Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: XlUzbuQN+rjPYOrp3OvqQnPGL+QR/oBXPrSwojgO42Y=
Subject key identifier: C8:8B:DA:C0:94:59:59:B7:01:33:E5:9F:69:0D:82:B8:A2:C3:30:8E
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 0195E04636FE881E61E4AF08765A1F35276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:00:52 +0000
Manifest this update: Sat 29 Mar 2025 05:00:52 +0000
Manifest next update: Sun 30 Mar 2025 05:00:52 +0000
Files and hashes: 1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: Y26p4T3Tr4HjVnoGLcwG2ZGFHfYPMZWlFlh7yKajgEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:36:fe:88:1e:61:e4:af:08:76:5a:1f:35:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Mar 29 05:00:52 2025 GMT
Not After : Mar 30 05:00:52 2025 GMT
Subject: CN=c88bdac0945959b70133e59f690d82b8a2c3308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:6c:ce:24:b1:1f:63:13:c7:21:6d:bb:31:
16:31:a9:49:c2:45:5a:df:19:3d:3b:86:bb:92:09:
93:23:d0:4f:9d:9f:80:a8:29:9b:35:88:e0:67:60:
2d:ee:33:c8:32:ed:13:75:22:aa:dc:1a:55:7b:1a:
bd:cb:4d:e4:ac:93:c1:18:7f:5b:dc:01:a5:5d:a1:
57:fd:cc:d7:8f:10:03:99:65:84:b5:f8:60:25:a4:
8b:14:42:8d:8c:a1:c7:1c:3c:ca:a4:be:98:9a:be:
c3:6d:24:1b:c9:08:c8:ff:bf:35:6a:ea:fc:4b:5e:
c3:e9:9c:d4:b0:9e:36:93:49:df:15:de:f5:3b:2c:
50:f4:5d:10:cd:41:62:16:47:b4:38:bd:09:36:39:
c5:45:0c:df:74:0b:c7:2f:df:ed:eb:af:5a:97:ae:
c2:6d:e1:77:09:13:10:6a:e4:f0:7e:96:1d:96:16:
8c:b5:18:4c:f5:32:e6:56:30:32:42:69:be:bc:33:
70:99:01:c3:31:07:dc:72:02:7d:7a:5d:0b:7c:8b:
72:56:34:7b:6d:74:db:95:08:57:57:e1:c5:00:ed:
56:09:1a:09:a1:fb:2b:ac:c4:85:bb:fc:e4:8e:70:
0e:ba:c5:45:99:36:3f:37:c8:25:a9:7c:b1:40:44:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:DA:C0:94:59:59:B7:01:33:E5:9F:69:0D:82:B8:A2:C3:30:8E
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6c:78:5b:8b:bb:98:2f:d0:9d:77:da:6f:6f:07:6b:e4:a2:
a8:38:7e:9b:0e:7c:0a:5e:87:07:7d:3a:5a:6d:71:6c:09:82:
79:fd:d0:ba:57:5b:55:72:b2:81:78:e6:7a:a6:f0:b2:b5:3d:
7d:77:a5:6d:37:a6:9a:43:c5:a7:1b:52:e4:55:9c:cc:3b:be:
bf:27:73:6c:54:8f:24:a0:fb:b1:e1:1c:df:a2:71:59:45:72:
87:82:19:59:91:60:0b:76:65:96:d1:e0:e2:cb:25:32:e8:71:
cd:88:91:d1:f0:e3:c6:28:9a:54:20:06:65:b2:c0:b5:68:7a:
94:93:c6:47:4d:f6:03:48:ed:11:c7:38:a4:2e:3d:70:6f:2b:
21:ec:62:c2:8c:e1:76:a5:f2:4c:e4:d1:02:67:7d:c2:2d:ac:
b0:34:cc:50:6a:de:e8:86:f0:41:56:a0:d7:88:65:70:1f:5f:
8b:02:4b:7c:8b:28:0a:ab:73:35:6a:f2:f4:2d:d8:e4:38:64:
c0:89:95:30:36:ab:bc:d1:11:41:5a:6f:06:84:40:d4:43:06:
44:0c:66:59:97:1f:ae:1c:9d:d6:cc:d9:ac:34:d9:20:d4:25:
29:90:d1:96:f4:65:c2:f2:49:71:3b:e9:b1:e2:a0:bc:df:c9:
be:2b:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:39 2025 by rpki-client