Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier: xCOmJkKWtjAQvChmKNnOY6CBqDvA3ie9OiZPnEg/+WA=
Subject key identifier: D2:3B:5C:AC:56:A5:39:8D:5D:92:10:0B:D1:D3:09:F7:A3:CA:77:41
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 0194BD17725C2C67D3A3C56BBAFB067F3E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: AQh87xkzPJyX6xqLrusILhUO3dSblFgntKs6RYRwhsI=)
2: aHRmXP7rOhW5b0_ChkibljQ32q4.roa (hash: T5y3LNiPd6ixiV1aW5ySaidO4jWDcaXEXf35DBj0+Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:5c:2c:67:d3:a3:c5:6b:ba:fb:06:7f:3e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=d23b5cac56a5398d5d92100bd1d309f7a3ca7741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:1a:5d:ce:30:3e:ea:bd:ff:cf:60:03:e2:
60:56:6f:22:8d:2c:c6:1c:01:26:0b:40:bc:10:52:
d6:6d:51:72:d5:d3:ef:91:f6:6a:4b:36:7e:43:95:
0a:94:81:b3:99:ad:bf:58:04:6a:50:7c:55:35:16:
10:7a:07:46:e2:dd:62:fa:2f:da:e5:34:03:9c:06:
cf:ef:3b:bf:20:6e:e7:47:8e:52:ee:b3:53:f7:f9:
15:fc:bb:16:24:bc:fe:3d:20:ac:8e:c9:da:72:eb:
60:8f:9a:b0:ca:6c:76:c3:fc:4b:1f:7e:d8:a6:76:
65:ed:8c:a0:1a:ec:10:1e:aa:6f:57:03:e5:75:65:
66:20:bb:bb:65:55:49:be:e1:e9:01:6c:a0:a4:5f:
a0:47:cc:70:74:59:d3:cb:e0:4a:1e:dc:0d:d3:6c:
5f:bd:d9:13:44:0d:35:42:45:fc:8f:08:43:4f:f4:
5d:d5:18:7c:8e:c3:75:c1:ca:37:da:38:27:af:7a:
94:2d:6f:24:91:4d:d8:99:b7:4e:65:71:c4:94:5a:
7b:f0:30:71:e2:05:4f:20:bb:c5:6c:35:39:d7:9a:
f3:73:05:09:be:4e:ff:c0:0b:36:d1:69:1f:d6:1d:
00:23:47:6d:11:27:59:aa:c9:35:63:ad:c2:43:b8:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:5C:AC:56:A5:39:8D:5D:92:10:0B:D1:D3:09:F7:A3:CA:77:41
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:48:df:9a:68:8d:b6:01:d8:d1:98:94:47:cc:42:a5:14:
bc:0c:e3:2b:ae:88:1c:8c:8a:42:11:28:1b:e9:4b:e2:ca:1b:
25:45:3e:64:79:8d:a0:ef:82:0e:f2:f6:6c:aa:06:2f:a3:74:
ed:d8:35:19:72:f6:e7:b6:72:33:52:0b:f0:e1:56:0a:41:24:
01:b2:30:6f:63:da:93:13:ca:6e:b0:51:95:21:91:41:5b:b7:
9a:90:45:a4:01:e1:f0:66:e3:ea:85:2c:c9:1b:43:2b:a7:d3:
f8:82:52:a8:68:44:84:25:ec:da:c4:23:9f:50:03:b3:43:88:
89:7f:82:12:6e:d0:2c:13:9d:ca:8e:68:cd:cb:f0:88:89:d3:
20:32:a8:54:74:5e:6d:10:3d:93:8d:99:8c:5c:87:53:e1:ec:
2a:f0:0e:cc:dc:0d:d6:06:c0:ef:cd:12:ca:5e:68:f0:d8:6a:
50:89:50:bd:75:e6:f7:77:85:f2:8a:c2:2f:a2:46:13:8f:a7:
b8:05:eb:d2:bb:e0:ad:a2:6d:1b:5b:25:00:91:9a:23:2b:25:
a7:21:c6:86:2d:79:11:66:9f:23:91:91:ee:51:a1:af:46:42:
80:ae:93:6a:48:a3:43:ec:da:3a:16:03:51:36:6f:ab:84:f7:
02:bd:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:25 2025 by rpki-client