Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: 2Zrb/PVh/22jLj6mPHNKdtp0PmYw+Mdq0afq3fVEl0E=
Subject key identifier: 2A:4A:25:3B:3D:64:6E:25:25:C3:EE:5C:0F:2C:3B:F1:34:AD:42:11
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 0194BC72C87E83C1C7266859CE1DCB5C1735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: 0DfsQJ5gcw6xT+0Beg6VqNZmZNBWD2V4ta4gbdRCH4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:7e:83:c1:c7:26:68:59:ce:1d:cb:5c:17:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=2a4a253b3d646e2525c3ee5c0f2c3bf134ad4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:19:0b:19:66:0f:66:bb:34:5b:8e:ca:0b:
80:49:be:80:51:d8:57:51:16:23:c2:a4:76:e6:46:
d2:28:be:0c:bb:83:a9:f0:9f:ce:eb:1d:74:67:30:
62:77:6f:8c:08:fa:f6:97:0c:b9:d4:3d:0c:4e:66:
70:71:69:d9:e8:bf:b7:18:78:88:b3:c0:02:0b:9c:
ed:40:b4:ea:b1:7e:80:9e:82:8f:17:43:1e:49:b9:
a1:91:0c:f3:f1:10:86:f6:c3:7f:c0:61:8b:0c:7e:
17:1c:e3:ef:a0:8d:36:2d:c2:1a:68:23:03:f8:65:
64:f6:aa:be:f5:61:f8:c1:8e:3e:f8:97:0b:32:4f:
f5:03:1b:16:fe:72:d7:63:0d:09:d3:c1:ef:79:2d:
84:cc:df:6f:fe:0f:7c:df:b0:a7:64:85:02:5d:e9:
87:51:d4:59:35:86:f3:9e:86:1c:96:de:17:c6:59:
75:bf:94:c6:cc:99:c3:b7:21:8a:b5:d5:8f:55:6a:
30:b9:92:66:5a:ec:2a:8a:58:20:d7:f6:73:9b:f0:
b1:1f:04:41:2e:06:23:f7:7b:e6:a0:48:e7:be:86:
8f:18:16:53:63:d5:1c:11:0e:63:23:48:fc:48:93:
97:08:7f:5c:4f:87:e2:53:e3:06:10:2a:f7:f2:72:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:25:3B:3D:64:6E:25:25:C3:EE:5C:0F:2C:3B:F1:34:AD:42:11
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:43:cd:f7:71:43:a7:ff:83:73:83:72:80:f7:dc:cc:6f:
56:10:ec:ec:db:07:72:84:60:c8:1a:ab:78:9c:fc:37:40:79:
d2:45:88:e8:c4:6e:f5:44:77:95:09:e8:f5:c0:11:b9:c3:dc:
f0:40:4e:98:25:52:f8:52:59:16:64:97:e0:05:fa:f3:a9:9b:
54:d8:92:15:06:cb:e7:e6:c8:3c:1b:99:1a:80:9e:82:85:b1:
ef:b4:56:da:9e:cb:18:38:3e:d8:12:e0:09:d2:7b:f6:f5:7a:
1c:9f:c8:ff:f5:5b:19:ec:cc:47:71:70:c6:d3:59:b4:f5:89:
87:52:a9:fe:7e:17:47:ab:40:ff:2a:5c:47:85:a2:f2:0c:82:
59:c1:27:95:f6:50:59:6e:2a:62:90:f1:aa:c5:5e:de:83:b2:
1a:ac:40:66:43:10:b9:1a:60:cf:68:98:f9:05:9b:cb:81:6c:
bf:69:17:63:ad:34:94:89:5a:c5:fb:b9:39:dc:fd:80:8c:60:
e7:49:04:af:8c:ea:2f:e6:94:63:ef:c2:8c:3f:de:bb:20:43:
69:62:3c:0a:7b:f4:45:f8:1e:c2:9f:c8:d4:76:41:06:f5:1c:
0b:23:5a:cb:a4:ea:f3:20:a8:a9:10:fc:4c:11:f3:72:02:37:
a7:4a:52:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csh+g8HHJmhZzh3LXBc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1
N2MyY2EwHhcNMjUwMTMxMTMwMDI2WhcNMjUwMjAxMTMwMDI2WjAzMTEwLwYDVQQD
EygyYTRhMjUzYjNkNjQ2ZTI1MjVjM2VlNWMwZjJjM2JmMTM0YWQ0MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktcZCxlmD2a7NFuOyguASb6AUdhX
URYjwqR25kbSKL4Mu4Op8J/O6x10ZzBid2+MCPr2lwy51D0MTmZwcWnZ6L+3GHiI
s8ACC5ztQLTqsX6AnoKPF0MeSbmhkQzz8RCG9sN/wGGLDH4XHOPvoI02LcIaaCMD
+GVk9qq+9WH4wY4++JcLMk/1AxsW/nLXYw0J08HveS2EzN9v/g9837CnZIUCXemH
UdRZNYbznoYclt4Xxll1v5TGzJnDtyGKtdWPVWowuZJmWuwqilgg1/Zzm/CxHwRB
LgYj93vmoEjnvoaPGBZTY9UcEQ5jI0j8SJOXCH9cT4fiU+MGECr38nLiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpKJTs9ZG4lJcPuXA8sO/E0rUIRMB8GA1UdIwQY
MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt
NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3
LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqZDzfdx
Q6f/g3ODcoD33MxvVhDs7NsHcoRgyBqreJz8N0B50kWI6MRu9UR3lQno9cARucPc
8EBOmCVS+FJZFmSX4AX686mbVNiSFQbL5+bIPBuZGoCegoWx77RW2p7LGDg+2BLg
CdJ79vV6HJ/I//VbGezMR3FwxtNZtPWJh1Kp/n4XR6tA/ypcR4Wi8gyCWcEnlfZQ
WW4qYpDxqsVe3oOyGqxAZkMQuRpgz2iY+QWby4Fsv2kXY600lIlaxfu5Odz9gIxg
50kEr4zqL+aUY+/CjD/euyBDaWI8Cnv0Rfgewp/I1HZBBvUcCyNay6Tq8yCoqRD8
TBHzcgI3p0pSiA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:38 2025 by rpki-client