Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: WBvUPbP/sZ6UIDkClKpbiPLeD0H62rGxr+MzgHYj820=
Subject key identifier: CE:6E:4C:98:1A:5A:97:24:98:3B:BF:83:61:AB:00:3E:00:98:29:0C
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 0194BC3C22695920027BEB2C44B237A4558B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0932
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: ot6eiSWJPCrovK3HaqVqNSWtt8kyyzpHyIOb9ljz908=)
2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:69:59:20:02:7b:eb:2c:44:b2:37:a4:55:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=ce6e4c981a5a9724983bbf8361ab003e0098290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:b6:c1:61:cf:ff:57:70:39:23:e0:07:6a:
ae:59:47:50:26:c5:5f:a1:22:81:63:71:b6:34:57:
1b:1b:71:a5:f6:01:0a:52:55:fa:98:15:2a:cc:71:
09:52:bd:c3:a2:7e:0e:1a:ad:4c:99:1c:9b:a5:77:
68:2f:6f:60:2b:b4:79:78:7e:f2:1e:9d:38:b3:c0:
4d:a6:24:8f:fb:48:82:4c:bf:3e:f2:a2:99:04:0b:
3a:b5:2a:78:ea:56:34:31:7b:8c:09:2d:d6:4f:fd:
ce:e4:62:04:2a:68:62:88:69:06:b4:81:40:70:0d:
77:3a:5f:3a:8b:1b:f1:20:b9:8d:15:80:97:37:60:
12:78:61:6d:01:82:61:24:3f:05:23:e6:57:a2:72:
d9:f7:aa:08:00:be:7a:3e:30:e7:ea:8c:d1:e2:c9:
b2:eb:4a:84:6e:17:bf:aa:5d:8c:de:13:b8:7e:a0:
d1:9c:3b:cf:4a:dc:55:47:f6:7a:44:3e:40:f1:53:
db:29:2d:9e:20:74:91:6d:39:60:14:93:f6:6f:9a:
4c:c4:78:ed:ea:d9:a4:95:61:f6:94:1f:4b:3e:c2:
66:87:55:a5:0a:52:89:48:57:12:fd:40:88:5e:8f:
a9:ad:19:87:81:82:ec:28:d6:1f:27:8a:68:9f:29:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:4C:98:1A:5A:97:24:98:3B:BF:83:61:AB:00:3E:00:98:29:0C
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:5c:ee:53:45:7a:ec:2f:51:59:b0:a5:91:6d:fb:a2:d4:
90:91:1d:3c:5a:3f:ff:35:eb:f3:e8:15:7f:95:75:f4:94:1b:
93:04:1c:47:dd:49:29:46:b8:a5:f3:7b:53:42:27:de:52:d9:
11:59:45:84:c5:9b:63:4a:fd:4c:1d:86:07:42:fb:c9:79:93:
95:36:99:61:7b:73:d1:cf:01:1a:27:90:e1:f3:17:b2:11:e7:
0d:c7:b5:8e:a1:da:85:95:83:ff:52:95:4f:36:83:88:6c:9c:
9b:34:10:20:3f:06:69:c6:bf:f4:dc:98:cd:8b:1a:9a:c3:99:
07:39:a3:37:7c:45:cc:35:7a:31:05:3b:61:d8:3a:8b:5a:1d:
04:69:32:bd:a8:f5:0b:09:d5:cd:ee:46:8d:16:e9:d2:f7:50:
b8:6a:16:b6:1a:4f:86:31:41:b0:b0:ae:c2:da:f4:79:0e:14:
e0:59:0e:1b:63:22:95:21:3d:94:c4:49:5a:58:74:e0:35:c8:
14:8f:f0:1c:8c:06:54:b8:a2:8a:5d:b6:33:3d:bd:c8:c5:d5:
93:e7:c3:4b:99:02:f9:0b:31:a2:d1:34:ea:3b:e6:b9:a7:a1:
8d:2a:22:3a:26:9f:f3:42:a9:d4:6f:91:e6:85:02:c5:ee:5f:
2f:20:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:36 2025 by rpki-client