Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.mft
File: jlbb1oIqMuOzRDJT5Xt_JdJQlE0.mft (raw, json)
Hash identifier: C/sZ3fPVa+8Gh850hEkVXBkzaoSST2oU+RMbwmMDIp8=
Subject key identifier: EF:D2:B8:05:CC:7B:AD:6E:A4:92:BD:19:9B:9B:82:7C:37:12:25:21
Authority key identifier: 8E:56:DB:D6:82:2A:32:E3:B3:44:32:53:E5:7B:7F:25:D2:50:94:4D
Certificate issuer: /CN=8e56dbd6822a32e3b3443253e57b7f25d250944d
Certificate serial: 018B5FA12B2C5FD32A291B237A39D44CD86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.mft
Manifest number: 0A3E
Signing time: Tue 24 Oct 2023 03:01:19 +0000
Manifest this update: Tue 24 Oct 2023 03:01:19 +0000
Manifest next update: Wed 25 Oct 2023 03:01:19 +0000
Files and hashes: 1: jlbb1oIqMuOzRDJT5Xt_JdJQlE0.crl (hash: SJNhBDhxYhYMuD87NdbJxrX8wZCs/IiaeDVzjgsUbV4=)
2: tN8fOLWQL3d9NT7xo6lO5l3rjTA.roa (hash: pkp39HZ9LX4P5x1M2RqpRPfXCSD+IdPvo0DrLUm5kuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:a1:2b:2c:5f:d3:2a:29:1b:23:7a:39:d4:4c:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e56dbd6822a32e3b3443253e57b7f25d250944d
Validity
Not Before: Oct 24 03:01:19 2023 GMT
Not After : Oct 25 03:01:19 2023 GMT
Subject: CN=efd2b805cc7bad6ea492bd199b9b827c37122521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:3c:62:10:b9:05:5f:dd:ea:dc:59:a9:75:
82:fd:f1:9e:20:d1:af:8a:9e:b5:7a:06:21:20:be:
c7:8f:dd:d7:d4:df:4a:f0:22:0e:de:22:5c:1f:a0:
c2:4f:3a:e2:3d:2f:e3:0b:d8:a6:75:33:3f:49:74:
d9:84:9d:86:a7:b3:46:09:e1:0f:52:c8:17:0c:c7:
ac:fc:bc:b4:0e:33:2d:12:c7:64:e1:69:c2:56:94:
8a:25:2a:96:d2:59:78:f9:eb:c3:7b:0e:fe:35:0a:
1c:40:38:8f:51:65:be:41:e6:24:c3:0a:c7:fc:e2:
68:6c:40:e8:8c:d9:2b:e6:5e:0c:2b:78:2e:d7:6f:
2c:27:28:c8:ef:87:d8:26:06:4d:95:7b:fa:52:f4:
87:89:f6:25:5b:d3:e8:87:ce:8c:cf:08:45:cc:e8:
5a:30:6f:0e:05:b1:04:9e:b9:e2:e0:dd:a4:47:9c:
83:1f:f5:e7:ca:a9:cf:4b:e6:b9:df:79:ec:22:62:
e1:a6:3c:a8:00:ee:f5:6c:d6:53:96:1e:68:62:fe:
76:c5:12:36:22:f1:ce:8f:2f:3b:06:85:23:ab:7b:
2c:68:d6:e4:88:28:d0:bb:5e:70:f8:ab:80:b5:aa:
fc:dd:e5:f8:ee:fc:fa:68:61:fc:ca:d7:7f:e6:89:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:B8:05:CC:7B:AD:6E:A4:92:BD:19:9B:9B:82:7C:37:12:25:21
X509v3 Authority Key Identifier:
keyid:8E:56:DB:D6:82:2A:32:E3:B3:44:32:53:E5:7B:7F:25:D2:50:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fd:67:5b:81:eb:e6:83:5c:97:98:26:a6:16:ce:ec:c2:9b:
fc:cd:4a:b9:b1:d1:f5:29:cb:2d:49:d1:30:e2:c6:ed:58:50:
76:51:5a:bb:81:77:67:6f:53:60:56:ca:fc:f6:29:3f:e6:4e:
29:8c:f0:5b:2e:e4:aa:36:ca:ef:e7:65:8a:10:aa:87:9d:59:
c8:12:45:02:35:4e:1f:7e:a4:77:92:e1:1d:cd:9e:41:ca:a2:
2f:e8:51:76:7d:01:e9:ac:a5:10:20:23:20:a7:70:35:3e:77:
bb:41:92:5d:12:61:69:83:3a:2e:a1:c8:3e:0b:38:12:7b:3a:
bc:37:f0:e2:ce:05:67:4f:99:40:c4:b3:1f:05:6a:0b:f0:79:
81:ba:5f:74:2e:da:96:83:c8:c5:12:31:72:e6:1f:c0:dd:37:
2d:91:f4:6c:f3:89:80:8f:be:b4:71:40:9d:82:07:67:26:5a:
68:3f:09:2b:45:d5:38:49:a9:1f:0b:75:ed:ee:55:5d:d8:ef:
f1:a8:b6:05:54:0b:9b:86:62:ec:e1:7c:53:0d:5a:50:cf:5a:
33:03:51:47:dc:5e:28:d3:86:55:8a:10:d1:cd:02:95:df:df:
3b:e9:9e:61:de:17:f6:8c:0c:19:12:ff:e5:a7:ae:64:03:20:
db:2c:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:57 2025 by rpki-client