Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: QDPCXbmb+fZhN8SeocG3ehngjOXPI7ENln27hOWJ/SM=
Subject key identifier: B2:1E:3E:A3:39:AB:A9:D4:19:AF:11:D0:5B:4D:D3:2F:CD:56:A3:2F
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 0194BD18055C92CD7E8780A78384D9798AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: U+vFwZub5jep7rkWIMDE8P2rLO3hC7YqqjvkLC88Wpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:05:5c:92:cd:7e:87:80:a7:83:84:d9:79:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=b21e3ea339aba9d419af11d05b4dd32fcd56a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:5a:ea:ef:6f:6a:e4:c4:79:a2:f5:a7:e6:
cd:99:42:60:98:2f:90:45:b9:90:37:c7:95:f7:f7:
0c:59:97:7a:80:4d:15:b4:8f:7d:19:d4:c5:84:d2:
f8:92:46:44:a7:ca:cb:7c:20:c7:c6:df:b5:ac:0a:
c3:ea:a0:de:c6:1d:c1:23:20:c6:d0:1e:af:bc:1f:
3d:ab:29:59:09:ee:e3:02:38:53:71:fe:8b:66:43:
c6:0b:aa:14:bd:07:22:4a:f3:6e:c1:fd:c5:51:8b:
4a:d5:a3:40:1e:3d:52:2c:d6:4d:5d:48:8c:3a:c8:
f4:cc:8c:0c:b0:c3:83:2e:6e:bf:62:6d:03:04:b5:
24:7d:14:e7:06:41:07:dd:22:71:a0:71:12:7d:23:
49:e5:a0:77:18:fc:dc:73:56:11:7d:eb:27:1f:a0:
f2:59:33:0e:4a:48:12:7e:12:44:8b:bb:c5:ad:b2:
a9:d2:44:38:39:90:28:52:86:fa:e3:39:81:bb:1d:
39:e5:4f:fb:ba:2c:3f:14:7f:24:dc:2f:92:08:9c:
89:95:61:e5:64:1d:0d:a0:bd:b4:08:2e:a9:dc:4d:
9a:79:77:31:db:7c:5d:51:14:f6:38:4b:37:89:78:
64:f3:b6:1c:56:7c:8f:ec:12:00:38:24:32:36:dd:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:3E:A3:39:AB:A9:D4:19:AF:11:D0:5B:4D:D3:2F:CD:56:A3:2F
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f2:56:35:63:91:e9:8d:dc:3d:dc:dc:f3:33:a9:06:cf:4e:
cb:cb:1a:a6:2e:aa:33:c9:71:b0:2e:30:e2:fc:1a:99:f0:d0:
76:83:cc:f0:74:51:27:a2:ec:fa:74:8d:8a:7c:b7:60:ab:a1:
b1:b3:47:b3:0d:11:b7:f8:51:94:dc:19:73:4a:a4:6c:5c:56:
e7:db:70:b2:61:2d:f1:65:93:e2:6f:63:6b:a5:40:18:a3:1f:
20:8d:46:55:18:0d:02:26:21:98:a8:fe:74:7b:00:00:6f:86:
86:45:5e:e9:e9:9f:eb:84:db:c7:7b:fb:bb:0e:57:f2:16:34:
ba:aa:62:54:39:66:19:fd:28:38:38:7d:35:49:4f:92:39:9f:
c9:36:9f:60:07:3e:01:57:53:a7:86:36:f3:f2:fd:cb:e7:d1:
c7:3f:f6:04:e0:14:b1:72:9b:ed:0c:f9:f3:6d:9d:2f:68:ac:
1a:53:f7:de:12:7a:7d:b6:df:fd:86:e3:3d:a2:e2:25:6d:3f:
96:af:38:46:a6:6d:e1:80:d3:43:40:5e:1e:5f:08:49:ee:72:
03:af:ad:84:42:05:19:f3:da:75:1f:bb:ad:45:58:76:a1:f1:
d0:96:e8:da:9e:73:ce:6b:9d:5f:60:6f:37:96:64:9b:c0:4d:
64:54:dd:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GAVcks1+h4Cng4TZeYrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjUwMTMxMTYwMDU1WhcNMjUwMjAxMTYwMDU1WjAzMTEwLwYDVQQD
EyhiMjFlM2VhMzM5YWJhOWQ0MTlhZjExZDA1YjRkZDMyZmNkNTZhMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviJa6u9vauTEeaL1p+bNmUJgmC+Q
RbmQN8eV9/cMWZd6gE0VtI99GdTFhNL4kkZEp8rLfCDHxt+1rArD6qDexh3BIyDG
0B6vvB89qylZCe7jAjhTcf6LZkPGC6oUvQciSvNuwf3FUYtK1aNAHj1SLNZNXUiM
Osj0zIwMsMODLm6/Ym0DBLUkfRTnBkEH3SJxoHESfSNJ5aB3GPzcc1YRfesnH6Dy
WTMOSkgSfhJEi7vFrbKp0kQ4OZAoUob64zmBux055U/7uiw/FH8k3C+SCJyJlWHl
ZB0NoL20CC6p3E2aeXcx23xdURT2OEs3iXhk87YcVnyP7BIAOCQyNt2ywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIePqM5q6nUGa8R0FtN0y/NVqMvMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvJWNWOR
6Y3cPdzc8zOpBs9Oy8sapi6qM8lxsC4w4vwamfDQdoPM8HRRJ6Ls+nSNiny3YKuh
sbNHsw0Rt/hRlNwZc0qkbFxW59twsmEt8WWT4m9ja6VAGKMfII1GVRgNAiYhmKj+
dHsAAG+GhkVe6emf64Tbx3v7uw5X8hY0uqpiVDlmGf0oODh9NUlPkjmfyTafYAc+
AVdTp4Y28/L9y+fRxz/2BOAUsXKb7Qz5822dL2isGlP33hJ6fbbf/YbjPaLiJW0/
lq84RqZt4YDTQ0BeHl8ISe5yA6+thEIFGfPadR+7rUVYdqHx0Jbo2p5zzmudX2Bv
N5Zkm8BNZFTd9g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:28 2025 by rpki-client