Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: IHAWMirNgYU5GD4wFVkCw8apj3qyTguwfWkOgJauVV0=
Subject key identifier: 52:A1:19:AE:D3:B2:D8:0C:B3:DC:F0:BF:A7:98:10:01:DA:00:10:CA
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0194BC051499FE065B4AD9555B7D45F734B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 01AB
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: nGPOn7rGBJj43EBasNDz9xMQ+5mk1XqrjkhCnuadLrY=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:99:fe:06:5b:4a:d9:55:5b:7d:45:f7:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=52a119aed3b2d80cb3dcf0bfa7981001da0010ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:52:87:80:90:1c:ff:3f:3f:7b:03:90:07:
27:8f:2c:8a:dc:f2:3d:45:9d:93:8f:be:b0:6d:95:
dd:3f:7b:c4:65:e4:f4:75:54:61:2d:7a:a3:3f:52:
77:f8:9f:c1:e4:ea:94:94:dd:dc:70:40:92:94:0d:
f8:25:e0:82:b5:aa:22:ec:9d:41:b7:ea:98:08:aa:
76:19:73:a4:25:9a:32:c6:67:80:97:ed:34:09:a9:
1a:48:0f:9b:f0:06:f1:32:cb:cc:b9:ec:75:29:6e:
da:ed:be:00:01:e4:41:8b:5b:f5:2c:f3:21:c9:6c:
88:9e:be:e6:b5:9f:07:20:21:00:bf:ce:e0:b1:80:
d9:d9:1c:17:63:0a:52:ed:fc:ce:1d:53:09:1a:1c:
44:09:0b:b5:97:5a:56:52:aa:8c:06:a5:d4:b4:0d:
cd:85:f6:9e:18:3e:6b:40:0b:81:76:a4:6b:fe:b3:
76:eb:55:54:7c:ba:0e:03:ad:f3:ff:d0:9e:1e:6c:
7c:7a:fc:a1:88:d2:c1:0f:63:3c:ad:ed:d8:99:fd:
0a:c0:35:03:1b:19:42:2e:91:0b:d4:13:61:b4:c7:
53:a6:21:e9:86:28:d8:76:8e:93:fe:5c:a1:fa:b7:
66:6f:52:65:1d:24:79:be:9c:e1:6b:38:ee:ea:90:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:19:AE:D3:B2:D8:0C:B3:DC:F0:BF:A7:98:10:01:DA:00:10:CA
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2a:e9:b9:a9:ed:a4:b9:71:fe:ad:79:32:80:f6:6b:20:5b:
1f:cd:08:de:fb:88:92:8a:f3:de:95:98:cc:ed:e3:94:dd:e8:
74:09:c4:17:e0:c2:c3:d2:8d:4f:b7:be:ae:46:77:7f:1e:24:
5b:79:da:79:32:7f:42:45:7e:49:47:56:ef:57:95:8c:dd:c0:
05:44:ce:2e:f4:ab:74:cc:60:f8:84:4f:85:10:cd:cb:82:6c:
6f:ec:ac:5f:b0:da:9f:2b:e7:68:94:08:fc:a6:16:23:37:13:
89:84:06:da:e3:fd:e3:ff:b4:1d:74:59:b9:64:b6:76:8c:72:
eb:13:34:d4:8a:34:2a:b8:4a:f3:bf:93:f4:69:96:d4:43:7b:
4c:94:b1:dd:53:b2:ab:16:7d:e1:65:5a:ca:82:58:64:81:5d:
6a:28:03:50:43:3e:77:71:35:0b:99:d2:bf:09:5c:02:70:b6:
cd:77:b1:88:04:4f:23:7a:a5:7b:3a:3a:01:34:2b:99:a1:49:
b0:db:15:26:c9:2d:70:ea:67:aa:37:1e:0c:97:18:3d:6a:57:
0d:80:40:4b:69:d1:60:06:44:78:a8:46:1f:d7:9a:9e:0f:d4:
4e:31:62:e5:47:17:71:70:70:20:5b:54:a7:86:78:d6:8e:17:
ff:aa:34:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRSZ/gZbStlVW31F9zS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz
NzU1MDUwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
Eyg1MmExMTlhZWQzYjJkODBjYjNkY2YwYmZhNzk4MTAwMWRhMDAxMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjdSh4CQHP8/P3sDkAcnjyyK3PI9
RZ2Tj76wbZXdP3vEZeT0dVRhLXqjP1J3+J/B5OqUlN3ccECSlA34JeCCtaoi7J1B
t+qYCKp2GXOkJZoyxmeAl+00CakaSA+b8AbxMsvMuex1KW7a7b4AAeRBi1v1LPMh
yWyInr7mtZ8HICEAv87gsYDZ2RwXYwpS7fzOHVMJGhxECQu1l1pWUqqMBqXUtA3N
hfaeGD5rQAuBdqRr/rN261VUfLoOA63z/9CeHmx8evyhiNLBD2M8re3Ymf0KwDUD
GxlCLpEL1BNhtMdTpiHphijYdo6T/lyh+rdmb1JlHSR5vpzhazju6pBaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKhGa7TstgMs9zwv6eYEAHaABDKMB8GA1UdIwQY
MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt
Mjk4ODM4NTU2ZDA5LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5
LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABirpuant
pLlx/q15MoD2ayBbH80I3vuIkorz3pWYzO3jlN3odAnEF+DCw9KNT7e+rkZ3fx4k
W3naeTJ/QkV+SUdW71eVjN3ABUTOLvSrdMxg+IRPhRDNy4Jsb+ysX7DanyvnaJQI
/KYWIzcTiYQG2uP94/+0HXRZuWS2doxy6xM01Io0KrhK87+T9GmW1EN7TJSx3VOy
qxZ94WVayoJYZIFdaigDUEM+d3E1C5nSvwlcAnC2zXexiARPI3qlezo6ATQrmaFJ
sNsVJsktcOpnqjceDJcYPWpXDYBAS2nRYAZEeKhGH9eang/UTjFi5UcXcXBwIFtU
p4Z41o4X/6o0nA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:04 2025 by rpki-client