Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: u/ATM9L5pW7k8SWFIcDrfmjXPtwH1gcCSJfQPlE2tW0=
Subject key identifier: 3D:24:45:7B:3F:47:F0:E5:55:5A:34:76:FC:C3:3E:2E:32:93:6C:FB
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 0194BBCE35C508DA6E2ABFD50B5FD398D194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0543
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: BkoB/yTpLFK9E8HXEgpCEyv9SXMoxmmNj6Cn2HIE9AM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:c5:08:da:6e:2a:bf:d5:0b:5f:d3:98:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=3d24457b3f47f0e5555a3476fcc33e2e32936cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:64:c8:fd:d1:32:64:5e:a9:b6:bd:58:0d:
4c:74:b7:c0:23:59:54:50:1a:3b:7b:35:0b:58:6a:
a5:66:68:d3:da:3b:84:5c:60:07:11:6d:61:8b:01:
2f:56:c1:0a:d4:2e:82:75:ad:a0:96:bc:83:1d:a9:
a9:5c:cc:e6:3e:78:b2:88:c8:09:69:17:32:56:d7:
fc:9f:25:5c:c7:79:9a:0d:1d:22:d5:b5:7c:47:11:
13:54:d6:36:f0:5f:91:2c:2c:38:76:a3:67:66:68:
44:28:e7:05:aa:ff:89:c1:72:76:23:71:23:37:26:
6b:ad:7b:b3:cf:15:1a:a6:8d:dd:2e:c1:b4:c5:6f:
80:c4:fb:ef:81:69:9d:75:60:79:d4:e8:da:10:75:
a2:46:52:9f:e4:99:d7:2a:78:ea:db:3c:94:63:3e:
27:58:7e:aa:71:07:00:f1:fb:47:db:b7:aa:d8:15:
cc:f4:a3:84:91:4a:fe:05:5b:b0:c0:dd:32:bc:56:
c8:fa:e0:6e:ff:96:05:a1:ce:8f:ac:4f:ff:a3:fe:
8c:a7:d1:2a:ff:61:3d:79:8a:c6:00:f4:0a:94:a0:
4c:bc:2a:46:6d:0b:f6:1d:31:ed:9a:3d:83:c8:64:
6a:4c:c9:18:b3:8d:e8:9a:ce:af:39:4c:f8:ed:9a:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:45:7B:3F:47:F0:E5:55:5A:34:76:FC:C3:3E:2E:32:93:6C:FB
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:dc:ee:97:bd:54:70:be:df:1d:f3:55:28:9e:de:77:1a:
68:99:b1:56:e5:dd:38:77:6a:f7:7a:d1:50:45:b4:2a:8f:e9:
9a:c9:ff:8d:7c:27:97:23:0e:6c:cc:6d:82:20:49:1b:20:c4:
2f:48:01:d2:42:c4:98:40:3b:db:1b:d3:c6:14:ae:3a:a4:01:
96:5d:03:b8:32:61:f4:b6:2e:72:a0:65:4a:6a:cb:90:d2:54:
87:4f:56:de:f9:c8:7b:e9:a4:86:64:9a:c2:73:0a:fc:6e:b4:
89:19:e1:ad:cd:aa:95:ee:8b:7a:f4:72:75:c2:1d:b4:93:94:
01:bd:e7:5e:14:81:c6:c5:ca:3f:25:9d:51:dc:34:57:db:db:
da:b5:11:74:fc:78:81:d8:62:1c:67:f6:40:b2:25:f8:61:45:
f5:3f:d5:41:4e:37:87:59:7d:a4:f8:7d:1c:a2:0e:1e:85:e4:
3d:0b:3c:d7:85:92:4c:9b:b5:03:6f:5b:0d:d0:69:bf:d7:45:
d1:9a:7c:9c:09:5e:64:b1:d3:69:f7:02:36:66:82:13:f2:50:
44:31:7f:43:0f:39:2c:f1:22:53:28:49:b2:55:67:30:52:c8:
70:48:82:08:d7:b6:d1:b9:7e:95:0a:d8:70:58:e5:ba:a3:cb:
7a:9a:02:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjXFCNpuKr/VC1/TmNGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0
NmEwYmIwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EygzZDI0NDU3YjNmNDdmMGU1NTU1YTM0NzZmY2MzM2UyZTMyOTM2Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXtkyP3RMmReqba9WA1MdLfAI1lU
UBo7ezULWGqlZmjT2juEXGAHEW1hiwEvVsEK1C6Cda2glryDHampXMzmPniyiMgJ
aRcyVtf8nyVcx3maDR0i1bV8RxETVNY28F+RLCw4dqNnZmhEKOcFqv+JwXJ2I3Ej
NyZrrXuzzxUapo3dLsG0xW+AxPvvgWmddWB51OjaEHWiRlKf5JnXKnjq2zyUYz4n
WH6qcQcA8ftH27eq2BXM9KOEkUr+BVuwwN0yvFbI+uBu/5YFoc6PrE//o/6Mp9Eq
/2E9eYrGAPQKlKBMvCpGbQv2HTHtmj2DyGRqTMkYs43oms6vOUz47ZouGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0kRXs/R/DlVVo0dvzDPi4yk2z7MB8GA1UdIwQY
MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt
NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl
LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUjc7pe9
VHC+3x3zVSie3ncaaJmxVuXdOHdq93rRUEW0Ko/pmsn/jXwnlyMObMxtgiBJGyDE
L0gB0kLEmEA72xvTxhSuOqQBll0DuDJh9LYucqBlSmrLkNJUh09W3vnIe+mkhmSa
wnMK/G60iRnhrc2qle6LevRydcIdtJOUAb3nXhSBxsXKPyWdUdw0V9vb2rURdPx4
gdhiHGf2QLIl+GFF9T/VQU43h1l9pPh9HKIOHoXkPQs814WSTJu1A29bDdBpv9dF
0Zp8nAleZLHTafcCNmaCE/JQRDF/Qw85LPEiUyhJslVnMFLIcEiCCNe20bl+lQrY
cFjluqPLepoCRQ==
-----END CERTIFICATE-----
Generated at Thu May 1 13:22:43 2025 by rpki-client