Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: noruD81gCvmbggCAZ3zg8CvPBEUmwqDSkUVWVYRrg5w=
Subject key identifier: 86:A8:16:B4:3F:B7:0C:A8:19:3C:53:24:39:D8:0C:FA:8C:46:7D:EF
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 0194BBCE99D65B586C0EEF2E39B66545CEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 081B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: G2huEweno0IhcRmDvVT3G6ue+nmcSh2q7sMe4TZu9yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:d6:5b:58:6c:0e:ef:2e:39:b6:65:45:ce:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=86a816b43fb70ca8193c532439d80cfa8c467def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:12:99:e2:c1:f2:39:8b:37:6f:49:da:59:
63:9d:68:18:d0:0d:86:c2:0e:04:0d:2f:b7:d8:ac:
3e:3d:15:63:a8:f2:31:e1:e8:f2:59:77:74:a6:9c:
ce:01:fc:4e:bf:65:2b:ea:d2:db:85:46:10:bb:55:
0c:5a:bd:1e:87:51:4a:18:b0:a6:ae:3f:ad:3c:79:
fb:ed:49:8c:46:3d:43:08:45:e6:d2:e8:f8:10:e5:
92:59:e5:49:c0:2b:9d:bf:b3:3d:6e:be:04:75:cf:
ef:d6:55:cf:be:58:d2:9a:ba:de:8a:1b:a0:bc:37:
a4:e9:c1:55:d2:0b:ae:ff:f5:0f:40:15:0d:08:9b:
af:10:67:bd:a9:ad:7b:f7:44:5b:d7:fa:32:48:39:
f7:1e:25:6d:5a:5e:43:0a:a8:ba:ea:c6:ab:82:4b:
92:00:25:04:29:ec:6d:0b:e5:a6:6a:c4:3d:08:5d:
06:c8:fc:dd:7d:0d:81:30:19:03:0a:f3:d9:38:24:
5f:65:ac:ab:47:8c:a3:a9:45:75:3b:ee:0c:99:13:
26:48:48:62:51:1b:b0:c3:d4:51:d5:2b:ef:78:94:
03:eb:23:14:6c:94:d9:ec:ac:e2:81:59:ab:12:7b:
06:f2:86:39:70:de:88:66:a6:94:a4:c0:79:4e:f2:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:16:B4:3F:B7:0C:A8:19:3C:53:24:39:D8:0C:FA:8C:46:7D:EF
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:e6:c7:1a:15:38:c0:47:06:74:c9:af:c3:b3:bd:b3:20:
e0:c1:cd:0d:27:f8:e2:c8:b6:68:63:91:c1:e8:e4:78:17:82:
de:90:96:6c:ab:d1:88:1a:7c:33:a7:ec:9a:a8:c5:7d:23:e6:
55:1e:9b:a8:60:70:8d:89:fa:78:27:36:e8:8b:77:10:57:f5:
2f:8b:e8:22:1e:0c:85:74:91:ab:c3:23:6b:66:ec:8d:bc:fc:
b9:64:db:ea:d3:c3:a2:6f:35:a8:2e:5f:36:e8:b2:4f:c6:b1:
da:7d:e7:06:98:20:8a:df:9b:6e:03:20:14:5a:96:ac:8b:f8:
2c:5f:69:9c:00:86:c4:2b:53:cc:40:55:7d:bb:2b:b6:7b:61:
07:d1:42:92:77:8c:c9:4a:dd:df:69:5b:ac:18:75:af:fe:f5:
b7:4a:98:f7:aa:21:22:47:30:19:6e:98:eb:c0:d2:4e:af:b3:
65:c9:b3:a6:d1:e3:2c:3c:6a:42:64:17:2b:4a:e9:5f:be:29:
99:c9:f5:3e:e0:f7:0b:54:e5:ad:0e:d7:08:21:7a:b2:4d:c2:
23:1d:35:d1:f0:fa:8a:68:56:2d:c5:9c:bf:16:ea:61:c8:f5:
c4:78:7b:7e:b6:c9:2d:b4:9f:57:d5:42:33:93:e5:45:34:aa:
cb:ff:9a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpnWW1hsDu8uObZlRc6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0
NmQ0N2YwHhcNMjUwMTMxMTAwMTA2WhcNMjUwMjAxMTAwMTA2WjAzMTEwLwYDVQQD
Eyg4NmE4MTZiNDNmYjcwY2E4MTkzYzUzMjQzOWQ4MGNmYThjNDY3ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtISmeLB8jmLN29J2lljnWgY0A2G
wg4EDS+32Kw+PRVjqPIx4ejyWXd0ppzOAfxOv2Ur6tLbhUYQu1UMWr0eh1FKGLCm
rj+tPHn77UmMRj1DCEXm0uj4EOWSWeVJwCudv7M9br4Edc/v1lXPvljSmrreihug
vDek6cFV0guu//UPQBUNCJuvEGe9qa1790Rb1/oySDn3HiVtWl5DCqi66sargkuS
ACUEKextC+WmasQ9CF0GyPzdfQ2BMBkDCvPZOCRfZayrR4yjqUV1O+4MmRMmSEhi
URuww9RR1SvveJQD6yMUbJTZ7KzigVmrEnsG8oY5cN6IZqaUpMB5TvJu0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaoFrQ/twyoGTxTJDnYDPqMRn3vMB8GA1UdIwQY
MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt
NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5
LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKTmxxoV
OMBHBnTJr8OzvbMg4MHNDSf44si2aGORwejkeBeC3pCWbKvRiBp8M6fsmqjFfSPm
VR6bqGBwjYn6eCc26It3EFf1L4voIh4MhXSRq8Mja2bsjbz8uWTb6tPDom81qC5f
NuiyT8ax2n3nBpggit+bbgMgFFqWrIv4LF9pnACGxCtTzEBVfbsrtnthB9FCkneM
yUrd32lbrBh1r/71t0qY96ohIkcwGW6Y68DSTq+zZcmzptHjLDxqQmQXK0rpX74p
mcn1PuD3C1TlrQ7XCCF6sk3CIx010fD6imhWLcWcvxbqYcj1xHh7frbJLbSfV9VC
M5PlRTSqy/+akQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:21 2025 by rpki-client