Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: IKuaoyc7Wl6IH0stsTqqKmAfaCEzHHp+8xnwva2qpmg=
Subject key identifier: 82:19:0F:4C:DD:3F:F1:05:93:4C:0B:03:45:01:1A:84:0C:FC:F7:90
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0194BD4E5ECF353D5B4175C25392D19144E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0D21
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: HfE1cn+FpN2tMGak6CfhD6U4xA0bIgt93JVEAI+q/lk=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:cf:35:3d:5b:41:75:c2:53:92:d1:91:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=82190f4cdd3ff105934c0b0345011a840cfcf790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:6c:51:b0:0a:69:b4:90:f2:d1:85:cb:54:
10:ad:a8:bb:50:71:a2:f6:33:a4:cb:eb:dd:0e:2b:
ce:10:98:ad:09:81:72:cd:e0:e4:82:48:5d:33:93:
52:bb:54:2a:d7:42:f8:1e:fc:eb:5f:09:5e:63:9b:
fe:03:c5:29:59:13:28:01:cb:9c:79:2d:c9:da:00:
21:e5:ce:15:e5:83:83:a2:2f:ed:33:5f:ad:67:39:
a3:90:13:a3:64:89:46:70:6d:c7:1c:25:98:46:85:
06:dc:c3:f4:14:bf:45:d6:7c:94:93:df:66:b0:d5:
19:74:0c:e1:4d:3a:01:c0:b7:a9:68:d8:8a:31:c3:
fe:e0:68:3d:ef:89:bb:5c:4d:81:a2:56:3b:9f:8d:
35:d9:7f:3f:dd:a8:b9:71:bf:2c:af:94:3a:bc:44:
f7:96:f4:a3:fc:71:dd:e2:b6:66:53:ac:2d:ce:02:
ef:71:15:38:76:bd:e5:d0:21:a1:ee:05:a6:82:b4:
e1:fd:33:53:02:90:ac:84:bb:41:c4:10:82:68:be:
ac:b3:16:cf:e8:cf:b5:5b:cd:c9:11:f7:21:2d:4f:
ce:c8:a4:1a:26:d8:8a:3d:b4:b8:52:fe:c7:d5:aa:
20:87:b1:c2:3f:ef:6d:8a:de:d0:ba:a7:1d:1e:ba:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:0F:4C:DD:3F:F1:05:93:4C:0B:03:45:01:1A:84:0C:FC:F7:90
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4d:fc:58:f3:90:3e:69:1c:5b:d8:c0:6a:4f:07:3c:f2:ae:
fd:ed:64:8d:71:95:9f:6c:66:a6:45:f3:8c:6b:c4:fc:ef:b4:
38:6f:5b:ec:77:4a:ca:ed:45:1c:19:71:9f:a6:19:1c:0c:3a:
d8:1f:52:05:5c:d6:6e:68:b6:d5:ce:c5:06:8f:01:ad:1a:cf:
2c:9d:3d:c5:17:3e:32:ff:b4:0d:a8:2e:95:49:f2:43:39:92:
88:44:cc:29:a1:ef:df:87:15:43:1f:48:42:52:5a:df:0e:b2:
a3:05:de:91:9e:79:54:a1:89:40:07:5b:a5:90:83:be:6f:9e:
9d:78:3b:9e:89:28:fb:a2:43:88:4f:1c:6b:06:de:70:a6:20:
8b:b6:7c:75:89:47:c1:3d:5c:ab:0d:39:9b:89:65:5d:69:ae:
f1:b9:60:0a:16:60:6a:46:bd:1e:52:85:13:1c:53:e4:08:09:
fb:ff:b6:e3:f1:3d:e5:71:25:db:e3:68:ea:9b:a6:c8:f5:1e:
2f:76:ed:83:17:c9:fb:98:9e:5c:46:71:10:e5:3c:bf:d4:44:
dd:d7:a5:5c:2d:87:8c:06:83:6a:4d:6d:4a:19:ed:31:23:a5:
08:c7:b4:f0:9b:21:de:69:bc:db:bb:71:5f:79:aa:be:a2:8e:
2f:85:60:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tl7PNT1bQXXCU5LRkUTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2
NGUxYzAwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
Eyg4MjE5MGY0Y2RkM2ZmMTA1OTM0YzBiMDM0NTAxMWE4NDBjZmNmNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9sUbAKabSQ8tGFy1QQrai7UHGi
9jOky+vdDivOEJitCYFyzeDkgkhdM5NSu1Qq10L4HvzrXwleY5v+A8UpWRMoAcuc
eS3J2gAh5c4V5YODoi/tM1+tZzmjkBOjZIlGcG3HHCWYRoUG3MP0FL9F1nyUk99m
sNUZdAzhTToBwLepaNiKMcP+4Gg974m7XE2BolY7n4012X8/3ai5cb8sr5Q6vET3
lvSj/HHd4rZmU6wtzgLvcRU4dr3l0CGh7gWmgrTh/TNTApCshLtBxBCCaL6ssxbP
6M+1W83JEfchLU/OyKQaJtiKPbS4Uv7H1aogh7HCP+9tit7QuqcdHrotEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIZD0zdP/EFk0wLA0UBGoQM/PeQMB8GA1UdIwQY
MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt
ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2
LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU038WPOQ
PmkcW9jAak8HPPKu/e1kjXGVn2xmpkXzjGvE/O+0OG9b7HdKyu1FHBlxn6YZHAw6
2B9SBVzWbmi21c7FBo8BrRrPLJ09xRc+Mv+0DagulUnyQzmSiETMKaHv34cVQx9I
QlJa3w6yowXekZ55VKGJQAdbpZCDvm+enXg7noko+6JDiE8cawbecKYgi7Z8dYlH
wT1cqw05m4llXWmu8blgChZgaka9HlKFExxT5AgJ+/+24/E95XEl2+No6pumyPUe
L3btgxfJ+5ieXEZxEOU8v9RE3delXC2HjAaDak1tShntMSOlCMe08Jsh3mm827tx
X3mqvqKOL4Vguw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:50 2025 by rpki-client