Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: 4bmBiD16hrv6iQ+ZH+vJN+NuP5uiu46MjtvT7O+J6X4=
Subject key identifier: 0A:05:5F:9F:15:E3:20:19:61:F6:49:42:B9:9C:04:B0:7D:FA:EE:0C
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0194BBCEECDB356D9E1071C84D3A96FC45D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: mnQC/pkCfJYASDIlW7yGadW8qqjMLG76/oFp1YHGuIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ec:db:35:6d:9e:10:71:c8:4d:3a:96:fc:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=0a055f9f15e3201961f64942b99c04b07dfaee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:3c:6e:87:98:84:ec:7c:e6:50:a6:7b:20:
18:72:b3:ab:84:de:52:b8:a1:96:af:c1:2a:40:9e:
93:e5:ea:b9:40:54:25:53:94:e6:dc:4a:c3:a8:36:
92:4e:17:8a:e3:72:8a:c7:fa:71:e2:f8:bf:52:01:
dc:92:ff:3e:78:60:cb:a2:6f:27:71:3e:7c:4c:7f:
c0:75:22:e8:40:e8:5a:50:be:1d:07:1c:16:d8:43:
bd:23:41:13:16:15:bc:b3:cc:f5:ba:fd:7d:5f:79:
38:d8:73:43:70:f2:e6:c5:e2:89:33:12:47:07:bc:
bd:4e:13:96:40:8c:14:56:5f:d1:33:ea:d6:10:45:
63:d9:18:ab:d3:5a:e9:da:16:79:5d:4e:27:41:d9:
e7:f6:f2:7c:69:7b:56:fb:75:ef:54:fa:16:37:3c:
74:14:92:5e:85:ea:9c:0f:bc:36:7a:f2:77:9a:d2:
48:ee:3e:45:ef:cb:48:af:a8:d3:d6:99:87:da:7e:
8f:35:5f:69:66:0c:50:3f:a1:80:25:4f:3d:f1:6c:
96:f5:19:29:8c:5d:5d:35:6c:b8:ca:d4:f8:64:9d:
d6:a1:f2:82:6c:00:54:0e:22:e1:1f:84:93:14:60:
95:a0:c4:56:b7:81:c2:da:34:87:0f:7b:fb:45:c7:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:5F:9F:15:E3:20:19:61:F6:49:42:B9:9C:04:B0:7D:FA:EE:0C
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:e4:6b:ec:04:ef:fc:65:04:ea:5e:02:4c:b0:c1:f0:0b:
b7:46:1f:8f:8e:dc:64:cd:c1:be:48:2e:f1:c6:28:34:ba:03:
96:55:79:13:5e:d9:fe:80:01:dc:d6:9c:bb:4c:66:96:dd:5f:
33:6b:f6:3e:6a:6b:29:56:30:7d:83:3d:90:54:6a:e1:0c:35:
81:47:6d:eb:c8:8d:98:e9:6c:b2:28:43:ac:ef:13:79:ff:57:
ff:49:8f:83:74:c0:a3:6b:c8:c0:1d:38:e8:c8:a8:97:b9:16:
e3:ff:38:4b:74:13:3a:73:52:5d:c9:a8:86:18:12:20:ab:18:
fe:fe:2c:5a:b2:24:17:30:b8:72:75:68:f6:dc:23:94:df:17:
99:a4:79:fb:fa:2c:5b:37:0c:12:23:bb:10:88:dd:49:27:6e:
8b:7c:df:ce:e3:08:b5:63:51:d0:ac:6b:43:ea:7c:49:fd:6f:
3b:29:14:f4:12:f5:f1:f9:f2:63:af:cb:a9:72:4c:d1:11:33:
d9:c4:91:20:cf:70:ef:4d:b2:74:9d:30:14:af:41:f9:01:ba:
11:60:6e:80:dc:57:c1:22:9b:61:e1:4d:53:55:eb:a1:f6:58:
f6:58:13:a8:8e:25:ec:8f:aa:5e:cf:5b:b5:c7:1a:30:32:54:
27:74:30:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zuzbNW2eEHHITTqW/EXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
EygwYTA1NWY5ZjE1ZTMyMDE5NjFmNjQ5NDJiOTljMDRiMDdkZmFlZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszs8boeYhOx85lCmeyAYcrOrhN5S
uKGWr8EqQJ6T5eq5QFQlU5Tm3ErDqDaSTheK43KKx/px4vi/UgHckv8+eGDLom8n
cT58TH/AdSLoQOhaUL4dBxwW2EO9I0ETFhW8s8z1uv19X3k42HNDcPLmxeKJMxJH
B7y9ThOWQIwUVl/RM+rWEEVj2Rir01rp2hZ5XU4nQdnn9vJ8aXtW+3XvVPoWNzx0
FJJeheqcD7w2evJ3mtJI7j5F78tIr6jT1pmH2n6PNV9pZgxQP6GAJU898WyW9Rkp
jF1dNWy4ytT4ZJ3WofKCbABUDiLhH4STFGCVoMRWt4HC2jSHD3v7RcfYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoFX58V4yAZYfZJQrmcBLB9+u4MMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM/ka+wE
7/xlBOpeAkywwfALt0Yfj47cZM3Bvkgu8cYoNLoDllV5E17Z/oAB3Nacu0xmlt1f
M2v2PmprKVYwfYM9kFRq4Qw1gUdt68iNmOlssihDrO8Tef9X/0mPg3TAo2vIwB04
6Miol7kW4/84S3QTOnNSXcmohhgSIKsY/v4sWrIkFzC4cnVo9twjlN8XmaR5+/os
WzcMEiO7EIjdSSdui3zfzuMItWNR0KxrQ+p8Sf1vOykU9BL18fnyY6/LqXJM0REz
2cSRIM9w702ydJ0wFK9B+QG6EWBugNxXwSKbYeFNU1XrofZY9lgTqI4l7I+qXs9b
tccaMDJUJ3QwFA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:45 2025 by rpki-client