Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: NqmtY34YJfZ5DSSeAJR8sFKp1VCmXNoBK/YpU4V+ZEw=
Subject key identifier: 6E:84:AE:31:E8:22:1F:DA:CC:EE:41:78:CF:97:3B:64:8D:EB:37:56
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 0194BBCE2FC4D821A96C49082ACA469E9973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: Xi7iBvZS5IXz+BmimHeLUoHSGEOCZxubl9URQvx9Sqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2f:c4:d8:21:a9:6c:49:08:2a:ca:46:9e:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=6e84ae31e8221fdaccee4178cf973b648deb3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:41:2d:ff:26:b6:12:d2:3b:a9:2f:db:09:
2b:ca:29:a1:1b:a1:3f:58:41:df:f2:59:de:f6:ba:
78:03:03:a5:7a:e9:2f:a5:74:68:82:19:58:7b:44:
8f:a5:31:62:83:cb:08:84:6c:2b:65:77:79:e1:a1:
b1:8a:a4:03:82:e4:e0:a0:63:2b:ab:9c:c7:5e:be:
14:65:d4:4e:28:b5:03:55:39:7d:0e:32:26:07:19:
8b:a7:cd:04:1d:b8:96:3a:a2:38:4e:b7:b6:1a:fa:
2f:72:a5:46:05:6c:49:22:21:8a:50:8a:8f:28:78:
a0:06:d1:bf:42:cf:3c:13:da:c2:6f:81:46:dd:6c:
b3:76:64:35:f4:1f:69:5c:86:36:3b:51:33:33:c2:
97:85:cd:9a:b8:c3:42:47:94:79:58:c4:ff:b5:49:
51:ea:1c:ff:02:6a:20:4c:36:fe:de:af:f5:3f:92:
1f:f9:33:e2:99:39:c3:06:46:12:72:63:37:4f:b8:
c1:c0:94:a6:74:f1:b3:6e:28:54:c5:bf:f8:81:b4:
b2:89:fb:49:f0:06:1b:8f:71:09:34:44:e8:53:9a:
54:27:88:17:7b:9b:96:4b:a5:aa:1e:01:54:0f:ec:
48:4f:ef:f6:39:30:c9:d7:f8:14:2a:d0:d2:4a:bd:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:AE:31:E8:22:1F:DA:CC:EE:41:78:CF:97:3B:64:8D:EB:37:56
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:0a:30:e9:27:77:73:15:f1:62:2c:7c:76:d0:ac:d7:97:
5e:b4:45:db:b0:5c:ba:a0:3f:11:d1:a3:8c:d9:0f:f2:72:46:
25:42:d3:56:55:02:ad:76:4e:0b:e9:36:53:e1:6e:36:78:c9:
26:3a:2e:42:23:0f:4b:dc:fe:cf:2d:64:da:a9:bc:13:ba:4f:
53:20:d0:a9:4a:de:87:1f:b4:ce:24:8f:46:07:42:87:d0:8d:
76:3a:71:48:45:aa:0d:a7:e7:a5:f7:b4:19:e6:3d:06:a9:c3:
9d:aa:6e:1a:c3:f9:8f:4d:30:98:5a:4d:1b:24:3a:ea:49:df:
ed:e2:15:e6:27:bb:70:e3:25:db:d3:bb:55:5f:9d:cb:c2:ae:
e6:bd:2e:01:9e:51:8a:0c:e4:5b:48:48:53:a5:1d:83:de:95:
c3:21:1d:8c:f7:d1:c9:bb:d6:f6:45:99:45:e0:13:1d:33:b8:
d6:52:59:7e:ab:2e:96:c0:20:16:3a:5b:b3:da:a6:3a:1e:73:
0d:7f:96:54:a8:c0:6d:80:35:00:d3:62:71:75:c1:44:aa:c7:
5d:ce:20:61:cf:3f:5d:d9:40:33:ce:01:95:32:c3:4b:16:83:
75:83:67:25:4c:da:b9:d8:3c:d3:2a:ca:65:3d:f9:ff:40:eb:
ba:75:26:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi/E2CGpbEkIKspGnplzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
Eyg2ZTg0YWUzMWU4MjIxZmRhY2NlZTQxNzhjZjk3M2I2NDhkZWIzNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3URBLf8mthLSO6kv2wkryimhG6E/
WEHf8lne9rp4AwOleukvpXRoghlYe0SPpTFig8sIhGwrZXd54aGxiqQDguTgoGMr
q5zHXr4UZdROKLUDVTl9DjImBxmLp80EHbiWOqI4Tre2GvovcqVGBWxJIiGKUIqP
KHigBtG/Qs88E9rCb4FG3WyzdmQ19B9pXIY2O1EzM8KXhc2auMNCR5R5WMT/tUlR
6hz/AmogTDb+3q/1P5If+TPimTnDBkYScmM3T7jBwJSmdPGzbihUxb/4gbSyiftJ
8AYbj3EJNEToU5pUJ4gXe5uWS6WqHgFUD+xIT+/2OTDJ1/gUKtDSSr11wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6ErjHoIh/azO5BeM+XO2SN6zdWMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllsKMOkn
d3MV8WIsfHbQrNeXXrRF27BcuqA/EdGjjNkP8nJGJULTVlUCrXZOC+k2U+FuNnjJ
JjouQiMPS9z+zy1k2qm8E7pPUyDQqUrehx+0ziSPRgdCh9CNdjpxSEWqDafnpfe0
GeY9BqnDnapuGsP5j00wmFpNGyQ66knf7eIV5ie7cOMl29O7VV+dy8Ku5r0uAZ5R
igzkW0hIU6Udg96VwyEdjPfRybvW9kWZReATHTO41lJZfqsulsAgFjpbs9qmOh5z
DX+WVKjAbYA1ANNicXXBRKrHXc4gYc8/XdlAM84BlTLDSxaDdYNnJUzaudg80yrK
ZT35/0DrunUmnQ==
-----END CERTIFICATE-----
Generated at Thu May 8 03:55:30 2025 by rpki-client