Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
File: JV_ylgEpdHxRvatuGDxg_3h6xeY.mft (raw, json)
Hash identifier: Xd5/L+o7m6RniEUlM1jg2EnBLGtpaauhLcfn3/NHgwQ=
Subject key identifier: 03:3F:40:E7:19:39:17:03:BF:01:E9:C8:2F:64:64:94:BC:FC:33:C1
Authority key identifier: 25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
Certificate issuer: /CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Certificate serial: 0195E0EB358A8159900ECAEED3DCCD9539C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 08:01:05 +0000
Manifest this update: Sat 29 Mar 2025 08:01:05 +0000
Manifest next update: Sun 30 Mar 2025 08:01:05 +0000
Files and hashes: 1: JV_ylgEpdHxRvatuGDxg_3h6xeY.crl (hash: 27GWVqsLj1zBJefnqtIl1tYnEZaySwk78GbZfx5sUd4=)
2: wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa (hash: IcXFbOy2kL3XD2CXj0cfmypyYeMpopQ8OdQl+N2lEgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:35:8a:81:59:90:0e:ca:ee:d3:dc:cd:95:39:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Validity
Not Before: Mar 29 08:01:05 2025 GMT
Not After : Mar 30 08:01:05 2025 GMT
Subject: CN=033f40e719391703bf01e9c82f646494bcfc33c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:00:01:23:10:af:14:64:ee:07:15:5f:a3:
7a:13:75:1f:cf:1b:6a:65:96:cb:5a:cf:a9:ab:6c:
f3:e9:3b:5f:67:62:bb:15:d1:d6:e4:4e:4c:24:7c:
a9:fa:77:10:be:77:75:e2:0b:67:fd:9e:11:9c:e5:
f1:0c:23:2c:be:14:ce:ae:b1:ac:f3:97:37:ea:f9:
a4:9e:f5:e2:b1:fc:a8:e3:c2:5f:5b:a0:3e:37:0f:
91:8d:99:30:e4:4f:83:26:e5:b5:22:67:a8:1f:09:
3b:f7:1d:72:3d:60:44:3d:e2:c9:ca:12:4f:d4:5f:
91:84:a1:cf:97:ac:2f:68:5b:e0:31:dc:29:c1:e7:
a1:f7:0f:01:14:64:d4:0c:7b:e5:93:01:ef:d8:7d:
b9:f4:91:d8:4a:f6:29:d8:86:11:f4:9d:69:d3:56:
eb:06:35:bb:20:9c:73:9e:6b:c6:e1:70:76:b0:28:
6a:e3:da:6e:45:8a:6c:f6:18:9a:8b:4e:85:9c:19:
c6:ce:c0:4d:fa:3e:99:80:44:35:1a:57:af:2a:57:
2f:0c:be:b6:ff:df:01:6f:45:10:fe:7b:03:19:3c:
11:86:79:f0:16:88:a6:0a:93:76:ea:f2:e4:c2:65:
bc:6a:05:bc:9a:ff:7d:e6:4e:35:f3:29:fe:be:e9:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:40:E7:19:39:17:03:BF:01:E9:C8:2F:64:64:94:BC:FC:33:C1
X509v3 Authority Key Identifier:
keyid:25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:db:4f:2f:dd:71:82:92:3f:44:4a:ec:b7:b1:fe:33:ca:
8a:6d:2a:b3:cd:c4:30:9a:91:26:dc:9a:fd:d3:6e:31:83:b4:
88:fe:ed:f4:c3:4e:80:18:77:64:85:7d:e9:82:4e:15:b2:f7:
64:b9:83:ea:ec:d6:9b:94:6e:37:b9:a4:a8:a7:6b:ac:3d:dd:
79:bd:bf:57:9a:10:f3:1e:c6:62:a5:5c:34:81:d1:aa:10:ca:
7f:9a:85:4c:f7:5d:3f:d4:10:51:0c:7b:e0:51:08:23:08:29:
60:3d:bb:a2:02:b9:b2:ba:a4:e8:f1:9c:da:8d:81:b2:89:a1:
92:4a:81:fa:b8:33:10:0d:86:22:36:e3:83:2b:c4:47:f3:92:
68:46:d7:7c:34:42:ea:48:fd:d4:e3:8e:da:20:f6:d5:1d:06:
7e:7e:e4:0a:8c:00:a8:1c:c2:fe:2b:c0:11:84:9a:cc:d2:41:
0f:d3:5a:2d:bd:6b:5a:0c:c5:54:b1:9c:35:0d:ff:32:1f:d8:
1d:fa:f3:8f:ac:6d:af:20:5e:41:6f:47:fb:85:42:1c:d8:71:
cd:cc:c8:d6:41:e4:9e:4f:13:3b:f9:29:77:19:0c:51:a3:2c:
53:bf:1a:5b:9b:32:75:54:04:7d:e7:b1:f4:f9:d1:f4:8a:25:
ad:4b:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:29:19 2025 by rpki-client