Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
File: 2J8W9XSSQzePgUyUskA010s5J98.mft (raw, json)
Hash identifier: y+LuWiMzq+NA5z0VEwWNmxdPLqMJYS2ctqh7hW4LEt4=
Subject key identifier: 31:4A:38:42:15:B1:A5:74:70:74:C4:DC:05:80:B3:7C:21:5F:70:5F
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Certificate issuer: /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial: 0194BC3C9D0CC8259FDE26E2AAC7B46D4097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
Manifest number: D8
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 2J8W9XSSQzePgUyUskA010s5J98.crl (hash: hVn/3BjaRDkAkGdCCqq59mpzuMc3AaB6Eq+xF/9Ssxg=)
2: S9_pIBHq75Wq7oGW-jAli5gxMaE.roa (hash: cpq5fUvjVAhKKLO06wh9HRGgk0x/xpun3Cli9g36l8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9d:0c:c8:25:9f:de:26:e2:aa:c7:b4:6d:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=314a384215b1a5747074c4dc0580b37c215f705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:1b:65:4f:68:a3:e4:10:9d:8b:e9:a4:a3:
91:0e:2b:20:2e:cf:44:86:eb:84:7b:b4:55:70:b9:
e1:16:a2:a4:d7:32:e3:f4:40:e4:6f:06:ad:a6:9b:
80:f0:a0:4d:6c:8f:7e:68:e0:c1:2e:7c:17:3d:ef:
3a:c3:7a:4b:65:75:50:6c:e9:40:54:26:e6:cd:69:
22:9f:21:9b:a5:56:e4:95:6a:6a:0a:10:c8:29:9e:
b4:be:37:db:f0:e1:b5:62:a5:60:35:70:cd:7a:2a:
ec:f0:2b:e5:9c:db:e8:8a:f8:96:d7:93:60:76:be:
5e:8b:62:71:e0:78:10:e7:43:64:fe:2a:34:78:f1:
52:00:ce:e0:d3:92:69:6e:6a:69:44:26:7f:8f:f4:
0d:66:4a:2e:09:71:86:cd:87:be:04:2e:91:62:b1:
2e:69:69:3d:81:c4:00:09:85:c1:e3:e2:c7:c9:93:
dc:52:01:e8:a1:0b:01:a8:53:a7:f5:af:d4:ce:b4:
a9:1f:08:5d:b3:92:fe:17:9f:6f:3e:e8:eb:97:37:
07:9e:4b:e4:6e:17:21:3b:7d:88:d3:11:69:fe:d4:
77:47:05:64:01:2a:08:f0:48:44:09:ab:ff:64:73:
56:11:45:28:cf:df:67:bc:6a:5c:70:b1:91:ba:07:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:38:42:15:B1:A5:74:70:74:C4:DC:05:80:B3:7C:21:5F:70:5F
X509v3 Authority Key Identifier:
keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:4f:67:01:6f:7e:5b:a2:65:32:b1:e5:99:77:15:c2:ec:
d6:54:8d:ff:95:d1:61:03:f8:25:c2:86:3b:c5:14:b7:dc:eb:
fd:7b:0a:bd:1e:fd:e0:38:39:8b:ac:28:ef:85:be:e7:16:7c:
15:b9:13:a4:17:92:66:1f:75:4a:10:a5:dd:43:96:9f:05:60:
a5:e5:c0:f3:bb:91:ba:9d:e2:16:95:af:35:c0:61:e6:63:83:
0f:41:71:06:e8:d6:04:0c:83:9f:dd:dc:d2:1d:f5:35:4e:ce:
09:c2:fd:15:e2:11:b8:cc:74:a2:a7:c6:98:5c:d9:bb:f3:d9:
bc:46:3f:d5:d2:2b:3c:11:09:1b:02:64:35:f2:67:87:2d:50:
c4:db:d9:0e:20:06:57:1d:ac:e7:d4:bc:fa:d0:6d:10:89:df:
32:a3:d3:9a:93:28:80:36:8a:aa:c3:96:8a:0a:cb:33:04:b7:
09:b7:61:a5:cc:1a:1c:d1:fd:52:7f:37:72:3e:f5:92:49:31:
19:ad:2f:06:cd:78:7e:03:25:bb:13:de:cf:e3:cb:39:a7:b7:
a5:56:cb:0f:bf:32:29:50:c4:73:ca:f1:7d:be:eb:e1:d1:de:
71:87:66:23:eb:05:3d:26:d1:82:70:97:b2:8f:d3:a0:aa:bb:
7f:e0:97:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJ0MyCWf3ibiqse0bUCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWYxNmY1NzQ5MjQzMzc4ZjgxNGM5NGIyNDAzNGQ3NGIz
OTI3ZGYwHhcNMjUwMTMxMTIwMTE2WhcNMjUwMjAxMTIwMTE2WjAzMTEwLwYDVQQD
EygzMTRhMzg0MjE1YjFhNTc0NzA3NGM0ZGMwNTgwYjM3YzIxNWY3MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A8bZU9oo+QQnYvppKORDisgLs9E
huuEe7RVcLnhFqKk1zLj9EDkbwatppuA8KBNbI9+aODBLnwXPe86w3pLZXVQbOlA
VCbmzWkinyGbpVbklWpqChDIKZ60vjfb8OG1YqVgNXDNeirs8CvlnNvoiviW15Ng
dr5ei2Jx4HgQ50Nk/io0ePFSAM7g05JpbmppRCZ/j/QNZkouCXGGzYe+BC6RYrEu
aWk9gcQACYXB4+LHyZPcUgHooQsBqFOn9a/UzrSpHwhds5L+F59vPujrlzcHnkvk
bhchO32I0xFp/tR3RwVkASoI8EhECav/ZHNWEUUoz99nvGpccLGRugeUBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFKOEIVsaV0cHTE3AWAs3whX3BfMB8GA1UdIwQY
MBaAFNifFvV0kkM3j4FMlLJANNdLOSffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMko4VzlYU1NRemVQZ1V5VXNrQTAxMHM1Sjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUt
MzQ2YmQ5NzNjODQzLzEvMko4VzlYU1NRemVQZ1V5VXNrQTAxMHM1Sjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUtMzQ2YmQ5NzNjODQz
LzEvMko4VzlYU1NRemVQZ1V5VXNrQTAxMHM1Sjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdlPZwFv
fluiZTKx5Zl3FcLs1lSN/5XRYQP4JcKGO8UUt9zr/XsKvR794Dg5i6wo74W+5xZ8
FbkTpBeSZh91ShCl3UOWnwVgpeXA87uRup3iFpWvNcBh5mODD0FxBujWBAyDn93c
0h31NU7OCcL9FeIRuMx0oqfGmFzZu/PZvEY/1dIrPBEJGwJkNfJnhy1QxNvZDiAG
Vx2s59S8+tBtEInfMqPTmpMogDaKqsOWigrLMwS3CbdhpcwaHNH9Un83cj71kkkx
Ga0vBs14fgMluxPez+PLOae3pVbLD78yKVDEc8rxfb7r4dHecYdmI+sFPSbRgnCX
so/ToKq7f+CXUg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:32 2025 by rpki-client