Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: ghU75mCMO9Ma7VPPNvIKim8yHyEemXomYFkFIAdxJI4=
Subject key identifier: 4E:3D:E4:38:BB:2C:A4:EF:11:D6:B3:27:A6:6D:EB:48:DD:69:07:7E
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 0194BCA99EF127C088930238C28F29AA7666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: VF/j4p3Fcpax8XACoyXG8gwxlyLVlNp1LwKEt10NgDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:f1:27:c0:88:93:02:38:c2:8f:29:aa:76:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=4e3de438bb2ca4ef11d6b327a66deb48dd69077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:19:d5:d6:a4:91:6d:02:4f:33:c8:94:fa:
ac:9a:4f:24:2c:45:3f:d2:a1:1e:5a:46:0b:67:49:
10:ec:18:5f:1a:d2:87:7c:e0:12:c3:c3:cc:07:e8:
31:0e:4a:26:32:54:6d:b1:fa:67:4f:17:cf:43:88:
59:81:97:af:a0:db:97:37:1d:1e:f7:ab:13:fb:5d:
92:07:0d:27:01:63:99:9d:89:93:bb:b1:13:13:3f:
4c:43:2d:f9:f2:f0:71:56:c9:94:31:c3:3a:5a:6f:
b2:f4:5e:fa:69:79:e7:24:19:9c:67:73:25:d7:9f:
d7:3f:d6:20:a7:1f:31:56:c8:fb:ca:8d:29:fb:22:
fd:37:8a:e6:16:24:3c:d8:d3:cd:20:0b:cb:33:b9:
14:4e:c5:a9:61:d4:fd:23:c3:00:21:20:2f:72:5e:
02:ee:a0:ad:2b:9b:1c:1f:31:b0:c4:0a:fd:a1:4a:
1a:6b:cc:f9:e1:da:f4:44:88:74:2b:62:d9:d9:f7:
0d:3b:d8:e1:e6:69:a0:36:2e:f5:67:2e:83:f7:80:
46:c1:18:95:81:95:e6:3f:9e:a7:c5:33:f3:65:ce:
ca:c0:88:66:80:3e:3b:ea:65:82:12:d0:0e:15:39:
78:0e:3a:d7:7d:ed:36:8a:79:ab:15:f1:1c:94:74:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:E4:38:BB:2C:A4:EF:11:D6:B3:27:A6:6D:EB:48:DD:69:07:7E
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f8:e3:9d:6b:3a:f2:9d:ba:41:93:40:c3:bf:d5:f1:31:7f:
38:0a:3c:44:b2:32:55:db:e6:11:76:ac:44:73:22:37:e1:e3:
3e:92:f7:cf:d8:f2:78:dd:a0:db:a8:95:4e:d5:19:af:0a:92:
1a:cc:b2:21:de:6a:35:24:24:4c:8f:40:ef:03:14:d6:cc:62:
9d:25:9b:3c:95:85:77:6f:06:72:f5:31:89:88:8a:00:a6:f2:
23:c3:24:f1:27:e8:f3:f1:b0:9d:3a:3e:2b:65:83:a3:f8:9a:
f9:42:8d:77:31:f8:b6:28:d5:3d:c2:08:e2:65:38:5e:94:70:
dd:49:25:50:d6:74:67:27:69:2e:7e:37:c1:9f:3a:ad:69:30:
54:2d:9c:8f:ac:c7:1e:aa:85:32:41:48:7f:fb:b7:82:80:38:
f0:3f:9b:db:85:6f:ce:25:5e:32:af:14:fe:4f:92:e7:65:55:
ff:4d:e5:fa:87:82:fa:64:49:08:65:55:52:0d:be:fd:50:d1:
4f:9e:f9:93:eb:f9:3e:00:cb:de:fd:d7:43:54:61:12:98:e3:
eb:22:87:7d:90:71:4f:81:51:63:13:82:fa:c6:b4:05:95:99:
2e:9a:95:38:6a:47:15:73:0e:aa:ff:1f:f9:bc:26:b9:b5:61:
17:da:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:43 2025 by rpki-client