Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier: DAOUfRiWg5K11SJtIO2hdur7QDc5aEfviGyYPuL2kks=
Subject key identifier: 4E:FE:B9:D8:0F:D3:10:F5:88:C9:D1:5E:B0:7E:2E:F9:FE:E7:6B:7F
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial: 0194BD856A7346C1961011ADE92040E23365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number: 02A2
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: iKBM+rnbZ2Fu1+U3AlhY/4nFOnRVqbZkyAs0lEbpBEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6a:73:46:c1:96:10:11:ad:e9:20:40:e2:33:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=4efeb9d80fd310f588c9d15eb07e2ef9fee76b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:fd:7a:41:01:62:56:81:3a:f6:1b:7b:2e:
8a:fd:69:82:4f:ee:a2:7e:c5:66:13:c8:f7:a5:e8:
e0:b1:76:19:76:c3:71:0f:2c:30:41:30:ec:99:ff:
43:d8:04:47:91:6b:e0:24:8a:57:2c:11:b3:95:2f:
3f:22:a0:5d:41:21:a9:48:a9:fc:c1:1b:49:96:39:
41:eb:83:a6:4b:17:b4:e6:a9:df:69:b6:16:ef:6f:
27:4c:b6:f4:f7:78:97:06:75:cc:6e:e9:0a:04:ef:
8e:ee:cf:32:95:4f:22:48:97:f2:3c:ba:3d:15:dc:
3e:dd:72:34:d5:68:13:92:7f:9e:34:27:df:6a:25:
33:c1:f9:27:98:a0:26:0c:47:cf:44:2b:96:ec:cd:
41:4d:39:57:ec:8e:18:45:48:97:24:d6:ab:6b:5b:
05:23:0f:cb:69:39:40:5d:ce:21:3a:74:fe:ce:f1:
eb:3f:b9:49:8f:83:48:e8:b6:82:e3:1c:9d:b3:4b:
21:61:54:1b:90:68:2f:17:6a:d3:9c:0f:d2:22:64:
7f:ea:b4:0f:ff:ea:06:21:aa:cc:a3:40:5c:30:56:
b2:cb:f2:2b:1c:90:ed:df:66:c5:10:e1:0a:ad:de:
6a:0a:46:09:3b:3d:22:70:ad:03:16:2b:2a:e3:32:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:B9:D8:0F:D3:10:F5:88:C9:D1:5E:B0:7E:2E:F9:FE:E7:6B:7F
X509v3 Authority Key Identifier:
keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:ae:8b:34:95:25:e7:30:dd:18:81:25:14:8c:f5:2b:0c:
00:ec:af:8d:30:30:75:93:77:4e:7e:34:85:06:ce:d7:8e:38:
4e:11:39:78:9c:aa:00:01:37:a9:21:68:18:60:91:68:8e:68:
49:98:d1:e7:89:52:32:8e:18:54:3c:a0:5b:ae:d0:0e:4c:b2:
21:7c:f2:af:88:bd:89:29:79:58:de:2f:43:b8:f0:22:87:ba:
f0:37:c4:f5:c6:81:a8:82:44:0e:c6:a5:61:10:de:f6:16:9f:
35:dc:dd:99:90:8d:7b:d9:bd:81:36:1d:25:18:7c:47:06:74:
18:ba:83:13:99:af:f2:09:e9:62:a3:31:0a:fd:43:5b:76:77:
88:f9:2a:68:e4:1b:b2:0a:26:4d:0d:63:c4:18:0a:ea:2a:eb:
18:7e:59:d6:d8:75:84:54:7b:31:08:84:10:8e:ea:e5:e5:0c:
46:10:98:5a:1d:9c:67:31:06:82:e9:8e:95:f4:5b:7e:4c:44:
94:4f:bf:9a:0c:bb:be:f2:a1:d3:f9:45:a2:67:59:4c:00:59:
88:44:0d:36:fc:3b:d9:a7:1c:21:7a:f9:b8:6d:dd:50:c4:a3:
78:49:77:ec:fa:24:d1:78:cc:8a:91:2e:f4:de:38:fd:5a:62:
80:40:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:57 2025 by rpki-client