Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: 1G3QoUG9wPVo+f/OJNXv0SU+J0GjzJ50tWp7eBXSUyQ=
Subject key identifier: 29:C1:BA:8A:DD:EB:27:31:76:A5:D0:79:45:EB:04:C7:C8:A8:75:32
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 0195E00F8C048C4A5FC499AC50F285BEE3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 87
Signing time: Sat 29 Mar 2025 04:01:10 +0000
Manifest this update: Sat 29 Mar 2025 04:01:10 +0000
Manifest next update: Sun 30 Mar 2025 04:01:10 +0000
Files and hashes: 1: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: 2GaHCAZD0x9LOxoMoUxzGSIUVXt0eirGi0FilFdEmjo=)
2: myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa (hash: v3M/68TF83GRhsjwIwly84Tjuf8KBFKnUC06+RwEUuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:8c:04:8c:4a:5f:c4:99:ac:50:f2:85:be:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Mar 29 04:01:10 2025 GMT
Not After : Mar 30 04:01:10 2025 GMT
Subject: CN=29c1ba8addeb273176a5d07945eb04c7c8a87532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:e3:96:31:c8:3c:70:55:47:8c:c6:04:5e:
b9:25:66:2d:ec:52:28:b2:f0:39:4a:b7:99:43:26:
6d:a8:d2:da:18:3f:c8:ad:57:1e:79:ca:be:00:8c:
21:69:9e:d6:9a:6d:a9:db:33:0c:8e:5a:3d:7d:48:
50:4e:78:26:7d:6a:b5:95:aa:18:99:d4:45:76:25:
fe:2e:99:30:44:7c:4c:c2:ad:60:68:4b:bc:db:67:
17:7d:48:cd:9c:52:13:82:75:31:14:0a:e7:29:57:
90:02:c3:74:5f:34:b9:3f:a6:ab:70:b2:04:45:84:
bf:f8:63:bc:fc:3d:a8:b8:7f:5f:d5:46:9d:68:d7:
3f:3c:16:c8:64:a3:3d:08:b8:da:99:a6:50:22:bd:
8b:a0:53:b5:cb:29:cf:de:d8:93:26:c8:a3:94:60:
c9:db:58:0d:60:2a:ba:09:2e:5d:18:2b:44:c6:0c:
e9:36:b9:b8:c1:f9:84:2e:06:76:be:18:fb:16:a0:
4e:28:36:e6:2b:c7:b5:cd:3a:dc:cb:46:54:25:33:
50:6d:4f:ca:10:b6:1b:f7:ce:31:a4:38:d6:a4:f2:
91:e9:b0:b7:2e:2e:19:1e:b8:96:57:f5:20:00:39:
53:d1:01:ae:20:d7:44:57:b4:b0:41:63:fc:77:fe:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:BA:8A:DD:EB:27:31:76:A5:D0:79:45:EB:04:C7:C8:A8:75:32
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:e2:76:48:15:1a:1f:00:83:7a:36:bf:e3:9c:05:56:3e:
62:2c:25:98:e3:e3:48:d3:48:ff:68:1f:1c:a1:48:c0:bc:2e:
52:65:25:9f:ef:56:fc:8c:28:cf:93:79:62:d2:e7:85:f6:13:
c6:6b:74:e4:67:20:3e:d4:28:8e:77:95:c0:dc:ab:b9:fd:0c:
c7:52:58:9e:4f:81:77:4a:72:4c:f7:d1:d5:a2:26:f5:77:2b:
c4:ca:c5:01:62:5b:04:ec:80:54:36:5e:db:0d:d8:69:10:2d:
ed:ea:f5:19:38:2d:fd:5a:a8:e0:af:93:97:9d:bf:ef:13:5b:
73:d7:2f:c0:4e:90:68:78:91:f2:82:9a:3f:c7:bd:b4:58:b6:
80:ed:65:d7:1d:64:8d:7c:0f:53:ed:1c:48:dd:ef:bd:46:c4:
2a:88:b3:db:57:e3:bd:ed:67:3c:84:93:13:98:bb:b4:df:3b:
af:b5:a4:2f:52:73:13:72:b0:b7:50:fa:52:4a:e8:af:72:49:
1f:83:9b:97:32:4c:ab:3c:81:7d:7e:6f:85:cf:81:be:12:b2:
b8:0a:3b:02:ac:dc:24:fa:40:c7:ad:ac:15:a4:f3:e7:6c:7b:
f3:dc:7e:1c:ec:92:70:17:48:a5:bc:f7:c5:f1:b8:b0:90:aa:
f5:3f:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:19:05 2025 by rpki-client