Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: TJaHE1ZXtpa6GMIC+/REqOZsjIMe2il1jocvzf8h+Ns=
Subject key identifier: 33:C8:40:49:8C:9B:7E:90:F9:4D:2D:87:8C:03:CD:82:80:8E:1D:D2
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 0194BD8545274F123D2C15A85DBF8E370B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 03D0
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: K1uA1mYKOYqW1qsXDmES3YpY4nR710rCC/Ei4AV8KtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:27:4f:12:3d:2c:15:a8:5d:bf:8e:37:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=33c840498c9b7e90f94d2d878c03cd82808e1dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:8d:03:1f:a2:0e:94:9f:2c:6a:6f:21:d8:
8b:a5:50:00:99:a1:91:a7:4b:b9:10:79:b9:08:a3:
65:c3:94:4f:1f:f4:2c:01:b9:8e:19:a4:2c:91:8f:
06:bf:c9:3e:40:f1:cf:10:2f:e1:fc:5a:1a:94:0e:
5e:55:b2:c4:5f:bc:3e:fa:59:1e:8b:ae:4f:ce:f0:
88:2d:6a:a5:03:b4:9f:2e:9f:67:7a:72:97:de:29:
a8:43:a3:3f:f0:71:0c:5f:b3:f1:d3:90:1c:cf:b6:
5e:00:08:1e:fc:26:2b:28:b3:33:9d:93:5c:59:72:
88:e2:a1:c4:00:2e:7b:fb:ab:4f:db:05:4e:d0:09:
58:2a:f6:fc:00:1e:8d:d0:b2:59:02:8b:36:03:43:
f2:b6:09:1b:5b:8f:22:22:ce:d2:cf:cb:45:05:e4:
ab:c9:f5:80:a2:16:1c:87:21:0f:01:4b:17:58:94:
f6:30:cd:2f:82:95:83:78:27:31:f7:5e:a6:81:9a:
2a:d9:ea:62:61:18:30:ec:6b:9f:6e:84:3c:1c:bf:
11:50:dd:41:d4:b2:9c:df:bb:58:f2:bd:71:07:58:
bc:58:89:db:5f:35:da:7e:cb:e5:ed:51:22:d8:60:
93:76:2b:53:86:43:37:af:44:04:2b:08:99:14:e7:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:40:49:8C:9B:7E:90:F9:4D:2D:87:8C:03:CD:82:80:8E:1D:D2
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b2:ab:fc:7e:6b:57:bb:1f:33:61:29:ad:8d:7f:44:db:51:
be:3a:94:6c:69:3f:a0:69:4e:b9:3c:df:d1:ce:31:a7:60:b1:
90:6e:06:3f:b4:73:d6:10:72:75:9a:49:1f:55:0d:d9:e9:56:
cb:88:a5:2e:ba:73:e6:7e:16:70:7d:e4:32:4c:fb:95:76:6f:
ee:c4:09:85:41:a5:e8:99:6d:03:29:45:59:79:b7:a3:d9:9c:
de:5b:6f:1a:b8:58:50:17:e5:25:43:62:ba:ac:57:b1:38:f4:
cd:00:8b:ed:26:17:0a:82:cb:48:94:6d:77:f7:5c:62:be:fb:
8f:fd:f4:4a:61:79:d8:35:0a:a3:bc:51:2c:b7:51:e4:15:c0:
a6:73:c3:9f:57:33:fe:ff:19:12:10:2d:40:1b:86:c1:1f:a4:
05:7f:69:c6:d6:35:3b:0f:1b:fc:74:bb:ef:18:d7:6c:af:cb:
06:1f:c3:d9:ef:98:02:10:f5:b4:b3:5f:82:13:d2:44:65:03:
60:25:37:f7:fe:26:cd:7c:11:e3:57:f2:79:9a:c3:79:12:34:
3c:1b:87:39:71:07:34:a8:b2:c0:58:55:f7:73:b3:6f:c8:94:
7f:31:45:78:e4:31:5d:c1:7a:7b:bb:a8:8d:b8:d4:01:7c:23:
8c:d9:b4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUUnTxI9LBWoXb+ONwuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EygzM2M4NDA0OThjOWI3ZTkwZjk0ZDJkODc4YzAzY2Q4MjgwOGUxZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGNAx+iDpSfLGpvIdiLpVAAmaGR
p0u5EHm5CKNlw5RPH/QsAbmOGaQskY8Gv8k+QPHPEC/h/FoalA5eVbLEX7w++lke
i65PzvCILWqlA7SfLp9nenKX3imoQ6M/8HEMX7Px05Acz7ZeAAge/CYrKLMznZNc
WXKI4qHEAC57+6tP2wVO0AlYKvb8AB6N0LJZAos2A0PytgkbW48iIs7Sz8tFBeSr
yfWAohYchyEPAUsXWJT2MM0vgpWDeCcx916mgZoq2epiYRgw7GufboQ8HL8RUN1B
1LKc37tY8r1xB1i8WInbXzXafsvl7VEi2GCTditThkM3r0QEKwiZFOf9UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPIQEmMm36Q+U0th4wDzYKAjh3SMB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrKr/H5r
V7sfM2EprY1/RNtRvjqUbGk/oGlOuTzf0c4xp2CxkG4GP7Rz1hBydZpJH1UN2elW
y4ilLrpz5n4WcH3kMkz7lXZv7sQJhUGl6JltAylFWXm3o9mc3ltvGrhYUBflJUNi
uqxXsTj0zQCL7SYXCoLLSJRtd/dcYr77j/30SmF52DUKo7xRLLdR5BXApnPDn1cz
/v8ZEhAtQBuGwR+kBX9pxtY1Ow8b/HS77xjXbK/LBh/D2e+YAhD1tLNfghPSRGUD
YCU39/4mzXwR41fyeZrDeRI0PBuHOXEHNKiywFhV93Ozb8iUfzFFeOQxXcF6e7uo
jbjUAXwjjNm0jQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:59 2025 by rpki-client