Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: TjzjpNaAm7/e9oqmFFmTr+JpRanzL6SiSemjf+60DMI=
Subject key identifier: 1B:AE:57:6E:5B:9B:8E:5D:43:C6:EF:9B:93:46:CC:17:62:CA:BE:8C
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0194BBCE8BCA33C9D12815400B6B3907D018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: 6JGlUOQ03Pvf+BT9thR5kI+Xk1ded/MdYsx0/2zTywc=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8b:ca:33:c9:d1:28:15:40:0b:6b:39:07:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=1bae576e5b9b8e5d43c6ef9b9346cc1762cabe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:ad:9a:87:14:0e:a9:3f:10:2e:d3:bd:e7:
58:fd:0b:e6:21:2f:f8:dc:ad:49:ea:a5:42:46:ef:
46:e6:14:97:a3:da:54:2f:b4:f3:38:2c:a5:44:29:
53:70:f0:06:8e:69:08:10:99:39:6a:f0:49:3a:0c:
1f:0e:b2:6c:09:3e:2c:97:f2:69:c2:88:62:01:c2:
01:8c:30:4d:5a:fd:3c:ba:08:0f:af:cf:80:c1:8f:
19:b0:6a:c7:41:6d:49:ea:ee:1b:d1:40:b8:36:dd:
a4:47:4f:2f:8b:f7:99:10:00:b1:5e:2d:f4:88:e8:
e0:db:1f:57:5a:b0:21:b4:e8:5d:bc:cf:c7:d6:75:
c4:ad:88:0f:4e:7c:6e:e2:90:dc:c2:12:30:bb:74:
73:9b:85:9c:dd:45:3f:2b:14:e3:5c:f9:a9:23:26:
da:bb:c6:a8:fb:59:8b:87:44:8a:cc:9b:71:2f:64:
cc:dc:93:73:60:e2:a5:d6:c3:33:7a:b8:f8:82:70:
7f:3b:92:be:ab:16:ca:cd:1a:7d:43:2c:14:fc:7d:
dd:cf:15:4c:58:e2:26:dd:c8:08:eb:37:e3:67:95:
35:ec:a4:e0:83:4e:39:50:b4:8b:dc:a1:93:2a:69:
58:76:73:1f:6b:22:83:a2:4c:f5:51:99:66:28:6a:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:57:6E:5B:9B:8E:5D:43:C6:EF:9B:93:46:CC:17:62:CA:BE:8C
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:47:d8:c7:f5:9b:25:73:c8:c0:b6:1b:91:42:8a:bd:6b:12:
b9:4a:c8:f7:0e:02:6a:94:7a:85:b5:19:38:48:0b:b5:37:45:
23:e2:aa:1c:89:58:04:07:50:90:48:05:f8:83:14:14:ca:ac:
70:23:7e:2a:8e:17:fd:a4:93:80:c6:39:ec:51:c3:f0:f8:dc:
7f:66:71:ae:9e:23:fe:2b:cd:46:44:4b:7d:5a:f4:a4:8d:a0:
84:7c:ca:53:7d:31:7f:0e:6e:ce:d2:a6:59:5d:7b:24:91:12:
7a:0a:b8:19:1a:d0:44:f6:e7:a6:65:a7:d7:95:59:71:d0:9b:
31:92:5a:84:be:bf:28:e8:57:d4:09:4e:c4:0d:52:fb:7b:48:
31:98:ea:2e:ec:fc:4c:0b:e4:1c:cd:d7:3b:a9:90:fa:37:71:
f4:e2:b7:ca:08:fc:49:82:c3:3f:f0:5b:4d:7a:80:80:96:47:
6a:6f:f7:33:52:23:3a:94:18:b1:22:79:e8:76:9e:cf:ac:81:
35:2b:69:09:7f:bb:d8:77:1c:5e:20:05:a2:6d:cf:78:60:da:
35:5b:0e:6c:ee:de:86:57:cd:fd:de:78:6b:3a:07:44:42:a7:
07:05:f5:7f:66:99:cd:39:b7:e8:44:28:a8:c9:17:14:ec:cf:
2d:17:5a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zovKM8nRKBVAC2s5B9AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjUwMTMxMTAwMTAzWhcNMjUwMjAxMTAwMTAzWjAzMTEwLwYDVQQD
EygxYmFlNTc2ZTViOWI4ZTVkNDNjNmVmOWI5MzQ2Y2MxNzYyY2FiZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudGtmocUDqk/EC7TvedY/QvmIS/4
3K1J6qVCRu9G5hSXo9pUL7TzOCylRClTcPAGjmkIEJk5avBJOgwfDrJsCT4sl/Jp
wohiAcIBjDBNWv08uggPr8+AwY8ZsGrHQW1J6u4b0UC4Nt2kR08vi/eZEACxXi30
iOjg2x9XWrAhtOhdvM/H1nXErYgPTnxu4pDcwhIwu3Rzm4Wc3UU/KxTjXPmpIyba
u8ao+1mLh0SKzJtxL2TM3JNzYOKl1sMzerj4gnB/O5K+qxbKzRp9QywU/H3dzxVM
WOIm3cgI6zfjZ5U17KTgg045ULSL3KGTKmlYdnMfayKDokz1UZlmKGod7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuuV25bm45dQ8bvm5NGzBdiyr6MMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUfYx/Wb
JXPIwLYbkUKKvWsSuUrI9w4CapR6hbUZOEgLtTdFI+KqHIlYBAdQkEgF+IMUFMqs
cCN+Ko4X/aSTgMY57FHD8Pjcf2Zxrp4j/ivNRkRLfVr0pI2ghHzKU30xfw5uztKm
WV17JJESegq4GRrQRPbnpmWn15VZcdCbMZJahL6/KOhX1AlOxA1S+3tIMZjqLuz8
TAvkHM3XO6mQ+jdx9OK3ygj8SYLDP/BbTXqAgJZHam/3M1IjOpQYsSJ56Haez6yB
NStpCX+72HccXiAFom3PeGDaNVsObO7ehlfN/d54azoHREKnBwX1f2aZzTm36EQo
qMkXFOzPLRdaQg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:14 2025 by rpki-client