Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: mRYSJdlgd+eeTvU+Ra9zhBdKQD94J6Jleu4TyxefDUU=
Subject key identifier: FF:51:BD:F3:33:FA:BE:8B:55:66:21:9A:CE:E2:74:6A:DD:6C:1E:1F
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0194BCE06BD7ECFC21452B52530967A526C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0BCB
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: IyhMCc8oitF6isJAooxH7oajWiEyRO7KpCfVLQMyLWY=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:d7:ec:fc:21:45:2b:52:53:09:67:a5:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=ff51bdf333fabe8b5566219acee2746add6c1e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:69:3f:2e:05:08:36:8b:d0:3f:0a:aa:19:
02:6d:99:03:b2:a6:af:46:ac:d5:56:1e:06:31:c3:
4b:c7:a3:6d:69:56:72:fc:e1:79:bc:1f:96:86:42:
33:e2:52:3a:ae:8f:34:6d:b2:2a:31:89:8c:71:e2:
b5:a3:f2:a1:ab:29:b3:2f:7d:a6:ba:52:53:99:cf:
97:90:b9:5b:20:05:40:02:09:08:1a:15:b5:1b:46:
9b:d3:e2:35:f7:69:14:be:2e:2b:e8:f7:f2:99:f2:
ff:e8:ea:10:bc:4b:89:c7:5d:75:74:43:cd:8c:53:
95:e2:e5:1f:4e:c1:0c:6c:3f:6b:80:66:7c:95:a6:
ac:b2:46:06:46:45:dc:cb:44:8f:90:35:a0:0a:e3:
98:19:92:29:0b:99:7f:92:1c:2c:d0:09:18:92:95:
30:7f:23:4d:e1:a9:96:16:d2:57:74:91:e6:cf:9e:
63:12:33:fb:45:06:34:b5:26:e8:7d:3d:2d:d6:a1:
50:b9:07:02:15:af:35:9f:cc:ca:ed:0d:5b:df:41:
33:c6:09:e2:27:6d:bf:03:2a:b8:ee:48:11:a5:45:
0e:b8:d0:75:73:ee:46:aa:b3:35:df:7a:8c:37:d5:
5f:78:57:75:58:72:02:af:22:1d:72:e0:70:f7:28:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:BD:F3:33:FA:BE:8B:55:66:21:9A:CE:E2:74:6A:DD:6C:1E:1F
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a4:9c:8d:e6:77:31:44:ed:83:0b:4c:89:19:db:18:3a:40:
d7:1e:49:f8:63:0c:e2:7c:f2:47:27:77:30:a2:c3:3f:d3:48:
c6:eb:06:9b:d3:04:93:be:a2:8b:02:de:6a:dd:8c:2f:cf:6e:
1b:74:ff:8a:ee:72:01:10:98:ff:67:6a:4c:1c:df:86:fb:7e:
4c:f9:50:8d:a1:b0:a7:41:62:ac:42:cf:b1:0d:44:c9:d1:2b:
45:66:87:07:32:ca:86:2e:b5:01:4b:84:23:a7:e5:0d:51:2d:
b0:6b:85:52:08:b0:d9:25:b0:b3:0d:0c:a9:a1:79:6f:41:72:
e7:58:d4:63:1d:84:77:15:2d:78:02:f2:82:6d:06:84:84:52:
51:b7:11:b3:70:6f:9e:ab:76:e7:d7:4a:0f:88:a0:48:39:4c:
72:a7:50:6f:f0:39:77:e0:c9:28:b3:eb:7a:2c:c3:cc:6e:5b:
aa:6d:22:9c:f7:4c:a1:07:b2:69:da:74:f0:83:37:c8:07:2b:
b0:ab:ac:f7:2d:5b:39:2b:d1:b5:cd:d0:81:a6:30:b0:92:bf:
4e:28:29:b9:95:95:30:0e:f5:3d:61:6c:32:5c:8c:dc:1d:da:
f4:8f:af:c4:75:44:a9:9a:bc:68:95:b1:86:6d:8a:75:c9:b5:
50:b6:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client