Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier: eZ1sbJIeXMR+WWapGup+NLOImzTnhTn90YSE1pI7/Fk=
Subject key identifier: F7:D9:82:8A:56:CC:C8:C7:F5:AB:CC:1D:6C:86:35:2E:94:C8:17:B0
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 0194BD176AC9461687DAEBB2A0383E2E4D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: Q2J036IozgyoNBJgrr_DVZbFeDo.roa (hash: 8JbN1rBzCDIs6MxiLB09FrHxCFN8hIMN9eyZ3xxwJNI=)
2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: AQY/GZiKMJkLAFpjCr8eHyXdl3o6BJ7tLtz/rw9dRc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:c9:46:16:87:da:eb:b2:a0:38:3e:2e:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=f7d9828a56ccc8c7f5abcc1d6c86352e94c817b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:5f:7b:4e:30:9c:6c:30:7e:01:8c:0b:6e:
70:da:93:eb:78:19:f8:14:a9:56:2a:2c:e9:0c:89:
e9:5d:3f:c0:d4:57:d9:5c:87:83:e8:70:01:5b:ff:
be:15:42:7e:48:0b:c7:bf:ce:22:6b:44:73:5c:c1:
b2:16:fc:d6:4b:ce:43:72:bf:37:2f:a4:f9:78:7d:
2a:b3:b3:08:bd:8e:2e:f4:8e:01:5b:9e:b1:db:29:
63:b2:14:86:b4:35:ce:8d:ce:1c:12:47:c1:f3:df:
81:f1:63:73:f8:1f:06:8d:53:1e:50:a4:76:4c:53:
f9:bb:4c:cf:6b:be:61:64:cb:0b:de:03:4e:d1:21:
d9:f8:98:89:a7:bd:b0:f6:cb:29:7a:ca:14:1c:7c:
68:48:25:1c:b9:64:cc:bb:cc:6f:8a:05:ea:20:e3:
b4:34:1f:01:60:36:85:7d:3e:30:18:f7:c1:c2:49:
6f:e4:3b:bd:b1:ef:b2:4a:3e:9f:80:ae:4e:b6:05:
1e:48:b9:d0:07:24:e6:5c:a3:43:29:b4:34:6e:65:
f7:37:e2:7f:2a:95:65:dc:b1:27:7f:37:34:19:22:
26:10:b7:ba:f3:66:8a:f2:f5:54:c0:a3:c6:be:a3:
12:ec:55:3d:ac:8c:f3:41:b3:ff:82:60:28:64:f3:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:82:8A:56:CC:C8:C7:F5:AB:CC:1D:6C:86:35:2E:94:C8:17:B0
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:b6:5c:0b:3b:34:4d:77:6c:bc:97:8a:53:1f:02:5b:d1:
a1:2c:51:6c:d2:e3:49:cf:12:a8:b1:fa:96:aa:20:72:53:b2:
87:47:a0:fc:b9:95:b4:2a:69:4d:0c:87:50:cc:6b:2f:08:fb:
b6:82:05:cb:ee:a9:fa:50:17:25:14:c9:c3:5d:ca:2b:c7:9a:
9e:4e:ce:fa:85:1c:6a:74:fd:03:7d:d0:29:45:09:16:8b:b7:
aa:19:93:c8:d9:ff:da:d0:d8:0b:1d:9e:07:0c:de:51:4a:09:
42:42:1f:d2:b9:e1:1b:fb:af:f1:69:29:fb:a8:f5:32:90:6d:
d0:ff:31:b5:af:a5:c7:c9:87:d1:3b:9b:ed:ed:3d:a3:df:4b:
00:f9:e1:15:f3:6f:6a:2f:e8:84:9d:f2:f6:bb:52:bb:bf:e7:
c8:f1:13:ed:b3:99:6c:35:c7:6c:d8:55:83:b3:e7:b5:a6:26:
dd:de:f3:ff:32:30:eb:2e:aa:22:5d:cb:6e:c6:4b:d7:8c:11:
a2:21:e8:5a:37:64:9e:5c:a2:ba:18:75:17:4c:c3:9f:0e:af:
f8:3d:2b:2e:18:07:67:5d:01:e1:91:92:b2:9b:cd:c5:4c:68:
4b:36:db:32:d3:e3:b5:ae:ac:e7:bf:a4:cb:c5:77:7f:94:a7:
ff:18:9b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2rJRhaH2uuyoDg+Lk2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl
ZjY5MTYwHhcNMjUwMTMxMTYwMDE1WhcNMjUwMjAxMTYwMDE1WjAzMTEwLwYDVQQD
EyhmN2Q5ODI4YTU2Y2NjOGM3ZjVhYmNjMWQ2Yzg2MzUyZTk0YzgxN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Vfe04wnGwwfgGMC25w2pPreBn4
FKlWKizpDInpXT/A1FfZXIeD6HABW/++FUJ+SAvHv84ia0RzXMGyFvzWS85Dcr83
L6T5eH0qs7MIvY4u9I4BW56x2yljshSGtDXOjc4cEkfB89+B8WNz+B8GjVMeUKR2
TFP5u0zPa75hZMsL3gNO0SHZ+JiJp72w9sspesoUHHxoSCUcuWTMu8xvigXqIOO0
NB8BYDaFfT4wGPfBwklv5Du9se+ySj6fgK5OtgUeSLnQByTmXKNDKbQ0bmX3N+J/
KpVl3LEnfzc0GSImELe682aK8vVUwKPGvqMS7FU9rIzzQbP/gmAoZPMc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfZgopWzMjH9avMHWyGNS6UyBewMB8GA1UdIwQY
MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt
OTNkMGIwMGU3ZTA0LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0
LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoC2XAs7
NE13bLyXilMfAlvRoSxRbNLjSc8SqLH6lqogclOyh0eg/LmVtCppTQyHUMxrLwj7
toIFy+6p+lAXJRTJw13KK8eank7O+oUcanT9A33QKUUJFou3qhmTyNn/2tDYCx2e
BwzeUUoJQkIf0rnhG/uv8Wkp+6j1MpBt0P8xta+lx8mH0Tub7e09o99LAPnhFfNv
ai/ohJ3y9rtSu7/nyPET7bOZbDXHbNhVg7PntaYm3d7z/zIw6y6qIl3LbsZL14wR
oiHoWjdknlyiuhh1F0zDnw6v+D0rLhgHZ10B4ZGSspvNxUxoSzbbMtPjta6s57+k
y8V3f5Sn/xibqA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:06 2025 by rpki-client