Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: SgEnOStVKsKtvkyw7G4QPZl8g/OiwNr7AlTKl1A+tKQ=
Subject key identifier: 90:F9:77:C7:7F:98:D9:06:4F:DD:B8:60:6D:2E:FB:B3:0B:FC:86:94
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 0194BD8572D4A6B86E8A521CA82A9C072D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: +jUTpxBJxXvqjg4k+PdY8dCKasRAymOCG78OpFjdNeo=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:d4:a6:b8:6e:8a:52:1c:a8:2a:9c:07:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=90f977c77f98d9064fddb8606d2efbb30bfc8694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:f3:aa:03:2c:90:bc:42:8f:d2:2c:66:7a:
4c:7f:2f:3c:84:77:9f:19:35:98:7c:c9:92:20:a3:
a3:6c:bf:01:c0:89:91:d8:74:99:51:70:b9:37:4e:
0f:6f:11:8a:d5:f4:21:d1:d5:7f:7a:9d:f9:66:e5:
ea:39:81:e4:61:ad:f7:0c:61:db:3e:98:3d:d6:d0:
63:96:46:e3:05:09:1c:42:b0:db:4f:3a:eb:d3:e3:
68:cd:42:ad:29:44:6d:90:0a:66:84:09:d3:b1:3f:
41:55:70:af:ff:6f:c1:96:f3:d5:13:2c:c3:45:c2:
66:fb:a6:10:70:15:d9:1d:f8:c0:9c:a2:2f:ea:a4:
f1:5d:05:d1:30:c7:20:cb:db:ce:97:6e:be:b9:23:
a2:d7:2e:56:ee:18:ac:fe:2b:d4:cc:d0:ea:57:82:
b0:2b:e0:64:f3:25:6b:aa:2e:c7:75:6a:02:36:6b:
4d:1a:1f:f4:cb:25:33:36:49:af:54:67:8d:92:c2:
8d:35:79:28:82:b5:9f:64:1e:15:4c:78:8d:21:fe:
55:c1:d6:2d:f6:76:77:c2:50:bc:85:fc:6a:36:fb:
19:5a:8b:9d:f5:07:6d:01:48:bc:8b:f8:69:ea:e1:
bd:dc:9a:3b:b6:d7:7a:95:7e:b4:88:52:bc:76:d6:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:77:C7:7F:98:D9:06:4F:DD:B8:60:6D:2E:FB:B3:0B:FC:86:94
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:05:c8:a2:92:5b:aa:e3:62:d4:73:92:86:70:82:d7:2a:
cc:19:b9:2f:a5:7e:2b:a0:7f:77:b4:77:e6:22:4b:27:08:72:
79:dc:f8:5e:de:41:23:c9:11:d9:a1:3c:36:24:50:dc:23:b4:
c2:b3:68:e2:95:c2:66:aa:92:42:85:2c:08:9d:94:82:84:f0:
6f:4a:13:4f:4a:92:93:f3:20:94:79:34:5b:76:ff:be:6e:71:
6f:7f:b7:f9:6c:c9:83:9b:21:59:45:ca:c4:d0:40:50:97:c9:
77:6a:1b:68:a2:c9:1d:6b:d7:0d:2a:e4:0c:5e:ac:d1:a6:ec:
bf:c9:66:79:1d:c4:9c:03:34:a1:39:fa:57:92:09:ce:df:7d:
78:c8:44:1a:8e:fb:2d:89:a3:22:1d:f0:3c:3c:1d:f4:21:8c:
d4:2c:0d:09:5a:4c:eb:76:77:45:fe:07:2c:b0:86:60:c3:f4:
dd:72:48:3b:c4:65:f8:65:ad:d0:e0:08:9f:6b:26:81:54:89:
32:3f:01:74:87:df:8f:06:b3:1e:e7:a6:7e:c6:a5:6b:07:1a:
62:68:62:07:ec:d0:31:52:f0:ff:1e:be:b2:09:8e:00:6b:06:
ef:36:68:3f:15:e1:05:29:f6:f5:cb:1b:dd:9f:4a:07:e8:4a:
ff:41:1e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXLUprhuilIcqCqcBy0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2
OWY4YjQwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
Eyg5MGY5NzdjNzdmOThkOTA2NGZkZGI4NjA2ZDJlZmJiMzBiZmM4Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5HzqgMskLxCj9IsZnpMfy88hHef
GTWYfMmSIKOjbL8BwImR2HSZUXC5N04PbxGK1fQh0dV/ep35ZuXqOYHkYa33DGHb
Ppg91tBjlkbjBQkcQrDbTzrr0+NozUKtKURtkApmhAnTsT9BVXCv/2/BlvPVEyzD
RcJm+6YQcBXZHfjAnKIv6qTxXQXRMMcgy9vOl26+uSOi1y5W7his/ivUzNDqV4Kw
K+Bk8yVrqi7HdWoCNmtNGh/0yyUzNkmvVGeNksKNNXkogrWfZB4VTHiNIf5VwdYt
9nZ3wlC8hfxqNvsZWoud9QdtAUi8i/hp6uG93Jo7ttd6lX60iFK8dtaKEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD5d8d/mNkGT924YG0u+7ML/IaUMB8GA1UdIwQY
MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt
ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk
LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEEFyKKS
W6rjYtRzkoZwgtcqzBm5L6V+K6B/d7R35iJLJwhyedz4Xt5BI8kR2aE8NiRQ3CO0
wrNo4pXCZqqSQoUsCJ2UgoTwb0oTT0qSk/MglHk0W3b/vm5xb3+3+WzJg5shWUXK
xNBAUJfJd2obaKLJHWvXDSrkDF6s0absv8lmeR3EnAM0oTn6V5IJzt99eMhEGo77
LYmjIh3wPDwd9CGM1CwNCVpM63Z3Rf4HLLCGYMP03XJIO8Rl+GWt0OAIn2smgVSJ
Mj8BdIffjwazHuemfsalawcaYmhiB+zQMVLw/x6+sgmOAGsG7zZoPxXhBSn29csb
3Z9KB+hK/0EeUA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:57 2025 by rpki-client