Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: m6yB+z1bsNo1Q77vuZ+zJOMJxUacU3YR9JyrLezRbe8=
Subject key identifier: 06:BA:3A:64:3E:0A:66:B1:41:84:11:DF:89:D6:8B:7B:90:5E:08:79
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 0194BCAA0639C29138B7C2493DAA985DCDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: MN51yXn+lu31Hb/zOgz0fRx4Yc8ouy5I4fm19rjPX98=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:39:c2:91:38:b7:c2:49:3d:aa:98:5d:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=06ba3a643e0a66b1418411df89d68b7b905e0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:fc:57:d9:b7:85:51:2b:7d:c3:99:0d:ef:
a9:d7:3b:3f:21:90:7e:93:93:e3:ef:78:fe:46:b5:
0a:8e:64:be:ea:46:ea:92:1a:69:e2:8d:bd:16:b2:
cf:73:b5:27:90:a2:75:ea:3f:b6:ef:b0:47:a0:27:
fa:c5:eb:30:60:47:e5:a2:6c:1f:ca:2b:cc:39:ca:
44:3d:b8:fe:4f:e0:5e:22:c0:fa:e3:8f:41:1b:80:
50:de:28:ff:89:b5:af:a2:d0:e9:85:80:94:ea:c1:
c8:78:8e:55:00:55:e4:d6:6a:c4:9d:6a:3d:7c:77:
79:1d:24:e1:4e:d7:f8:5b:b8:2f:b9:bd:51:27:e8:
5d:a0:d2:f8:aa:f3:9c:e7:99:a1:cb:a9:9f:a8:f4:
b3:a6:ef:ce:52:14:f9:b7:e6:ec:2b:69:cb:ac:41:
12:d2:2e:3f:ac:7b:74:61:be:ac:bb:7a:fa:83:11:
96:5d:f8:c7:5a:5b:14:a5:11:7d:e3:68:57:15:6a:
27:b3:16:4d:ce:47:2a:bd:04:23:95:4a:5a:fe:0d:
95:1f:69:19:1b:ee:7d:64:b5:8a:80:05:4b:63:20:
ea:4f:af:55:9d:27:20:69:28:eb:b5:ea:b3:c7:22:
57:16:41:c2:8d:b0:2e:64:2d:e3:c6:72:99:0c:91:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:3A:64:3E:0A:66:B1:41:84:11:DF:89:D6:8B:7B:90:5E:08:79
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:e9:cb:11:a0:7c:10:74:74:68:e5:67:83:90:f5:ee:6f:
6f:b7:48:00:c8:f4:a3:9f:7d:f2:99:5b:fe:d3:36:83:a3:64:
46:ad:d2:8b:1a:5d:b8:72:e1:59:a8:54:9f:c2:99:24:84:17:
e1:03:91:f9:71:30:68:86:bc:3f:44:5e:e4:b9:36:57:97:f4:
a6:96:01:81:e5:9b:4a:a0:02:e9:b8:c3:d1:e4:3a:dd:ec:ae:
0d:71:19:60:4e:69:e7:85:75:78:36:ee:75:bf:44:4a:a0:66:
2b:a4:54:d5:ac:4a:d3:96:b5:d8:95:fc:f8:28:6f:99:12:65:
81:91:ea:04:5f:d6:6a:0d:1c:81:aa:1e:dd:e9:da:0b:b5:75:
48:a4:52:88:ab:4e:9d:06:cb:83:67:93:12:7b:7f:a4:72:9e:
8a:e7:50:0d:d9:ef:20:40:e9:32:5d:68:48:39:e1:fb:5f:04:
a9:3a:85:22:93:80:51:c8:67:df:0d:3b:f1:68:3b:22:2f:a8:
1a:ee:c2:4c:3b:72:94:82:af:27:41:24:80:55:b8:35:f3:1c:
04:65:b9:b3:dc:69:58:b2:63:a9:c7:a2:96:6b:b4:9d:12:5e:
cb:9a:96:d4:79:7d:eb:c0:31:21:8f:06:f8:62:14:d2:d1:4b:
84:4e:8f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgY5wpE4t8JJPaqYXc3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm
MDJkNWIwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
EygwNmJhM2E2NDNlMGE2NmIxNDE4NDExZGY4OWQ2OGI3YjkwNWUwODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5v8V9m3hVErfcOZDe+p1zs/IZB+
k5Pj73j+RrUKjmS+6kbqkhpp4o29FrLPc7UnkKJ16j+277BHoCf6xeswYEflomwf
yivMOcpEPbj+T+BeIsD6449BG4BQ3ij/ibWvotDphYCU6sHIeI5VAFXk1mrEnWo9
fHd5HSThTtf4W7gvub1RJ+hdoNL4qvOc55mhy6mfqPSzpu/OUhT5t+bsK2nLrEES
0i4/rHt0Yb6su3r6gxGWXfjHWlsUpRF942hXFWonsxZNzkcqvQQjlUpa/g2VH2kZ
G+59ZLWKgAVLYyDqT69VnScgaSjrteqzxyJXFkHCjbAuZC3jxnKZDJHmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa6OmQ+CmaxQYQR34nWi3uQXgh5MB8GA1UdIwQY
MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt
MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl
LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKnpyxGg
fBB0dGjlZ4OQ9e5vb7dIAMj0o5998plb/tM2g6NkRq3SixpduHLhWahUn8KZJIQX
4QOR+XEwaIa8P0Re5Lk2V5f0ppYBgeWbSqAC6bjD0eQ63eyuDXEZYE5p54V1eDbu
db9ESqBmK6RU1axK05a12JX8+ChvmRJlgZHqBF/Wag0cgaoe3enaC7V1SKRSiKtO
nQbLg2eTEnt/pHKeiudQDdnvIEDpMl1oSDnh+18EqTqFIpOAUchn3w078Wg7Ii+o
Gu7CTDtylIKvJ0EkgFW4NfMcBGW5s9xpWLJjqceilmu0nRJey5qW1Hl968AxIY8G
+GIU0tFLhE6PRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:48 2025 by rpki-client