Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File: jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier: yfCgSDTlwcz6a53EYJUe5JVRTThK2GxmNpaeLFLnhao=
Subject key identifier: 00:60:36:C6:35:D9:34:32:F1:1C:8E:48:6A:1E:50:5A:3C:3D:B3:AF
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer: /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial: 0194BBCDBB6C1158D14AFB0556AADDAAD912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number: 05AA
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: eXi9gz6u17CEcHWepKwnPPO82OFFKYGhrGcbzVz5Ez4=)
2: rhQc5qUM2MDBH4p36Kio4nVEz6k.roa (hash: awMdOXUFz2DrxlzCVZjnG6myrcErsUVUML7kWjxlY24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:6c:11:58:d1:4a:fb:05:56:aa:dd:aa:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=006036c635d93432f11c8e486a1e505a3c3db3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:b8:a2:aa:43:a2:51:06:d0:a8:4f:b3:c0:
66:8b:e6:a0:ed:bc:8a:15:87:4a:7b:6d:6d:8c:45:
8c:19:67:94:85:dd:46:95:ea:05:20:9f:0c:c8:30:
60:3a:9d:19:29:2e:b9:5c:03:8e:22:89:a0:f7:62:
a2:3c:90:86:e6:7b:6f:75:85:4d:5d:a2:09:7a:2d:
63:5c:b5:2d:92:1b:0f:7d:dc:9e:b4:1a:2a:e6:e0:
30:42:0b:e5:f4:7f:93:a2:00:7e:05:6a:e6:17:f3:
2b:22:a4:14:bd:50:f6:14:0f:48:b0:d7:28:8b:2f:
41:4a:5f:50:69:e1:00:ab:ea:d5:bc:d2:8c:13:11:
d1:d6:e2:da:63:de:99:39:17:78:2c:5c:0f:fc:cc:
c4:77:c2:cb:18:ff:c1:ce:24:09:57:0e:05:0a:a1:
48:79:1a:58:1b:e8:43:8f:d9:70:e3:7b:70:f8:db:
d1:23:e0:9a:01:8b:35:76:66:06:eb:d4:ef:65:8e:
7a:99:a2:f7:5b:2b:0a:aa:aa:09:0f:ea:89:63:01:
6f:77:e8:c0:ed:75:5d:56:d8:10:c3:6f:55:ec:2d:
f3:36:b3:4e:59:3b:11:15:0f:84:86:47:4f:bd:fc:
fb:7f:3f:ee:ad:72:23:9c:cb:ce:2c:38:99:c7:b3:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:36:C6:35:D9:34:32:F1:1C:8E:48:6A:1E:50:5A:3C:3D:B3:AF
X509v3 Authority Key Identifier:
keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:49:be:4b:9d:7c:19:85:51:14:cb:52:3d:af:d8:8b:2a:
09:e5:73:85:ad:58:d6:cf:af:ed:17:56:82:4f:1d:90:f8:a0:
32:cb:b0:8f:c2:61:c9:05:be:28:92:54:41:5b:75:14:04:5c:
d4:37:ad:61:5a:20:73:3d:25:b7:84:bf:a4:65:05:2a:54:d1:
7c:59:95:29:8f:31:c7:9a:fb:ba:ed:77:a5:ea:59:91:12:87:
83:4e:6d:82:eb:bd:5e:e1:77:6c:a3:8a:07:b7:a9:c5:f1:22:
19:fc:a1:a8:3a:de:94:0e:b6:32:3e:4a:46:69:42:fb:b4:78:
92:7e:0e:1b:85:94:83:b9:0f:1e:cb:3b:87:56:41:dc:be:65:
ca:0d:09:8d:fa:5b:9e:c0:90:9b:ed:f7:ce:de:47:9d:67:3d:
98:a4:8d:c6:03:b8:c3:3a:2b:bf:38:6b:62:96:d3:9d:4d:19:
09:05:37:30:c0:63:ff:18:20:fe:0c:f7:46:da:47:c1:1c:e9:
44:b5:79:9e:e5:ed:58:9b:3b:2d:e0:22:db:b3:db:74:f0:78:
61:00:ab:60:9e:1e:96:3c:18:41:08:1f:48:14:5c:d9:e4:35:
49:bb:8d:69:d9:d8:ad:d9:33:dd:d7:df:91:74:cc:b5:a2:c2:
cb:46:ea:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbtsEVjRSvsFVqrdqtkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMWNiOTczNzUyNGM0MzdmNmZhNzUyMTE3NmJiMGFiNzFm
YmVlNjMwHhcNMjUwMTMxMTAwMDA5WhcNMjUwMjAxMTAwMDA5WjAzMTEwLwYDVQQD
EygwMDYwMzZjNjM1ZDkzNDMyZjExYzhlNDg2YTFlNTA1YTNjM2RiM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1a4oqpDolEG0KhPs8Bmi+ag7byK
FYdKe21tjEWMGWeUhd1GleoFIJ8MyDBgOp0ZKS65XAOOIomg92KiPJCG5ntvdYVN
XaIJei1jXLUtkhsPfdyetBoq5uAwQgvl9H+TogB+BWrmF/MrIqQUvVD2FA9IsNco
iy9BSl9QaeEAq+rVvNKMExHR1uLaY96ZORd4LFwP/MzEd8LLGP/BziQJVw4FCqFI
eRpYG+hDj9lw43tw+NvRI+CaAYs1dmYG69TvZY56maL3WysKqqoJD+qJYwFvd+jA
7XVdVtgQw29V7C3zNrNOWTsRFQ+EhkdPvfz7fz/urXIjnMvOLDiZx7PAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABgNsY12TQy8RyOSGoeUFo8PbOvMB8GA1UdIwQY
MBaAFI8cuXN1JMQ39vp1IRdrsKtx++5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjExZGUtOTAwZi00Mzc4LTg0ZWIt
Nzg3MGM2NDVlMjE5LzEvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjExZGUtOTAwZi00Mzc4LTg0ZWItNzg3MGM2NDVlMjE5
LzEvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWJJvkud
fBmFURTLUj2v2IsqCeVzha1Y1s+v7RdWgk8dkPigMsuwj8JhyQW+KJJUQVt1FARc
1DetYVogcz0lt4S/pGUFKlTRfFmVKY8xx5r7uu13pepZkRKHg05tguu9XuF3bKOK
B7epxfEiGfyhqDrelA62Mj5KRmlC+7R4kn4OG4WUg7kPHss7h1ZB3L5lyg0Jjfpb
nsCQm+33zt5HnWc9mKSNxgO4wzorvzhrYpbTnU0ZCQU3MMBj/xgg/gz3RtpHwRzp
RLV5nuXtWJs7LeAi27PbdPB4YQCrYJ4eljwYQQgfSBRc2eQ1SbuNadnYrdkz3dff
kXTMtaLCy0bqfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:15 2025 by rpki-client