Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: mcq+Xozt7Sx/3IfWzEiOat+sEdtwz76L5kBLQTjo/Jk=
Subject key identifier: 7B:4A:1E:BB:CE:59:83:66:09:37:98:4D:2A:35:52:DA:27:F1:DA:E0
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0194BCA98C61375773B38078969DE3C830C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 4Thjoi2cuu2R-Wt66Xk0RcDdsq8.roa (hash: FfWHL/WqJtibXS4FBAVnGxUAgnegdwlyA934MIbOlIo=)
2: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: b1G8por18oHq18gHA1kH/uJ5FpM4YN3wlB6TxtLaeeE=)
3: yXpvc9uWZKZFHCmkmSmpej0f37c.roa (hash: 3v8/4eMJO7NotNddn4SD4NaC1CnMnbkwXQwSszwWBcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:61:37:57:73:b3:80:78:96:9d:e3:c8:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=7b4a1ebbce5983660937984d2a3552da27f1dae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:4f:38:91:19:99:97:3e:96:c3:63:f3:ff:
14:29:a6:e7:13:5e:b7:b0:f1:98:9c:1a:34:5d:78:
dc:ca:c6:d1:d1:cc:b7:03:76:05:b2:be:c7:c1:40:
ae:76:e6:f3:4b:bc:ec:db:4e:f9:85:9c:1a:9f:74:
f8:be:42:97:67:87:58:be:0d:20:83:64:f7:cc:91:
de:24:09:34:5f:a9:21:d1:d8:e9:5e:f8:44:66:90:
24:6e:9e:86:33:45:47:f7:54:27:9b:e8:50:3a:1b:
27:7e:ed:05:0e:7c:51:01:7c:39:1e:cf:19:09:4b:
fb:e8:c4:12:5f:98:94:cf:2a:0b:e9:28:5b:a2:7e:
f3:eb:c2:cd:45:53:c9:18:69:0e:63:14:e2:81:54:
37:08:3c:8e:ec:f8:b5:65:49:5e:34:9b:7e:cb:2b:
c2:da:8e:e7:99:dc:71:30:96:c3:ed:40:5f:15:7c:
22:8c:22:38:16:6b:9c:65:2e:49:41:d6:42:e4:f2:
9f:06:5e:7b:7e:d8:ba:76:6f:66:09:ae:b6:d8:60:
85:e4:79:c4:74:97:40:96:4d:51:0a:1d:3d:28:eb:
ce:b1:e6:23:a9:0a:78:6d:04:d6:72:94:e0:1f:4d:
6e:8f:11:cc:e1:db:59:aa:da:76:5c:4e:78:a0:d3:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:1E:BB:CE:59:83:66:09:37:98:4D:2A:35:52:DA:27:F1:DA:E0
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b2:1f:c4:06:fe:4a:f3:66:be:13:0e:c1:1f:f9:8c:d3:10:
f2:c9:e1:89:53:61:69:90:b7:9f:9c:1a:5a:48:80:8e:23:fd:
8f:84:04:78:9b:65:bd:fc:e3:06:c6:d2:23:fe:d5:c8:ee:02:
d4:c4:b1:70:bb:33:ac:a8:4c:e1:76:53:f0:1e:b0:7e:24:a3:
2d:19:15:fa:e9:42:d1:08:db:f6:56:41:c1:0b:76:49:a5:65:
a5:0c:68:ff:77:a3:0d:73:e2:e5:e0:21:21:4e:fd:ff:a9:44:
f7:34:bb:e6:1e:3c:de:c5:b7:74:0b:78:08:b9:83:86:9b:d6:
76:a3:14:3e:53:29:78:75:d4:9b:17:51:1e:82:d7:01:7b:46:
85:0e:0d:36:dd:0f:c3:bf:23:45:f3:c7:4f:c0:7c:be:fc:4e:
dc:68:19:c3:35:22:56:d7:b7:c6:50:d8:12:0b:c4:b0:48:df:
25:24:6e:65:95:a8:69:13:54:92:5b:56:2d:5b:75:a8:19:11:
ec:14:06:20:6d:53:b6:3f:b4:1a:7d:97:23:5b:47:73:4e:6e:
99:a1:70:6d:df:d6:74:96:f5:81:6b:ea:9b:3f:36:4e:5c:52:
af:b4:2d:c5:bd:e0:08:5b:09:ff:e0:01:5a:c9:11:ef:c5:5a:
1b:b0:2c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYxhN1dzs4B4lp3jyDDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz
ZmQ3Y2YwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
Eyg3YjRhMWViYmNlNTk4MzY2MDkzNzk4NGQyYTM1NTJkYTI3ZjFkYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzNPOJEZmZc+lsNj8/8UKabnE163
sPGYnBo0XXjcysbR0cy3A3YFsr7HwUCudubzS7zs2075hZwan3T4vkKXZ4dYvg0g
g2T3zJHeJAk0X6kh0djpXvhEZpAkbp6GM0VH91Qnm+hQOhsnfu0FDnxRAXw5Hs8Z
CUv76MQSX5iUzyoL6Shbon7z68LNRVPJGGkOYxTigVQ3CDyO7Pi1ZUleNJt+yyvC
2o7nmdxxMJbD7UBfFXwijCI4FmucZS5JQdZC5PKfBl57fti6dm9mCa622GCF5HnE
dJdAlk1RCh09KOvOseYjqQp4bQTWcpTgH01ujxHM4dtZqtp2XE54oNPj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtKHrvOWYNmCTeYTSo1Uton8drgMB8GA1UdIwQY
MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt
NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh
LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLIfxAb+
SvNmvhMOwR/5jNMQ8snhiVNhaZC3n5waWkiAjiP9j4QEeJtlvfzjBsbSI/7VyO4C
1MSxcLszrKhM4XZT8B6wfiSjLRkV+ulC0Qjb9lZBwQt2SaVlpQxo/3ejDXPi5eAh
IU79/6lE9zS75h483sW3dAt4CLmDhpvWdqMUPlMpeHXUmxdRHoLXAXtGhQ4NNt0P
w78jRfPHT8B8vvxO3GgZwzUiVte3xlDYEgvEsEjfJSRuZZWoaRNUkltWLVt1qBkR
7BQGIG1Ttj+0Gn2XI1tHc05umaFwbd/WdJb1gWvqmz82TlxSr7Qtxb3gCFsJ/+AB
WskR78VaG7Asfg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client