Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: 6imP3/xBCzjw1i5R8vRJswIhftb1vDRhNhSOpfAw4ok=
Subject key identifier: 63:10:09:A3:4B:91:35:C7:DF:8F:16:74:FB:0B:57:DF:66:F4:E6:EC
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 0194BCAA37FAAF7EEB1BFA56B5B49E74DA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0B71
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: UQzkX6t5zeq66g9CfuM3ydgNcU8+1s6cSDRmbzkbAhY=)
2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:fa:af:7e:eb:1b:fa:56:b5:b4:9e:74:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=631009a34b9135c7df8f1674fb0b57df66f4e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:e2:01:c8:ca:09:44:e7:b2:3b:73:48:6e:
44:d6:ff:7b:00:35:6e:8d:35:10:cd:cb:bb:52:c4:
eb:5d:fc:9b:fd:68:39:39:04:84:71:ea:20:c8:1c:
8c:3b:4b:4b:cd:ff:bf:3b:db:73:f0:e1:1c:db:d2:
80:93:51:00:63:92:2b:11:bd:e7:90:85:dd:82:1f:
a7:13:cb:01:de:f0:8c:eb:a8:b1:7d:1e:2e:b4:2f:
1e:f1:a7:70:e8:90:0f:6b:8f:82:f8:34:e6:6e:52:
fc:ff:4d:a3:b3:9e:1d:c7:80:8c:03:6e:87:8b:46:
67:b0:a0:9f:9d:f9:cd:bf:8e:b5:d7:7c:91:2a:bb:
8a:74:52:8e:51:64:56:6f:42:3e:34:49:b7:65:c4:
e2:a6:99:fd:a7:21:7f:e7:8d:2c:aa:40:85:94:42:
75:ee:44:7c:27:56:64:8e:7a:60:d6:0c:69:65:40:
aa:1a:c3:3e:61:0d:d5:84:f1:e9:f7:3e:c7:76:69:
1b:77:6c:6d:62:bd:78:45:6e:d4:95:5e:6d:a1:1c:
41:f5:86:97:5f:20:c5:c5:cb:ca:a5:b7:e7:26:9e:
8f:01:bf:d5:9b:ed:80:a1:49:e2:93:d0:b4:58:7e:
8a:09:ad:93:40:c1:c7:44:6b:f0:57:d2:60:c3:15:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:09:A3:4B:91:35:C7:DF:8F:16:74:FB:0B:57:DF:66:F4:E6:EC
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:12:6c:54:6d:67:2d:44:ed:40:c3:79:ba:7a:f5:6e:10:
94:7a:1a:cf:cf:9e:b5:71:01:6a:62:11:6b:c7:1f:61:dd:4c:
5e:e0:4a:d9:ee:7a:0e:c7:cc:8b:d4:d7:77:25:b8:ba:17:65:
1b:db:8a:ce:35:d6:9c:23:f3:1c:a4:cf:f7:29:04:ac:12:2c:
ff:80:12:e6:cc:8a:7f:6d:0a:21:e4:57:d2:4c:12:ee:d1:e1:
d4:ee:8c:9f:31:06:0a:f4:20:e8:34:db:73:ed:66:a6:51:79:
71:56:8b:24:8e:53:14:29:e2:4d:e7:c8:39:db:04:2a:df:5e:
bf:b7:8d:73:ac:b1:7c:86:c2:d3:17:94:28:62:7f:a5:92:c6:
da:ff:1e:fd:b0:1d:63:ac:ec:6c:ce:5b:f6:3b:27:b1:79:45:
b2:47:90:ba:19:43:f7:a4:82:62:75:cb:ca:94:aa:b5:cf:a8:
d0:67:2d:27:97:4c:59:a1:0a:0c:c3:49:ee:f5:98:64:62:44:
3d:de:54:c8:52:81:57:4c:21:47:c9:bf:7e:09:c2:63:ab:95:
c4:3f:5d:51:4b:c3:93:bb:05:8a:1e:31:89:81:d7:62:3c:66:
51:88:13:80:a7:d2:f0:84:4e:24:b2:21:6f:e3:cc:e1:32:4b:
e5:95:bd:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjf6r37rG/pWtbSedNp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzQwMDc0MTRjZmYxNmNkY2YzYTNhYTIyYTk2Njc3Zjhi
ZTJiNjgwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
Eyg2MzEwMDlhMzRiOTEzNWM3ZGY4ZjE2NzRmYjBiNTdkZjY2ZjRlNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDXiAcjKCUTnsjtzSG5E1v97ADVu
jTUQzcu7UsTrXfyb/Wg5OQSEceogyByMO0tLzf+/O9tz8OEc29KAk1EAY5IrEb3n
kIXdgh+nE8sB3vCM66ixfR4utC8e8adw6JAPa4+C+DTmblL8/02js54dx4CMA26H
i0ZnsKCfnfnNv46113yRKruKdFKOUWRWb0I+NEm3ZcTippn9pyF/540sqkCFlEJ1
7kR8J1Zkjnpg1gxpZUCqGsM+YQ3VhPHp9z7Hdmkbd2xtYr14RW7UlV5toRxB9YaX
XyDFxcvKpbfnJp6PAb/Vm+2AoUnik9C0WH6KCa2TQMHHRGvwV9JgwxVIJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMQCaNLkTXH348WdPsLV99m9ObsMB8GA1UdIwQY
MBaAFNY0AHQUz/Fs3POjqiKpZnf4vitoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2Yzgt
ZGVjYjkyZDFhNTIzLzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2YzgtZGVjYjkyZDFhNTIz
LzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM0SbFRt
Zy1E7UDDebp69W4QlHoaz8+etXEBamIRa8cfYd1MXuBK2e56DsfMi9TXdyW4uhdl
G9uKzjXWnCPzHKTP9ykErBIs/4AS5syKf20KIeRX0kwS7tHh1O6MnzEGCvQg6DTb
c+1mplF5cVaLJI5TFCniTefIOdsEKt9ev7eNc6yxfIbC0xeUKGJ/pZLG2v8e/bAd
Y6zsbM5b9jsnsXlFskeQuhlD96SCYnXLypSqtc+o0GctJ5dMWaEKDMNJ7vWYZGJE
Pd5UyFKBV0whR8m/fgnCY6uVxD9dUUvDk7sFih4xiYHXYjxmUYgTgKfS8IROJLIh
b+PM4TJL5ZW9nA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:48 2025 by rpki-client