Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: ig5xpKFNADJbiwthUaMBM6rJG5q+wIhFbsFkeEkaJ1o=
Subject key identifier: B0:3B:FF:66:C3:A9:08:DB:9D:EE:F4:71:16:F9:F3:06:B9:6E:23:B7
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 0194BD4E83CBD8BA419AE490F5D09EDFE89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 10EE
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: EZCYAGIVBsIVBkQ7g+/5w+ldgJ/0YKz+U7I3aKkBZiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:cb:d8:ba:41:9a:e4:90:f5:d0:9e:df:e8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=b03bff66c3a908db9deef47116f9f306b96e23b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:96:45:c2:94:1a:15:66:7b:d4:b4:97:d1:
05:6a:02:4c:e1:13:09:33:d1:46:30:9e:b8:23:f9:
f7:fa:cc:cb:bc:3a:e9:9b:6a:f6:ed:20:83:44:80:
85:df:41:22:dc:e3:4b:b2:bd:ca:ba:25:08:b6:47:
b2:55:c8:86:01:08:f8:e0:cc:c3:d3:c6:2f:aa:6c:
45:78:c1:7a:b0:56:3a:94:96:cc:21:6d:af:19:ee:
0a:d0:ff:6a:1a:d3:9d:b7:ba:99:d9:e5:b4:f1:a7:
e4:ec:2c:69:73:72:f6:94:0b:9d:1b:29:de:d8:38:
f8:25:7d:8a:23:66:89:f6:2d:a8:7b:46:7c:56:1d:
52:e2:8d:65:3e:83:f1:0a:65:28:ce:a6:ce:19:20:
e6:63:f2:b9:92:db:e3:8a:21:8d:49:4b:fa:5e:2e:
08:ee:72:4d:ca:32:53:5c:8f:1d:f7:7a:3d:55:78:
7d:41:ec:3f:0c:fc:7a:a8:ea:7a:c4:07:7a:66:42:
b0:58:6e:15:a3:60:de:c3:bc:c9:50:8e:f1:bc:e3:
47:ae:0f:b2:03:28:ff:04:05:8a:d2:d5:fe:cc:2f:
23:d9:cc:f3:66:8a:76:a0:b0:8e:25:0e:0c:6e:fc:
e2:a0:56:57:9f:03:53:0c:bd:08:d8:20:59:08:23:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:FF:66:C3:A9:08:DB:9D:EE:F4:71:16:F9:F3:06:B9:6E:23:B7
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:b4:e4:fc:18:80:3d:57:0b:ec:8d:00:f6:f4:6c:8e:54:
6c:60:37:0d:a6:13:c2:ae:a2:86:2d:e3:15:f2:d2:7f:a0:26:
61:a2:31:d3:a4:b2:42:37:e5:14:7f:14:38:7e:8a:87:37:8c:
54:6c:fb:02:e6:57:a3:4b:d8:a9:25:ce:00:b4:07:b6:96:4a:
e3:dc:7d:8b:76:94:49:3b:ad:b8:71:23:6a:e6:db:88:10:85:
aa:11:cb:b7:e1:4e:e2:d5:82:70:d1:90:f6:5e:61:50:5a:dc:
86:a2:c7:76:57:6a:42:32:53:a0:7f:f1:e7:4b:84:0c:73:02:
f9:77:a9:d8:3d:75:d6:9e:9f:02:fa:3f:e4:04:ac:89:8d:f3:
6b:37:92:8b:41:40:e4:18:2b:2e:05:ab:15:e7:77:01:5f:b2:
e3:87:ea:a1:53:01:92:b0:2e:9b:dd:71:e0:f4:b6:39:73:dd:
91:82:a3:9d:a3:fa:bc:17:e6:a6:77:43:2f:16:19:13:23:27:
3d:b6:4c:52:e7:24:34:6b:6f:cd:25:27:26:03:0b:ae:03:54:
63:e6:32:65:0c:07:b9:d8:08:c8:f2:30:1c:30:da:52:0b:2d:
da:5d:db:81:cc:bb:d1:52:76:cb:53:85:87:0d:b7:58:fd:14:
3a:f1:2d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToPL2LpBmuSQ9dCe3+iaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODg2MjllM2M3ODEwYWNjMjI4ZTE3YTE4ZGI2Nzk0ZWJl
ZDgxOTMwHhcNMjUwMTMxMTcwMDI2WhcNMjUwMjAxMTcwMDI2WjAzMTEwLwYDVQQD
EyhiMDNiZmY2NmMzYTkwOGRiOWRlZWY0NzExNmY5ZjMwNmI5NmUyM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRCWRcKUGhVme9S0l9EFagJM4RMJ
M9FGMJ64I/n3+szLvDrpm2r27SCDRICF30Ei3ONLsr3KuiUItkeyVciGAQj44MzD
08YvqmxFeMF6sFY6lJbMIW2vGe4K0P9qGtOdt7qZ2eW08afk7Cxpc3L2lAudGyne
2Dj4JX2KI2aJ9i2oe0Z8Vh1S4o1lPoPxCmUozqbOGSDmY/K5ktvjiiGNSUv6Xi4I
7nJNyjJTXI8d93o9VXh9Qew/DPx6qOp6xAd6ZkKwWG4Vo2Dew7zJUI7xvONHrg+y
Ayj/BAWK0tX+zC8j2czzZop2oLCOJQ4MbvzioFZXnwNTDL0I2CBZCCPEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA7/2bDqQjbne70cRb58wa5biO3MB8GA1UdIwQY
MBaAFI2IYp48eBCswijhehjbZ5Tr7YGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDIt
NGJlMTA1M2QxZmM0LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDItNGJlMTA1M2QxZmM0
LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJq05PwY
gD1XC+yNAPb0bI5UbGA3DaYTwq6ihi3jFfLSf6AmYaIx06SyQjflFH8UOH6KhzeM
VGz7AuZXo0vYqSXOALQHtpZK49x9i3aUSTutuHEjaubbiBCFqhHLt+FO4tWCcNGQ
9l5hUFrchqLHdldqQjJToH/x50uEDHMC+Xep2D111p6fAvo/5ASsiY3zazeSi0FA
5BgrLgWrFed3AV+y44fqoVMBkrAum91x4PS2OXPdkYKjnaP6vBfmpndDLxYZEyMn
PbZMUuckNGtvzSUnJgMLrgNUY+YyZQwHudgIyPIwHDDaUgst2l3bgcy70VJ2y1OF
hw23WP0UOvEtSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:04 2025 by rpki-client