Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: itFZ7UImQtpGAsn6elsUJ41h2EuT62BcM7OYvs818F4=
Subject key identifier: BF:48:06:88:77:B4:A2:1C:91:B9:63:C8:6B:7E:48:BA:0B:50:ED:44
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 0194BD1764D10DD8F4A20B58291D9C9B98C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 13FE
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: lu+wCltR1VEcD4I5BkQTuvZ/Z5v8GjI6+jYeuu0Sr38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:d1:0d:d8:f4:a2:0b:58:29:1d:9c:9b:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=bf48068877b4a21c91b963c86b7e48ba0b50ed44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:ba:3c:47:57:d4:37:eb:c0:d3:b9:d2:ca:
59:d9:ab:7b:46:7a:06:62:ce:a5:ab:84:f7:1a:85:
bf:25:33:17:f9:44:1c:a3:f2:1d:ad:68:fb:c2:a4:
07:87:39:14:00:53:06:56:21:69:bf:d1:97:0c:75:
a3:33:7b:03:9c:83:0b:56:f2:f6:e9:33:7d:8d:d7:
93:6c:89:ae:2f:7e:aa:f3:9b:c2:a1:cf:90:c8:a4:
0f:43:fd:a5:1a:d2:54:80:fc:71:8d:49:d2:26:2a:
fa:e6:60:86:d4:f9:b9:9d:ca:93:11:b1:c1:66:dc:
fc:20:3a:47:67:b0:ba:00:81:0c:d6:51:42:52:e0:
19:cc:cc:f2:2b:47:54:64:30:12:26:2c:90:42:5b:
69:57:4e:e7:18:b6:2e:3d:14:68:b3:f6:85:66:aa:
94:c2:ad:e4:91:51:f3:de:9c:be:ab:8d:38:6f:b0:
44:9a:49:7f:ac:90:4f:83:c9:49:ed:bc:4b:79:76:
24:8f:f4:43:9e:44:0c:30:9d:b8:08:03:1e:bf:73:
36:2e:29:5d:8f:81:03:7f:07:81:d8:92:5b:d9:71:
e5:07:b6:c9:93:f7:67:a6:a0:80:83:98:19:8f:07:
b3:91:34:1e:3f:6d:ae:69:85:30:4c:9c:ee:3e:0c:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:06:88:77:B4:A2:1C:91:B9:63:C8:6B:7E:48:BA:0B:50:ED:44
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7b:6c:f6:18:f9:16:aa:6f:57:06:01:81:68:ae:94:c7:5e:
6d:56:9d:4c:62:18:94:c6:5d:b7:0c:5b:bc:13:78:1e:86:5a:
26:a9:34:e4:5f:87:53:3f:9c:58:46:bd:a0:33:90:2c:30:d0:
58:ed:77:89:2f:7e:a6:fd:e1:2b:30:14:a5:b1:41:c6:2a:6a:
ce:f8:55:8e:dd:51:ed:9c:07:91:e5:0d:4c:5f:2f:6a:72:a2:
3a:83:13:04:3d:dc:61:f2:be:d7:7d:95:e0:28:86:ef:b2:6e:
c5:3d:c2:5c:5f:05:cf:aa:e2:3d:6b:cb:ce:fa:af:ea:0f:a8:
bd:f4:6e:de:58:d2:20:f6:c2:8f:38:0f:bb:ce:a2:35:cd:80:
a6:45:db:e0:0f:34:f8:4f:11:37:00:ee:d6:3d:1d:24:99:27:
82:d9:e2:f1:67:c4:24:2f:d2:70:3f:17:f7:01:d1:b0:3b:7a:
fd:cc:f4:68:2b:cf:66:f2:84:da:bd:38:ba:cf:34:85:27:9d:
b4:fe:96:d7:8f:60:fa:d8:97:d2:27:8e:80:e5:b7:4d:b0:be:
f9:f1:6d:c2:57:d7:f5:1f:c5:a1:bf:0f:36:dc:f0:a1:52:f3:
a8:43:67:20:40:39:51:02:a1:10:6d:b0:40:ad:e5:2e:4d:36:
ba:cb:c3:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2TRDdj0ogtYKR2cm5jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk
ODYxNjkwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
EyhiZjQ4MDY4ODc3YjRhMjFjOTFiOTYzYzg2YjdlNDhiYTBiNTBlZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqe6PEdX1DfrwNO50spZ2at7RnoG
Ys6lq4T3GoW/JTMX+UQco/IdrWj7wqQHhzkUAFMGViFpv9GXDHWjM3sDnIMLVvL2
6TN9jdeTbImuL36q85vCoc+QyKQPQ/2lGtJUgPxxjUnSJir65mCG1Pm5ncqTEbHB
Ztz8IDpHZ7C6AIEM1lFCUuAZzMzyK0dUZDASJiyQQltpV07nGLYuPRRos/aFZqqU
wq3kkVHz3py+q404b7BEmkl/rJBPg8lJ7bxLeXYkj/RDnkQMMJ24CAMev3M2Lild
j4EDfweB2JJb2XHlB7bJk/dnpqCAg5gZjwezkTQeP22uaYUwTJzuPgyY6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9IBoh3tKIckbljyGt+SLoLUO1EMB8GA1UdIwQY
MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt
Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi
LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3ts9hj5
FqpvVwYBgWiulMdebVadTGIYlMZdtwxbvBN4HoZaJqk05F+HUz+cWEa9oDOQLDDQ
WO13iS9+pv3hKzAUpbFBxipqzvhVjt1R7ZwHkeUNTF8vanKiOoMTBD3cYfK+132V
4CiG77JuxT3CXF8Fz6riPWvLzvqv6g+ovfRu3ljSIPbCjzgPu86iNc2ApkXb4A80
+E8RNwDu1j0dJJkngtni8WfEJC/ScD8X9wHRsDt6/cz0aCvPZvKE2r04us80hSed
tP6W149g+tiX0ieOgOW3TbC++fFtwlfX9R/Fob8PNtzwoVLzqENnIEA5UQKhEG2w
QK3lLk02usvDRg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:36 2025 by rpki-client