:
ff:a4:55:ea:74:5a:80:16:ac:78:b7:b0:bb:71:54:3a:28:dc:
c2:88:b8:02:d6:7c:64:4e:18:ef:0f:55:8c:6c:bd:ec:59:e5:
6b:a9:ac:97:ca:ab:55:aa:b9:24:ac:37:5d:09:05:c0:c4:e7:
e2:e2:f0:87:c3:61:f2:18:d2:98:a1:98:4f:fd:6e:09:60:ee:
57:48:07:a2:05:1b:f0:f4:69:0e:d7:b3:f4:c1:01:ee:08:d8:
68:e5:c3:13:b4:bf:7a:4a:c6:48:06:78:ea:9e:e6:e2:fd:38:
2e:ec:8d:48:7d:94:86:55:b8:1d:ff:27:ba:84:d1:f8:96:b4:
4b:72:5a:d9:db:ac:1a:80:47:06:d4:f4:52:48:5a:95:79:1a:
c7:6c:9a:d4:35:c6:13:f7:47:0f:6b:ec:8b:a9:b1:4c:fd:0d:
8c:77:cf:ab:ab:86:1c:28:37:76:d0:2e:c0:01:03:3e:56:f8:
8a:70:bf:ae:ef:2f:b9:8b:69:04:9c:ee:cd:e7:43:1d:6c:82:
55:f8:76:5d:67:8f:63:25:8c:9d:2c:10:c2:bc:d0:a9:57:75:
30:24:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:17 2025 by rpki-client