Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File: jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier: Krw+Mfa9g33jRAFv5R3wSZYtMzaeJeaLXdFx8YkTsxk=
Subject key identifier: 7B:EF:A4:97:CD:78:8A:65:82:DA:D0:A3:03:00:EE:41:73:AD:75:1A
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer: /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial: 0194BBCE22A1A3D9A368FB5270903DD516AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=)
2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: DIgigTqc223JEjFecKMQ0FL9x8Ymvk/3O9ppnUvF7ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:a1:a3:d9:a3:68:fb:52:70:90:3d:d5:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=7befa497cd788a6582dad0a30300ee4173ad751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:2a:93:f9:f8:3e:f1:04:58:d8:52:5f:30:
a3:ec:b7:7a:43:98:8b:4d:ab:67:d1:d9:23:ad:f2:
a6:6c:c4:23:0b:9c:f4:66:f5:fb:48:9f:67:07:e5:
a9:86:b3:eb:ad:cb:f4:c0:da:8d:4e:5c:ec:eb:79:
2d:41:db:ea:eb:8a:18:b0:33:21:8c:af:95:64:e6:
9a:38:4a:86:f2:c6:0c:fd:15:fd:52:f9:45:da:0d:
0c:f0:f5:a4:86:f9:a4:04:f2:59:e6:d8:1f:cd:e7:
e8:05:67:43:06:1e:8c:30:3d:7a:fd:50:39:99:34:
f3:48:f5:8a:f8:50:12:93:5a:e0:4c:3d:ba:ef:07:
ed:af:fe:c6:36:d6:14:56:72:a5:48:11:3d:50:dd:
ab:0e:ab:f3:e3:52:7b:e4:7b:23:b2:3b:90:e2:8d:
79:e5:4c:7b:af:fa:e2:3b:d9:2a:bc:55:11:8e:42:
90:31:b7:a4:e7:7b:2b:ff:b3:d0:da:a4:d8:23:14:
45:d4:7a:38:27:4b:39:21:53:00:86:3f:50:84:bd:
fc:a7:e6:3e:ad:1e:07:97:a9:51:e3:9c:06:02:f3:
e3:7b:8f:aa:94:c9:d4:95:aa:ab:35:9a:5f:56:a9:
07:48:d6:e8:7e:ae:d0:06:ad:c1:d3:8b:28:e9:02:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:A4:97:CD:78:8A:65:82:DA:D0:A3:03:00:EE:41:73:AD:75:1A
X509v3 Authority Key Identifier:
keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:09:1c:85:b7:89:82:72:1d:98:78:65:a4:41:5a:bb:a9:f7:
b4:04:98:a7:51:92:2f:f4:8a:60:46:7f:98:62:13:8e:7d:ba:
91:09:85:ce:94:82:54:74:25:66:5f:39:31:ac:dc:9d:62:57:
33:ba:0e:b3:9f:c7:bc:f5:88:cb:2a:da:ee:8d:8d:f7:4a:02:
51:77:11:97:62:4f:4c:cd:ca:3f:ab:60:ae:90:2f:dc:ac:72:
85:04:3f:9b:82:da:8f:6e:96:7b:4b:58:b6:35:f9:17:11:0b:
fa:5e:b8:49:9e:22:1d:bb:c3:c7:2f:f6:f8:9f:d3:8f:6d:52:
29:4a:38:84:79:86:ab:dd:47:c4:28:bd:31:9c:40:ba:89:60:
ae:b7:0c:0d:4b:66:90:d4:b1:18:1c:e1:08:a9:6b:76:8e:73:
cf:21:71:89:b2:c3:13:17:72:f3:0b:55:38:6e:e1:fc:2b:7c:
cb:6c:b9:93:64:a2:de:44:ef:37:88:20:99:d6:e2:2b:01:ca:
4b:61:f7:06:6e:f5:e8:a3:d3:b7:f2:e5:c3:8d:20:c0:df:b1:
f2:cc:f1:59:54:79:04:69:a1:68:35:f9:32:2f:bc:d9:32:b1:
0c:22:26:9c:c0:d4:7c:e3:5a:72:23:9b:35:4e:c3:91:a4:87:
e8:34:57:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziKho9mjaPtScJA91RauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmM3M2ZhMTcwYzNhYjllYzQzNGQxZjI5ZDNkYmRlNzky
MGJmODgwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
Eyg3YmVmYTQ5N2NkNzg4YTY1ODJkYWQwYTMwMzAwZWU0MTczYWQ3NTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYqk/n4PvEEWNhSXzCj7Ld6Q5iL
Tatn0dkjrfKmbMQjC5z0ZvX7SJ9nB+WphrPrrcv0wNqNTlzs63ktQdvq64oYsDMh
jK+VZOaaOEqG8sYM/RX9UvlF2g0M8PWkhvmkBPJZ5tgfzefoBWdDBh6MMD16/VA5
mTTzSPWK+FASk1rgTD267wftr/7GNtYUVnKlSBE9UN2rDqvz41J75HsjsjuQ4o15
5Ux7r/riO9kqvFURjkKQMbek53sr/7PQ2qTYIxRF1Ho4J0s5IVMAhj9QhL38p+Y+
rR4Hl6lR45wGAvPje4+qlMnUlaqrNZpfVqkHSNbofq7QBq3B04so6QInUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvvpJfNeIplgtrQowMA7kFzrXUaMB8GA1UdIwQY
MBaAFI4sc/oXDDq57ENNHynT2955IL+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt
ZmVlMTJiZmQzYmQxLzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx
LzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wkchbeJ
gnIdmHhlpEFau6n3tASYp1GSL/SKYEZ/mGITjn26kQmFzpSCVHQlZl85MazcnWJX
M7oOs5/HvPWIyyra7o2N90oCUXcRl2JPTM3KP6tgrpAv3KxyhQQ/m4Laj26We0tY
tjX5FxEL+l64SZ4iHbvDxy/2+J/Tj21SKUo4hHmGq91HxCi9MZxAuolgrrcMDUtm
kNSxGBzhCKlrdo5zzyFxibLDExdy8wtVOG7h/Ct8y2y5k2Si3kTvN4ggmdbiKwHK
S2H3Bm716KPTt/Llw40gwN+x8szxWVR5BGmhaDX5Mi+82TKxDCImnMDUfONaciOb
NU7DkaSH6DRXrw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:07 2025 by rpki-client