Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: knBMnbUpdYdf0b+HwLM8si3hl8ASXtQ2Av64e3/Kkg4=
Subject key identifier: 36:4D:9D:76:9B:40:0E:91:9E:FD:BB:E0:51:8D:2A:0C:23:FD:AD:58
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 0194BCE071C689DF6F67159A96AEDFC45585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0113
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: //KDW6D/+r6XYPLRaB8vDpAIJ2L0zMen9QMsLD6WVLs=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:c6:89:df:6f:67:15:9a:96:ae:df:c4:55:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=364d9d769b400e919efdbbe0518d2a0c23fdad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:d4:37:5a:0d:f6:b0:9d:8f:8e:a6:36:1e:
46:50:bc:63:47:9a:89:a9:14:51:4a:80:03:c1:b0:
5d:d7:72:55:a5:7f:26:1d:28:f5:fc:9b:0e:3f:e8:
d9:18:a1:68:80:b6:12:08:5a:13:db:bb:9e:3a:90:
d5:1f:d3:12:fa:4f:e8:09:7e:bc:27:36:88:e6:7c:
ff:39:9d:7c:94:1e:23:9a:45:08:f1:6a:97:55:86:
e0:f2:31:35:b8:e0:3d:d4:a0:d7:e6:03:7b:7d:3e:
6b:de:7f:cd:b6:76:94:70:a9:26:65:dc:ce:fd:61:
b9:4c:8e:85:86:90:c3:ce:55:46:ad:d3:86:dc:c2:
07:47:04:00:b7:b6:55:12:0d:c7:40:f6:37:76:be:
b9:6b:f7:cd:ec:ce:14:26:f0:e2:f5:06:ed:09:33:
56:82:30:ac:2f:ce:09:be:dd:16:0a:48:15:17:7f:
9e:97:22:b0:c3:16:a4:86:9e:8d:72:21:25:a5:5c:
f5:de:e4:ed:64:52:72:52:07:73:45:7e:42:b2:64:
e7:39:6f:58:a4:05:91:cd:0c:d6:79:da:fb:bc:18:
78:64:40:a4:4d:c8:00:44:c9:b7:4d:cb:60:12:aa:
9d:39:69:03:1d:83:75:e0:ba:54:41:14:b8:3a:0e:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:9D:76:9B:40:0E:91:9E:FD:BB:E0:51:8D:2A:0C:23:FD:AD:58
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:0c:08:73:45:0a:86:3d:10:8a:c1:01:8e:6d:8f:ec:90:
11:fa:9e:92:de:65:14:eb:09:bd:d9:95:70:0e:84:a1:95:8c:
9d:f3:b6:18:7d:17:5e:c5:92:69:c6:56:62:55:02:6f:f8:3b:
48:9c:aa:1c:f1:8c:fb:40:4a:4c:c5:72:73:27:9d:cf:db:b5:
27:bf:1b:7c:19:d8:ed:d7:d9:c9:e0:df:e7:52:b6:c1:49:07:
2a:99:17:b0:ca:3e:99:02:6b:8c:39:30:8d:ed:49:35:87:c3:
fe:28:28:f6:9b:71:78:93:77:c2:f3:c1:b7:92:17:c5:47:9d:
57:60:95:a1:34:91:ee:de:7b:52:9f:af:fc:65:40:d7:ed:fc:
1f:5f:ca:77:be:bc:a8:ca:05:cd:8d:4b:46:3f:81:c7:d7:32:
65:19:84:00:5c:c6:e2:96:7c:5f:11:b5:05:30:0b:69:1e:a2:
85:78:81:58:68:83:7a:f3:08:4d:67:04:56:99:62:e7:04:02:
2c:3f:cf:ac:54:36:90:4d:07:68:ff:4d:f8:19:f0:cf:b1:cf:
b7:28:a1:fd:95:85:60:92:9a:ce:73:d6:22:f0:68:1a:98:85:
0e:69:30:97:f2:9d:c5:6d:a3:71:b0:dd:f2:0c:9b:a3:85:9e:
36:80:c1:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HHGid9vZxWalq7fxFWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw
NzVkMzcwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EygzNjRkOWQ3NjliNDAwZTkxOWVmZGJiZTA1MThkMmEwYzIzZmRhZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZHUN1oN9rCdj46mNh5GULxjR5qJ
qRRRSoADwbBd13JVpX8mHSj1/JsOP+jZGKFogLYSCFoT27ueOpDVH9MS+k/oCX68
JzaI5nz/OZ18lB4jmkUI8WqXVYbg8jE1uOA91KDX5gN7fT5r3n/NtnaUcKkmZdzO
/WG5TI6FhpDDzlVGrdOG3MIHRwQAt7ZVEg3HQPY3dr65a/fN7M4UJvDi9QbtCTNW
gjCsL84Jvt0WCkgVF3+elyKwwxakhp6NciElpVz13uTtZFJyUgdzRX5CsmTnOW9Y
pAWRzQzWedr7vBh4ZECkTcgARMm3TctgEqqdOWkDHYN14LpUQRS4Og7vowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZNnXabQA6Rnv274FGNKgwj/a1YMB8GA1UdIwQY
MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt
YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1
LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG70MCHNF
CoY9EIrBAY5tj+yQEfqekt5lFOsJvdmVcA6EoZWMnfO2GH0XXsWSacZWYlUCb/g7
SJyqHPGM+0BKTMVycyedz9u1J78bfBnY7dfZyeDf51K2wUkHKpkXsMo+mQJrjDkw
je1JNYfD/igo9ptxeJN3wvPBt5IXxUedV2CVoTSR7t57Up+v/GVA1+38H1/Kd768
qMoFzY1LRj+Bx9cyZRmEAFzG4pZ8XxG1BTALaR6ihXiBWGiDevMITWcEVpli5wQC
LD/PrFQ2kE0HaP9N+Bnwz7HPtyih/ZWFYJKaznPWIvBoGpiFDmkwl/KdxW2jcbDd
8gybo4WeNoDBsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:45 2025 by rpki-client