Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: IP1RztIThP/HCnRkf+GFzn7Poxqi7ApSPRrtrnMVqf4=
Subject key identifier: 3F:A0:2C:9B:9D:52:22:D0:CD:37:56:51:E0:1E:D8:2E:2A:84:BA:3F
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0194BBCE561925803434CB62523248917CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: DgTZvRJp9SLfEnFGI7+jKvEd0yorcrl8jpG2dbpxSRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:19:25:80:34:34:cb:62:52:32:48:91:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=3fa02c9b9d5222d0cd375651e01ed82e2a84ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:39:9c:e0:a0:fa:12:fb:bf:f4:9b:58:84:
0e:2b:27:de:54:25:42:24:3b:76:45:d6:94:af:15:
0c:99:ec:8d:43:d7:11:3b:7e:46:13:b0:9f:a3:9d:
ef:67:9a:71:2f:21:a1:b2:db:f3:af:63:8a:7d:2d:
68:3a:e8:99:a1:74:e5:1c:4e:30:ca:ad:0b:bb:c5:
60:d2:11:f8:8d:0a:32:ea:4d:85:31:a0:38:8e:7f:
dd:c0:f0:35:db:2c:e9:f8:40:e1:50:ae:36:92:e9:
c4:01:74:d9:d7:f0:dc:75:d4:f4:79:5a:d2:cd:d9:
e9:88:37:03:64:89:90:5a:31:02:24:a2:57:9e:3c:
6c:d4:a0:ac:34:22:b2:6a:bf:e5:be:c0:42:68:79:
de:82:19:cb:ad:8e:ec:47:d9:f6:ef:c0:cb:04:f2:
1b:5f:44:ce:8a:0a:a0:15:b9:18:40:6e:dd:b0:5f:
d8:24:64:ee:1e:3f:ae:c3:cb:21:90:42:92:56:ef:
d1:6e:d9:9d:c5:49:de:4f:3e:5b:8c:af:af:64:70:
43:72:fa:27:a8:2e:39:6e:ce:71:31:b5:71:f4:4c:
c0:33:3c:ce:e4:29:ba:40:3b:03:24:a6:df:14:f0:
42:c3:1a:f6:14:0b:ed:23:9e:aa:f5:ff:a0:36:69:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:2C:9B:9D:52:22:D0:CD:37:56:51:E0:1E:D8:2E:2A:84:BA:3F
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b8:22:6c:39:5f:17:91:ee:d9:29:44:24:1e:7a:65:3f:c3:
24:3c:77:ec:fc:47:6b:f1:e2:c2:88:99:7e:88:3f:70:95:c2:
54:79:d5:7e:41:09:98:db:4a:4c:91:3f:2a:56:75:7a:17:3b:
ee:55:fc:8e:d7:4a:3b:0a:db:79:29:b4:81:f7:fb:be:8e:d5:
a8:fe:bc:9e:2c:0d:62:94:e2:c7:73:eb:36:2b:3e:c9:b8:b0:
ae:34:2e:44:c3:1a:7e:34:cf:5d:36:86:9d:28:4e:66:6d:70:
30:49:e5:1c:c4:1f:94:e1:cd:eb:b6:3e:e1:38:45:bc:db:ac:
09:39:13:70:c3:fa:0c:96:d0:3b:aa:80:a1:12:74:36:7b:35:
b5:5c:da:20:e5:40:8a:12:a1:77:0d:3a:15:28:56:25:20:93:
84:27:73:80:75:1d:f6:83:c1:cc:94:ae:de:4a:18:5a:11:65:
07:e1:a8:24:a2:67:21:64:1f:b3:96:a7:b9:fd:dc:d4:c9:79:
af:18:a9:0a:1e:23:96:7a:40:4f:da:4c:96:d1:0c:6d:db:f7:
7c:2e:db:ac:a0:a3:b0:8a:4c:01:b6:4e:be:46:bd:ab:3b:26:
af:15:3c:bf:f0:42:98:53:82:05:41:6c:5b:3b:2c:55:b8:6e:
55:73:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:26 2025 by rpki-client