Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: A6yt/hz2h7rcGhI4lUnfAdnd5USNxQA8y6YTyqeFNgA=
Subject key identifier: BE:A2:B2:EB:82:D4:33:EE:50:BD:58:72:D4:E4:0D:EF:0E:D6:6A:41
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 0194BCA9C5652AA29F07FE31A6668D2E46D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 0722
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: 1EU9XzCwDL7OJghu7Vet9E+c5Jq1BecSQiAtoOJlON0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:65:2a:a2:9f:07:fe:31:a6:66:8d:2e:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=bea2b2eb82d433ee50bd5872d4e40def0ed66a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:6b:bb:a5:1b:f3:a2:78:49:84:39:fc:8a:
ff:74:55:ac:a8:14:6f:54:66:2b:91:5c:36:29:66:
96:e4:9a:27:4f:c7:3c:9b:4f:46:b6:ce:97:c4:92:
ba:95:f8:96:21:f5:5d:9e:b2:a4:1b:c8:4d:1a:8e:
28:95:05:15:94:ef:51:fb:35:60:fd:37:8c:6a:a9:
6c:70:cc:fa:09:d1:e2:e8:9a:58:67:26:4b:a3:5f:
47:a9:3c:6f:ce:d6:91:33:6c:30:9a:9e:9d:57:55:
ec:c5:68:44:d8:b7:e7:49:1e:0f:4a:b6:07:f0:2d:
7a:8c:f6:9a:e7:9d:b4:4a:f0:e7:45:3e:e4:b0:34:
88:66:ba:87:70:5a:12:04:f8:9f:0c:50:0a:11:2e:
76:a7:04:46:b6:e5:00:2a:1f:66:57:af:9e:52:20:
0b:8d:7b:88:9e:6b:35:71:c3:7d:57:79:8b:0d:51:
c1:bc:c8:c7:2b:ae:81:23:39:cf:6a:15:69:b9:67:
05:bc:f7:3e:ae:83:4b:74:c3:f7:c5:58:2a:5c:cf:
4b:3b:60:0b:c9:ab:2c:57:a9:cc:45:76:07:f8:3d:
de:67:d3:89:73:a8:55:48:83:69:ef:c5:23:c6:9e:
6f:5e:c7:5f:f5:25:5f:b9:0d:36:58:d6:df:cc:18:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:B2:EB:82:D4:33:EE:50:BD:58:72:D4:E4:0D:EF:0E:D6:6A:41
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:99:81:cc:f0:e1:18:59:47:0f:e1:5b:65:b7:61:74:7e:
c4:01:cc:aa:97:25:e8:c4:39:0e:df:16:29:8e:a2:39:ad:cb:
50:cf:e0:58:e6:3d:89:b5:ce:c1:85:a3:08:6a:df:c4:d4:22:
ac:d9:07:38:b7:9a:51:e6:27:e3:f9:dd:12:89:14:00:8e:40:
dd:76:9e:e4:92:e3:51:d0:c5:0d:ee:17:60:53:6f:71:ac:79:
c8:0c:cf:66:c1:c5:e9:e3:b8:ba:2d:8f:81:c4:54:f1:3f:74:
38:80:38:89:9f:aa:f1:05:1b:f3:2b:86:2d:ad:13:4e:68:bd:
37:a1:1b:eb:c4:ba:02:73:26:2c:00:97:ec:a9:e1:32:e6:0e:
74:da:93:a9:7e:35:71:56:34:9d:7f:27:e5:26:07:ac:0c:85:
40:9d:a3:0f:f0:44:75:6c:7b:b5:e3:fe:c5:58:45:a1:9d:ba:
45:f5:11:35:a5:c6:ec:91:16:28:08:d6:5c:f4:0b:de:cf:fe:
62:f5:78:7f:2c:14:c3:ca:e1:97:d2:52:25:9a:18:4b:6e:fb:
a1:e5:72:74:68:ed:28:2a:cb:aa:4d:98:f7:e3:79:68:59:7d:
2e:a2:c9:be:30:6e:fa:21:2e:48:49:81:2f:6b:45:2c:be:a6:
5f:f8:23:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcVlKqKfB/4xpmaNLkbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZGJhMWIzNWRlNzM3ZjcxYjdjNTUwZGY1ZjRiNDRlODM2
NDZiOGQwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
EyhiZWEyYjJlYjgyZDQzM2VlNTBiZDU4NzJkNGU0MGRlZjBlZDY2YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkURru6Ub86J4SYQ5/Ir/dFWsqBRv
VGYrkVw2KWaW5JonT8c8m09Gts6XxJK6lfiWIfVdnrKkG8hNGo4olQUVlO9R+zVg
/TeMaqlscMz6CdHi6JpYZyZLo19HqTxvztaRM2wwmp6dV1XsxWhE2LfnSR4PSrYH
8C16jPaa5520SvDnRT7ksDSIZrqHcFoSBPifDFAKES52pwRGtuUAKh9mV6+eUiAL
jXuInms1ccN9V3mLDVHBvMjHK66BIznPahVpuWcFvPc+roNLdMP3xVgqXM9LO2AL
yassV6nMRXYH+D3eZ9OJc6hVSINp78Ujxp5vXsdf9SVfuQ02WNbfzBgzkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6isuuC1DPuUL1YctTkDe8O1mpBMB8GA1UdIwQY
MBaAFCTbobNd5zf3G3xVDfX0tE6DZGuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDct
ZGEwNGUyZjM5Yjg4LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDctZGEwNGUyZjM5Yjg4
LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWGZgczw
4RhZRw/hW2W3YXR+xAHMqpcl6MQ5Dt8WKY6iOa3LUM/gWOY9ibXOwYWjCGrfxNQi
rNkHOLeaUeYn4/ndEokUAI5A3Xae5JLjUdDFDe4XYFNvcax5yAzPZsHF6eO4ui2P
gcRU8T90OIA4iZ+q8QUb8yuGLa0TTmi9N6Eb68S6AnMmLACX7KnhMuYOdNqTqX41
cVY0nX8n5SYHrAyFQJ2jD/BEdWx7teP+xVhFoZ26RfURNaXG7JEWKAjWXPQL3s/+
YvV4fywUw8rhl9JSJZoYS277oeVydGjtKCrLqk2Y9+N5aFl9LqLJvjBu+iEuSEmB
L2tFLL6mX/gjeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:07 2025 by rpki-client