Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File: jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier: cyBbiUL7WbqKyCTMK7gn+e9KEWDQ5FhmNrAUwgY/p3w=
Subject key identifier: A6:BC:6D:75:8A:2D:74:C0:F4:40:BA:29:EE:9A:F3:7D:36:9B:1A:4D
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer: /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial: 0194BBCEBDE59248B4D48DEACEE8747BE930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number: 07A4
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: BmoVaxYmsVILQpk4kzm1qse7LV66umn+3NG496MH0lI=)
2: kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (hash: Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:e5:92:48:b4:d4:8d:ea:ce:e8:74:7b:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=a6bc6d758a2d74c0f440ba29ee9af37d369b1a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:71:b7:83:1a:cd:34:bd:37:2c:24:7e:53:
b6:8c:d9:b2:14:fa:5d:f8:39:51:6e:4d:a7:64:45:
54:13:6c:86:15:6c:3b:4c:1a:de:0f:eb:6b:81:3a:
1b:5d:d9:59:c3:21:a0:66:9f:dc:98:12:a0:47:d3:
ae:9e:2a:c5:62:14:c6:45:b4:35:7f:b5:0a:ed:0f:
38:fd:6a:f1:ce:a5:13:30:3c:33:e9:cf:f3:f7:c5:
6d:d0:5b:29:e9:e1:8f:45:3c:15:ff:77:2a:c9:4b:
21:57:9a:63:e0:27:4d:ba:4d:a5:54:62:a9:36:88:
8b:dd:54:52:25:55:19:7b:c7:68:6a:a6:1f:df:c5:
e4:3c:25:cf:a8:77:6d:af:b7:a5:5c:a7:ef:03:20:
f6:8a:9e:de:30:45:e3:4f:f0:0f:7e:60:0a:b4:24:
54:e3:9c:99:4c:b1:69:1b:fd:d9:05:af:ca:59:a2:
6d:8f:9b:dd:25:fc:e7:6d:db:ff:ef:6c:47:dd:20:
e4:7a:1a:5b:88:4f:2c:0a:36:db:ad:53:b9:97:2a:
25:93:45:f1:bc:7d:0c:a3:79:4e:8d:d5:4a:7a:13:
5b:b3:23:6c:0b:f7:8c:90:28:b3:e6:9b:52:50:d4:
57:1d:bf:27:7f:db:41:9c:1a:d7:0e:21:9d:32:c9:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:6D:75:8A:2D:74:C0:F4:40:BA:29:EE:9A:F3:7D:36:9B:1A:4D
X509v3 Authority Key Identifier:
keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3c:2d:e1:51:5f:32:60:e5:aa:7f:80:31:40:9c:06:8e:2b:
08:c8:1c:64:8f:42:2b:49:1b:64:57:d4:5c:2d:10:0d:bc:3c:
a4:a4:ae:7a:b7:16:d0:60:3e:06:3d:61:bc:ea:0b:d9:b3:37:
f1:3e:48:9d:3d:b2:73:09:bc:ce:0e:10:2a:3c:0d:c5:30:17:
23:b8:ec:c2:29:43:c9:68:9e:8f:14:69:67:15:e4:01:88:fe:
02:0c:cc:29:e9:1d:3b:11:30:c8:4f:b4:2f:9d:20:74:fe:db:
eb:22:fb:6e:bb:fc:2b:4a:c5:95:7f:76:e1:a6:bb:84:19:5e:
c8:04:62:f3:18:64:63:98:18:79:4b:59:9d:6c:e0:95:2a:07:
a9:91:c1:fb:15:47:26:af:32:1f:0b:88:66:33:61:6c:7c:1e:
8a:e0:7f:29:4a:9d:6a:4f:ba:a2:7e:6f:f7:58:49:2a:af:53:
d7:3e:cd:51:e6:44:ff:53:0b:ab:62:69:e0:dc:8f:56:93:22:
ff:ca:05:05:ec:f2:84:2c:46:1d:0a:f0:19:41:f9:b7:a1:f5:
6e:da:d7:19:3e:eb:d7:59:ac:94:03:e2:89:7b:b4:a7:a5:2d:
9b:b4:fa:dd:58:85:27:0a:52:67:7f:ab:6e:d1:19:37:66:9c:
c7:33:28:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zr3lkki01I3qzuh0e+kwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTBkOWI4M2YzZjAxNWFkODhiZjZiN2M1Mjg0ODY3NGFl
NWNiNmUwHhcNMjUwMTMxMTAwMTE1WhcNMjUwMjAxMTAwMTE1WjAzMTEwLwYDVQQD
EyhhNmJjNmQ3NThhMmQ3NGMwZjQ0MGJhMjllZTlhZjM3ZDM2OWIxYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMZxt4MazTS9NywkflO2jNmyFPpd
+DlRbk2nZEVUE2yGFWw7TBreD+trgTobXdlZwyGgZp/cmBKgR9OunirFYhTGRbQ1
f7UK7Q84/WrxzqUTMDwz6c/z98Vt0Fsp6eGPRTwV/3cqyUshV5pj4CdNuk2lVGKp
NoiL3VRSJVUZe8doaqYf38XkPCXPqHdtr7elXKfvAyD2ip7eMEXjT/APfmAKtCRU
45yZTLFpG/3ZBa/KWaJtj5vdJfznbdv/72xH3SDkehpbiE8sCjbbrVO5lyolk0Xx
vH0Mo3lOjdVKehNbsyNsC/eMkCiz5ptSUNRXHb8nf9tBnBrXDiGdMskF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa8bXWKLXTA9EC6Ke6a8302mxpNMB8GA1UdIwQY
MBaAFI5Q2bg/PwFa2Iv2t8UoSGdK5ctuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYt
M2ZlNTE4ZWE1YmE2LzEvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYtM2ZlNTE4ZWE1YmE2
LzEvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDwt4VFf
MmDlqn+AMUCcBo4rCMgcZI9CK0kbZFfUXC0QDbw8pKSuercW0GA+Bj1hvOoL2bM3
8T5InT2ycwm8zg4QKjwNxTAXI7jswilDyWiejxRpZxXkAYj+AgzMKekdOxEwyE+0
L50gdP7b6yL7brv8K0rFlX924aa7hBleyARi8xhkY5gYeUtZnWzglSoHqZHB+xVH
Jq8yHwuIZjNhbHweiuB/KUqdak+6on5v91hJKq9T1z7NUeZE/1MLq2Jp4NyPVpMi
/8oFBezyhCxGHQrwGUH5t6H1btrXGT7r11mslAPiiXu0p6Utm7T63ViFJwpSZ3+r
btEZN2acxzMoBg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:42 2025 by rpki-client