Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
File: jzAoLIbxBGuTEkzycOEU5fAm_3M.mft (raw, json)
Hash identifier: vH7iuhHEanWboNMd5dJIjGizSUxv5Ghw8B1R+DxSTeI=
Subject key identifier: 65:B5:6E:AA:29:C1:44:8B:5D:E5:EF:42:4C:43:71:1F:58:F1:E4:24
Authority key identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73
Certificate issuer: /CN=8f30282c86f1046b93124cf270e114e5f026ff73
Certificate serial: 0194BBCED16CC0A0A77DD2243B8918BE5C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
Manifest number: 0DE8
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: jzAoLIbxBGuTEkzycOEU5fAm_3M.crl (hash: v4l5hIxOpL19QdWNQ4D8bkaj4wOTryRJExhQRFh4PJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d1:6c:c0:a0:a7:7d:d2:24:3b:89:18:be:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f30282c86f1046b93124cf270e114e5f026ff73
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=65b56eaa29c1448b5de5ef424c43711f58f1e424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:69:fc:46:bf:82:dd:5d:c4:ab:b9:dd:79:
ad:1b:18:82:c0:84:0f:46:1f:a3:5f:72:41:a9:6f:
d4:dd:86:48:29:16:6c:88:7f:18:61:07:54:7d:ce:
14:e3:56:82:65:4c:c9:f1:ec:50:19:9b:c8:cf:93:
04:43:76:d8:b1:0a:8a:fa:97:93:24:8c:cb:31:c0:
f5:1f:2e:d7:8c:8e:56:03:8e:7c:3c:8b:b2:69:3f:
1a:02:6c:38:7d:22:c5:86:5f:d4:1b:74:22:ee:ae:
82:91:9e:76:a7:c8:d9:90:31:e2:78:44:e2:a7:9c:
2b:70:2c:14:73:b4:df:f9:6b:ef:c7:36:f5:19:6b:
cd:84:a1:f6:63:bf:34:d1:d7:9d:d3:8b:ed:84:4f:
df:84:35:0c:24:89:62:79:93:65:ee:a6:63:fa:72:
57:e8:28:c1:3e:b5:f6:1b:86:63:a1:4a:07:bd:28:
6c:59:c4:ce:f3:96:c8:cb:4b:60:a9:b1:5a:d1:12:
0a:ad:28:25:54:2d:74:50:bc:12:31:fd:5d:ad:a5:
c6:56:80:50:b9:47:ba:fd:8b:46:1d:d4:92:fd:46:
02:0a:70:93:80:97:3f:35:52:2f:ac:74:16:cb:2c:
cc:c8:4e:6a:c3:90:2d:ad:d4:50:6a:40:d9:e6:9a:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:6E:AA:29:C1:44:8B:5D:E5:EF:42:4C:43:71:1F:58:F1:E4:24
X509v3 Authority Key Identifier:
keyid:8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2f:82:57:85:a4:9b:ef:24:20:8c:c6:89:5e:b8:90:45:0d:
5c:92:cf:a3:09:91:f3:fa:3c:fb:25:d6:07:2b:c9:57:dd:fb:
ab:b7:40:ce:9b:00:19:db:05:bb:d9:9f:31:58:91:7b:6e:2a:
06:65:04:25:3a:28:9f:d4:13:02:6f:1b:f7:0a:4e:3a:45:b0:
82:c3:85:77:92:10:96:ce:e1:6b:96:b0:87:7f:61:41:38:18:
f2:05:4d:fa:ca:ef:8c:82:0e:50:2c:5d:4b:27:60:d1:f2:8c:
02:ee:af:a2:72:40:b8:35:10:b5:de:72:f0:18:8b:16:99:6b:
5c:fc:97:10:26:9c:3a:ed:9d:4a:a2:e2:4c:3d:c5:a7:69:cd:
ec:c6:f5:f0:12:7d:eb:e0:e4:79:5c:92:b1:89:55:e8:d4:00:
d2:0d:97:e2:8e:24:c9:80:a0:13:b2:7c:75:19:d1:e9:0d:4c:
eb:94:df:f0:13:80:70:ee:c9:a7:ab:a4:ac:61:67:69:5c:1e:
94:c1:c8:0a:5b:c0:31:45:c2:3e:94:a4:4e:5d:2d:6e:44:bd:
b3:db:e6:9f:0c:a8:e4:f9:f7:25:d9:07:06:82:e8:6a:95:d3:
0e:0c:82:8b:f5:b6:5d:fa:03:46:0c:f4:81:06:98:42:78:76:
94:ed:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:31:24 2025 by rpki-client