Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: a35pHtcPtEzyCzb1xb44oQ9BGGRsde1Dhbq/vl86wjI=
Subject key identifier: EA:BD:1B:DD:E4:EA:1A:B3:B8:2F:0C:A5:A7:5D:FC:A3:49:9A:37:70
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 0194BD8546E9E7F3A34460C4E7592AACC293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: QJVqTnaE8WZEZMet53YOa2FEd8EV7QgQ345NbjBFcEU=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
3: oB95arRBgb3qrJ3Cv3Q93T0xyYw.roa (hash: jCLWsC0z1+1L484JPavhvMUCyvqzC30glpZcJtreNKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:e9:e7:f3:a3:44:60:c4:e7:59:2a:ac:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=eabd1bdde4ea1ab3b82f0ca5a75dfca3499a3770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:fd:51:87:f8:d7:fd:23:4d:8d:3f:cd:30:
cc:dd:ea:1c:65:2b:e5:81:19:74:33:6e:50:03:55:
d8:d9:aa:0e:d4:e0:4f:7d:27:37:27:92:41:a9:a6:
66:c7:83:94:74:2c:17:9c:ee:b3:1e:39:2c:72:5d:
05:e2:89:1b:6b:57:a6:09:d8:2e:7f:42:3d:5d:7e:
b8:ce:7d:99:1a:d9:02:bc:23:41:67:1e:4a:69:66:
2f:9c:59:5a:d5:c8:8b:a5:9a:da:ab:cf:95:b3:09:
8a:c4:08:51:28:14:f2:fd:d6:69:9d:1b:46:6a:02:
0c:42:51:be:8f:ab:f2:af:4a:a1:61:40:4a:a7:39:
40:75:8f:a6:35:6a:58:5a:ea:03:1a:48:04:3a:3e:
0c:a6:2e:a3:8e:60:cd:fd:de:9d:50:e2:30:12:91:
b7:53:28:d7:95:a1:66:9d:8b:d9:ef:9f:94:37:f6:
88:ec:8f:dc:39:84:a2:55:8d:a2:12:89:bd:c6:80:
88:d4:52:00:59:92:94:18:18:57:77:dc:9b:6e:ff:
23:99:0b:8c:39:62:10:8a:5d:d8:8c:ac:8d:53:71:
ea:a5:35:dc:5e:dd:84:be:8e:90:92:2e:fd:45:22:
85:8a:c6:7b:f2:55:ac:24:1b:ac:d0:46:46:4a:3e:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:1B:DD:E4:EA:1A:B3:B8:2F:0C:A5:A7:5D:FC:A3:49:9A:37:70
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f6:b9:24:9c:45:2c:71:cf:8d:0f:52:d9:bb:45:79:6c:2a:
ed:1e:3e:d8:50:14:66:da:01:4a:19:d3:47:92:92:29:e3:80:
89:f9:7f:a2:d7:7f:af:d3:bc:d3:84:ce:6b:6a:54:65:3b:90:
88:fb:fb:72:36:ec:a6:34:94:6f:b4:46:22:06:e7:4d:3c:af:
44:65:34:94:d3:0f:15:60:df:1b:49:d1:f1:00:93:7d:70:2c:
ac:44:0f:0f:95:1d:4a:db:5a:8e:88:75:e1:c0:e4:a7:e3:cb:
47:75:2b:ce:aa:8f:6f:5e:1a:57:27:7f:f1:71:e2:2b:49:ca:
72:be:e6:7e:35:01:8c:50:36:c8:3c:1e:db:b4:73:d5:34:2c:
f9:e8:ee:9f:52:c5:f1:d4:97:7a:df:6e:e7:91:b4:20:b8:9f:
dc:1f:86:69:06:81:8f:8c:30:45:83:84:28:04:37:dd:7c:32:
bc:ca:9e:01:28:ff:1c:6d:7a:50:09:f5:7d:5d:20:c1:50:53:
25:78:e9:78:fb:3b:d7:5b:c6:97:98:90:31:a1:2e:57:37:37:
58:03:a5:fe:18:be:6f:2c:33:8a:4e:15:d9:07:87:06:28:28:
24:5d:78:cc:5a:f8:64:d2:d8:07:4d:0f:70:1a:40:e4:14:bb:
d2:b4:4c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUbp5/OjRGDE51kqrMKTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw
YmFlNmEwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EyhlYWJkMWJkZGU0ZWExYWIzYjgyZjBjYTVhNzVkZmNhMzQ5OWEzNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3X9UYf41/0jTY0/zTDM3eocZSvl
gRl0M25QA1XY2aoO1OBPfSc3J5JBqaZmx4OUdCwXnO6zHjkscl0F4okba1emCdgu
f0I9XX64zn2ZGtkCvCNBZx5KaWYvnFla1ciLpZraq8+VswmKxAhRKBTy/dZpnRtG
agIMQlG+j6vyr0qhYUBKpzlAdY+mNWpYWuoDGkgEOj4Mpi6jjmDN/d6dUOIwEpG3
UyjXlaFmnYvZ75+UN/aI7I/cOYSiVY2iEom9xoCI1FIAWZKUGBhXd9ybbv8jmQuM
OWIQil3YjKyNU3HqpTXcXt2Evo6Qki79RSKFisZ78lWsJBus0EZGSj687wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq9G93k6hqzuC8Mpadd/KNJmjdwMB8GA1UdIwQY
MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt
Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm
LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzva5JJxF
LHHPjQ9S2btFeWwq7R4+2FAUZtoBShnTR5KSKeOAifl/otd/r9O804TOa2pUZTuQ
iPv7cjbspjSUb7RGIgbnTTyvRGU0lNMPFWDfG0nR8QCTfXAsrEQPD5UdSttajoh1
4cDkp+PLR3UrzqqPb14aVyd/8XHiK0nKcr7mfjUBjFA2yDwe27Rz1TQs+ejun1LF
8dSXet9u55G0ILif3B+GaQaBj4wwRYOEKAQ33XwyvMqeASj/HG16UAn1fV0gwVBT
JXjpePs711vGl5iQMaEuVzc3WAOl/hi+bywzik4V2QeHBigoJF14zFr4ZNLYB00P
cBpA5BS70rRMjg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:10 2025 by rpki-client