Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier: dW6bpVzVy1JszZkdo3CkqKNHNBpR5aiu3qTV5NUdQZw=
Subject key identifier: D9:D7:77:56:54:71:4A:16:9C:0F:10:E8:9F:40:9C:1C:E2:79:A0:AC
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 0194BD85B423A79B64C66AAE23F0B152A951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: p90O6UJCny7dfOOOerHxovunqh+y30fZAIkZgLLmdAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:23:a7:9b:64:c6:6a:ae:23:f0:b1:52:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=d9d7775654714a169c0f10e89f409c1ce279a0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:5e:a9:1b:73:ee:af:ae:b0:7f:7a:70:bc:
3a:12:25:7a:5c:e0:d8:ee:8b:e2:83:53:0a:9e:3d:
b7:9e:1e:8f:bd:55:ec:f8:cc:aa:fd:db:8a:4a:41:
74:05:7d:40:5b:be:f1:b7:dd:c1:74:cc:01:97:98:
94:54:1f:92:a8:6d:e6:9a:2c:18:d6:00:21:4c:41:
a0:74:c4:4a:43:7c:9f:0d:d7:cd:f4:74:f5:58:52:
a4:00:d0:c6:c5:3a:b8:5a:61:93:67:b0:41:81:52:
c2:0e:9c:13:13:e1:e9:25:1e:ea:02:86:55:fd:62:
47:63:4a:4f:55:50:99:ee:ce:85:96:f9:eb:47:a3:
b4:8b:bf:de:78:3d:00:cb:68:b4:6f:8b:f9:cf:f0:
e8:b4:fd:29:19:ac:46:d5:bf:1a:33:9b:40:3a:2a:
fa:ad:49:e9:dc:83:7f:4a:ce:f3:e6:98:d4:88:59:
0f:66:77:be:10:21:50:42:6c:9a:c5:62:22:f5:3c:
ef:e4:3f:7c:95:f3:a0:9e:e2:a5:9b:97:ea:21:ea:
87:02:a4:de:33:20:5e:b5:8e:03:81:77:97:5c:b1:
77:fe:47:5d:8e:14:71:5a:cf:1c:93:70:a6:e8:8a:
b4:8f:96:d8:59:4f:08:ec:76:f8:d3:73:14:3f:66:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:77:56:54:71:4A:16:9C:0F:10:E8:9F:40:9C:1C:E2:79:A0:AC
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:6e:38:9a:1f:eb:42:17:9b:18:79:45:c7:66:69:f7:87:
70:02:9f:f9:62:47:ef:f5:68:e6:3a:29:77:77:39:f6:1f:29:
0e:7a:99:27:8d:f3:75:26:74:e0:e3:43:72:aa:7c:80:55:57:
ab:08:b8:06:18:83:6b:a9:dd:89:6e:68:5e:97:9b:82:c0:58:
e8:d1:a4:37:d5:db:90:8e:f1:5d:b4:e5:82:0e:cc:95:60:6d:
45:b7:2e:e1:32:8f:56:27:14:60:94:60:51:71:77:aa:75:65:
77:9a:d8:bc:21:04:8a:b4:70:d1:b2:9b:1a:b6:d0:aa:34:39:
c5:8d:9d:56:70:7f:25:4c:f8:b7:9c:c6:a3:2d:a6:5d:e5:8c:
89:58:45:2a:b4:f1:5e:30:8c:df:a7:4a:0c:fc:d8:cc:c1:9d:
0c:bf:da:88:9b:18:2a:11:a8:4d:4d:c8:15:bc:59:d2:9f:41:
54:92:ad:62:06:56:ee:43:72:3b:1c:e1:02:2a:99:78:eb:1b:
35:29:37:00:f7:40:9c:2d:08:19:b5:52:29:d5:89:15:fc:a0:
1e:f2:43:0a:c5:01:9f:af:b1:9c:69:f2:57:6a:e4:9e:37:b2:
bc:8d:8c:52:a7:e5:20:87:d0:f5:38:11:2a:5e:4d:4f:2f:14:
f3:e5:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:30 2025 by rpki-client