Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
File: jYzDMwiBzYyjntYJ_-GENySyqaw.mft (raw, json)
Hash identifier: bZV/Lyb95rxdidvQm5erV1CfMc8eVrjt7OZ6c5d5NPs=
Subject key identifier: 94:23:31:1A:E0:7E:E4:CE:9C:DA:77:A9:5F:D8:4F:F6:A1:73:B2:3E
Authority key identifier: 8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
Certificate issuer: /CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Certificate serial: 01963C1CBF5FA6155B6958BBCB05A98E7E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
Manifest number: 14EE
Signing time: Wed 16 Apr 2025 01:00:38 +0000
Manifest this update: Wed 16 Apr 2025 01:00:38 +0000
Manifest next update: Thu 17 Apr 2025 01:00:38 +0000
Files and hashes: 1: jYzDMwiBzYyjntYJ_-GENySyqaw.crl (hash: LjkyXglA0n4aoOYJdzWWGwauvt3ob9DM8tZczw8s4jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:bf:5f:a6:15:5b:69:58:bb:cb:05:a9:8e:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Validity
Not Before: Apr 16 01:00:38 2025 GMT
Not After : Apr 17 01:00:38 2025 GMT
Subject: CN=9423311ae07ee4ce9cda77a95fd84ff6a173b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:28:18:0c:c5:8b:c9:0e:f1:00:a2:80:fb:
2b:a3:97:c3:4d:49:d7:60:13:dc:94:5c:81:8e:18:
38:b7:c6:36:eb:61:ef:5d:6e:8b:0b:5f:11:a1:07:
21:f4:fd:12:4f:d9:c1:de:20:ab:ac:ca:23:95:ca:
fd:1e:58:f6:4a:1f:38:db:15:79:65:6a:3f:41:4b:
4f:13:fd:97:58:57:d6:6f:51:80:5e:f9:ce:31:12:
ed:dc:ce:ba:71:f8:2c:cf:e3:c0:e8:55:56:67:4d:
33:80:b1:38:01:0e:75:da:e6:91:65:e1:9b:52:d2:
68:cd:e0:61:5c:0c:78:61:6b:a3:82:59:3a:1c:2f:
80:2f:ad:9e:9e:b0:a9:14:50:19:1e:57:ae:25:84:
cd:2c:f2:3e:f6:29:bf:50:0f:29:24:6c:30:4c:15:
cf:c7:3c:4a:96:bb:4a:d2:b3:96:67:ae:76:bf:e3:
37:10:c9:70:b0:1a:78:80:c5:a5:b8:c4:49:a0:ab:
46:95:55:c7:be:53:2c:ef:d7:3c:15:c2:2b:df:58:
f6:1c:82:5b:fd:3d:76:27:d6:01:6c:01:46:98:da:
cc:9d:df:7e:86:57:75:8c:be:41:14:d4:8a:30:48:
1d:1b:70:94:0e:25:13:92:f1:55:d5:e7:3b:6d:b9:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:31:1A:E0:7E:E4:CE:9C:DA:77:A9:5F:D8:4F:F6:A1:73:B2:3E
X509v3 Authority Key Identifier:
keyid:8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b9:c3:28:cf:1a:ee:94:c4:04:a8:62:ab:84:74:09:9f:d9:
79:ab:44:63:5b:18:0c:64:00:dc:de:51:c6:73:f8:97:09:60:
44:76:65:33:9f:c2:36:b8:1d:a5:b1:57:c7:df:5f:f5:3d:3c:
72:23:62:1f:44:d7:b4:d2:1d:76:87:cb:e4:6c:2f:4e:39:17:
a6:a1:bc:1a:fc:3a:bc:66:ce:9b:28:f9:3a:70:2c:b2:37:4c:
7c:b6:ee:1d:b8:c9:05:f4:0c:31:9c:31:59:91:44:6f:bd:7d:
bd:3b:cb:50:59:98:48:e2:4e:ab:1d:19:f6:d0:10:60:54:3c:
2e:6b:90:d2:02:57:b1:fb:3d:f6:d9:1a:63:29:57:5a:f8:c7:
11:fd:48:5f:28:32:fd:c9:b7:e3:3e:4a:6f:bd:c1:71:24:b0:
99:a3:81:f8:86:1c:22:0d:41:4a:4e:44:73:14:c6:53:0a:9f:
e2:96:86:0e:e8:95:56:42:48:47:57:66:cd:b7:c7:08:96:79:
4b:a7:2e:48:f3:67:94:c8:ae:41:bc:ec:40:8d:3a:d7:dd:0c:
17:75:13:c4:d0:c2:08:1b:3a:0e:95:f1:33:ca:21:ea:77:0d:
67:8c:02:82:93:60:68:89:63:fc:6a:b9:80:12:09:7c:8a:52:
57:43:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:36 2025 by rpki-client