Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: UwQix5KDPWpVYSd7USp9qmV5SkarS5/+KUUURgH05tM=
Subject key identifier: 3F:8C:EB:A2:F4:15:2E:2C:59:D6:AD:04:C3:C6:03:27:57:5F:1D:67
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 0194BC72F39A3CB878AFAC4F20B85FB6E430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: sCQeu1pdjPdmcOzixWW0oBv/UWSRZ/ItyrMKOThLMek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:9a:3c:b8:78:af:ac:4f:20:b8:5f:b6:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=3f8ceba2f4152e2c59d6ad04c3c60327575f1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:88:39:74:0e:c6:7d:f4:7f:75:56:c5:a0:
a2:c3:14:c6:8c:2f:3e:e6:2b:a3:b2:f3:71:8b:49:
4d:9d:df:79:12:b8:75:38:5e:95:69:b5:0c:ff:aa:
8f:b8:4d:06:1d:7f:1a:e4:93:7e:10:a6:b0:1c:24:
34:76:8b:d8:a4:88:d3:08:6d:97:3c:5c:a2:39:94:
d5:8a:c2:0e:25:3f:59:c6:18:8d:53:ba:35:58:57:
f4:db:38:8a:d9:c6:6e:af:ca:c2:31:f0:80:31:c7:
b3:30:5e:51:0c:9c:e5:c8:05:49:2d:63:ca:82:d0:
53:07:4b:b8:03:e3:de:e5:60:c4:b0:bf:dd:91:04:
cb:a0:d9:3c:41:38:37:2f:2b:24:5e:3b:27:c3:42:
2b:88:b1:89:df:41:98:f5:bf:7b:68:77:11:c8:f6:
ed:46:61:1c:aa:fd:0b:ed:92:f6:49:a0:ab:09:36:
cd:5c:bf:01:d5:8d:04:52:9a:62:8e:3e:63:62:48:
06:bc:01:47:40:67:a3:e1:34:6b:a8:30:19:54:e1:
ef:3d:f3:36:26:92:9f:5f:82:fa:04:77:3e:11:af:
43:db:eb:76:70:02:f4:bc:7f:3f:f3:b4:7e:ba:21:
8e:9d:bf:2a:d7:4b:b4:f1:8b:80:a4:56:1e:fd:b3:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:EB:A2:F4:15:2E:2C:59:D6:AD:04:C3:C6:03:27:57:5F:1D:67
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:d0:3f:73:66:eb:e6:d5:ca:71:6b:c8:0e:a1:90:f5:b3:
ae:00:9b:93:5b:59:6d:ce:40:40:d0:a0:a4:60:7c:1c:a4:a2:
31:79:a5:a4:dd:ab:fe:b5:fb:9f:09:52:4d:c1:47:8f:8e:97:
0e:31:98:f4:ca:b7:59:c4:37:b0:93:f0:66:49:83:6f:9f:82:
d9:72:db:0f:bb:49:cc:d6:4e:eb:38:8a:24:22:47:1e:c5:71:
d5:e0:5e:15:ba:f3:ed:93:df:98:40:8a:93:6d:61:0e:24:5f:
63:c9:53:87:58:a2:1c:24:7c:a3:e8:80:c7:c4:e2:4b:35:23:
f1:82:7f:86:54:30:01:3a:9c:76:a8:c3:fe:0f:a7:2e:7b:64:
85:83:b9:a4:40:24:ee:be:31:5c:d2:00:91:1a:0a:95:a9:a6:
d7:99:32:21:25:ee:d1:7d:c1:d0:47:1a:bb:3b:0b:2e:d9:f7:
03:e2:7a:96:a8:d9:cb:67:96:65:f5:50:29:c4:22:3c:23:d1:
5b:ee:b0:ea:7d:b3:80:74:5c:b2:f0:e0:f0:be:9f:3b:67:13:
29:45:27:9f:a2:61:01:63:56:ca:29:71:e0:21:27:36:35:19:
94:09:17:50:7d:4d:e5:6c:57:61:a0:6e:58:66:8c:7d:07:40:
ca:c3:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:44 2025 by rpki-client