Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: IDz02PXETvvmk4M3FO6I4rCIcCwfyW+emNXHY1dUujw=
Subject key identifier: B4:29:28:BF:7C:0D:A7:B0:FE:00:DE:58:D7:8B:83:B7:A7:D6:A0:55
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0194BC3BE2FA9E3627B6AD30D7061742A1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 06EB
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 8vFec3tVLEdgD/jQSHSiP8q1wl1MiF5ksF3HSGNdHHk=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:fa:9e:36:27:b6:ad:30:d7:06:17:42:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=b42928bf7c0da7b0fe00de58d78b83b7a7d6a055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:e0:5a:0e:7d:b7:4e:e8:41:97:83:68:94:
61:df:d2:33:f8:53:8e:7a:68:41:0b:27:08:c3:6f:
a2:af:78:53:f5:b1:45:c6:c5:18:50:62:e9:7f:6d:
f1:96:4d:02:15:0d:84:f5:73:1a:ba:96:29:36:a1:
a4:cf:33:8b:8b:a5:32:e5:0f:00:4e:50:29:ea:71:
0d:ef:40:d9:36:bd:75:1b:4e:8e:5e:c9:55:c6:77:
03:01:b5:70:94:39:73:51:59:6f:13:27:a5:77:ea:
2e:d5:15:37:d5:50:e3:f6:d8:e0:e1:b5:0a:21:1c:
a2:d8:b1:ee:bd:e6:da:21:ea:0e:7d:ec:f1:25:5c:
3e:ab:c1:db:ec:48:a9:28:e8:b2:6d:e4:ab:43:5b:
5a:de:f5:a3:be:ff:31:e3:5e:8d:f2:05:aa:be:a5:
77:2c:f0:3b:97:6e:6b:32:f1:19:b5:16:66:58:4b:
a5:2a:1a:36:cd:b7:25:8f:61:df:35:16:1e:18:33:
c3:d5:e9:a3:d4:6c:7e:b4:fa:0f:b9:ed:1f:6c:e1:
2d:11:44:35:1d:9c:a7:a4:78:d5:b4:c8:cd:52:c6:
90:61:50:77:22:11:bb:e4:19:16:7d:52:f7:6d:33:
16:5a:50:ab:e5:f4:43:dc:3f:c0:1b:54:05:92:a4:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:28:BF:7C:0D:A7:B0:FE:00:DE:58:D7:8B:83:B7:A7:D6:A0:55
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:70:28:77:37:83:e5:be:3a:81:62:ad:e2:14:00:65:4b:87:
08:fb:e1:1f:33:19:5d:d7:ec:4d:1f:f4:8e:4c:c8:15:17:db:
dd:8c:73:84:4a:fd:f9:05:97:19:15:35:31:8a:6f:0d:69:fc:
ff:8d:95:c6:e2:ea:bf:0d:43:44:93:2a:ac:87:4c:62:94:20:
4a:96:20:f1:92:3e:98:83:e8:60:78:fb:63:6f:4b:b5:51:20:
95:28:f1:fc:cf:5f:5d:fe:bc:22:f6:08:1a:f7:90:9f:3e:36:
42:50:ba:9b:80:1e:35:cc:e5:09:1e:8d:b3:88:f6:9a:d1:3a:
59:1b:05:2c:e5:aa:3d:13:d0:bc:c0:f5:52:39:4c:82:79:a9:
6f:20:79:fc:87:c2:35:4b:69:4f:f5:3f:d5:24:12:1a:53:bc:
38:0b:02:00:d4:96:9e:6b:32:71:6d:95:db:30:95:8a:57:c5:
dc:ac:15:eb:de:b7:e3:37:07:98:17:de:ee:58:9c:2d:f5:57:
67:2f:85:8e:62:6f:30:8e:3b:ae:1e:00:bb:63:4c:c2:d1:13:
e6:51:25:94:40:94:6b:0e:7b:26:84:f1:9c:9f:83:72:94:80:
c6:b9:b0:53:fa:8e:85:fd:e6:2a:97:32:e9:16:e5:c6:87:60:
00:21:c6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+L6njYntq0w1wYXQqHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EyhiNDI5MjhiZjdjMGRhN2IwZmUwMGRlNThkNzhiODNiN2E3ZDZhMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6jgWg59t07oQZeDaJRh39Iz+FOO
emhBCycIw2+ir3hT9bFFxsUYUGLpf23xlk0CFQ2E9XMaupYpNqGkzzOLi6Uy5Q8A
TlAp6nEN70DZNr11G06OXslVxncDAbVwlDlzUVlvEyeld+ou1RU31VDj9tjg4bUK
IRyi2LHuvebaIeoOfezxJVw+q8Hb7EipKOiybeSrQ1ta3vWjvv8x416N8gWqvqV3
LPA7l25rMvEZtRZmWEulKho2zbclj2HfNRYeGDPD1emj1Gx+tPoPue0fbOEtEUQ1
HZynpHjVtMjNUsaQYVB3IhG75BkWfVL3bTMWWlCr5fRD3D/AG1QFkqQBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQpKL98Daew/gDeWNeLg7en1qBVMB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHAodzeD
5b46gWKt4hQAZUuHCPvhHzMZXdfsTR/0jkzIFRfb3YxzhEr9+QWXGRU1MYpvDWn8
/42VxuLqvw1DRJMqrIdMYpQgSpYg8ZI+mIPoYHj7Y29LtVEglSjx/M9fXf68IvYI
GveQnz42QlC6m4AeNczlCR6Ns4j2mtE6WRsFLOWqPRPQvMD1UjlMgnmpbyB5/IfC
NUtpT/U/1SQSGlO8OAsCANSWnmsycW2V2zCVilfF3KwV69634zcHmBfe7licLfVX
Zy+FjmJvMI47rh4Au2NMwtET5lEllECUaw57JoTxnJ+DcpSAxrmwU/qOhf3mKpcy
6RblxodgACHGHg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:26 2025 by rpki-client