Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 9g7YdeTOd8Mq52iu/9SPsAoYprdJ7eQfQV2+SveyY2U=
Subject key identifier: AC:B9:AD:D8:D8:3B:4E:00:6F:D7:EE:07:31:8A:1A:60:37:A8:CE:2D
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 0194BD85856E6992BEE6D3A74AC5558658EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 02F9
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: LSn+hnXJH1m7NM8FnlWsFct19MrcxZo7rUR25q/LijQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:6e:69:92:be:e6:d3:a7:4a:c5:55:86:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=acb9add8d83b4e006fd7ee07318a1a6037a8ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:2d:4b:8b:d1:32:5a:62:66:fb:09:02:26:
6e:47:bc:84:c3:30:a1:59:2a:ee:bc:65:4c:76:68:
62:6f:73:00:26:57:ae:9a:17:60:f5:a4:f1:71:a0:
c4:32:ad:4b:80:da:b6:ce:22:20:a9:20:9c:2a:32:
69:fb:b2:99:f4:2b:96:fa:58:6f:6b:e6:f9:c7:4d:
06:bf:e0:7b:8d:cd:af:6e:58:c3:f9:af:5b:aa:56:
f6:d4:6f:4f:20:64:c7:09:66:3b:8e:84:07:1c:3f:
aa:b5:8f:47:76:eb:4e:52:4b:c8:f4:64:11:4a:2e:
7e:a2:e4:d1:3f:64:a2:e3:5a:83:b6:2e:cc:bc:39:
2a:91:be:b3:46:85:06:f3:00:37:55:43:0c:dd:b6:
21:f6:85:a7:2c:91:c0:9e:6d:3e:50:44:12:f3:d8:
78:79:b7:30:bc:f6:ca:07:95:45:6b:72:f3:91:3c:
c1:2c:15:12:7e:0b:91:e8:d7:f3:a7:4a:e0:f3:3a:
b2:c4:bc:de:57:ed:8d:3e:ef:1a:8c:ac:fd:01:ba:
ef:90:0b:2b:ed:9c:52:f7:0e:62:70:f9:89:39:89:
c7:f1:27:9a:ff:d6:39:de:4b:c7:b4:45:d2:4d:d4:
81:0e:ef:d6:4f:50:d6:36:da:55:d4:d1:49:b0:c6:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:AD:D8:D8:3B:4E:00:6F:D7:EE:07:31:8A:1A:60:37:A8:CE:2D
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:28:bc:ca:a0:0c:9a:d5:f9:24:e1:f8:df:cd:57:15:7c:ee:
85:a1:bd:7e:50:f8:88:0c:c8:6c:4e:2f:f9:74:7a:da:8f:30:
23:29:2d:74:92:82:23:ff:5f:c6:52:ce:af:eb:24:5c:1a:52:
0a:77:5d:10:ce:93:3d:94:19:e6:da:43:ce:0e:55:51:cc:ac:
a5:ff:17:df:a8:24:33:ff:ae:8f:fb:b9:f5:dd:bb:49:b2:27:
61:cc:c9:f5:0d:88:a4:9c:1e:79:55:92:ad:96:66:25:9c:3e:
9e:37:c5:80:13:11:02:d0:7a:0f:10:95:0c:ad:8e:55:3b:83:
c1:1d:f6:8c:58:c7:53:48:39:4c:d5:25:84:8c:53:72:48:fe:
41:cb:3f:69:a3:e2:d2:78:d1:34:2e:77:7a:53:d9:66:bf:0a:
43:9f:2d:26:a8:89:94:e4:e2:52:eb:03:01:59:a7:bf:60:1b:
50:61:e3:59:3a:4f:cd:f8:aa:20:db:84:aa:25:77:57:4b:2f:
36:eb:ca:ee:25:57:e3:15:9a:52:56:33:0f:e1:29:0a:dd:ed:
e7:54:81:00:fe:84:ba:d8:f8:eb:76:ad:da:9b:e8:80:4b:67:
3d:75:37:1d:91:1d:47:fc:31:b1:18:dc:e7:6c:fc:d5:5f:5b:
7b:83:68:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYVuaZK+5tOnSsVVhljuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0
NTZhYjQwHhcNMjUwMTMxMTgwMDMxWhcNMjUwMjAxMTgwMDMxWjAzMTEwLwYDVQQD
EyhhY2I5YWRkOGQ4M2I0ZTAwNmZkN2VlMDczMThhMWE2MDM3YThjZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HMtS4vRMlpiZvsJAiZuR7yEwzCh
WSruvGVMdmhib3MAJleumhdg9aTxcaDEMq1LgNq2ziIgqSCcKjJp+7KZ9CuW+lhv
a+b5x00Gv+B7jc2vbljD+a9bqlb21G9PIGTHCWY7joQHHD+qtY9HdutOUkvI9GQR
Si5+ouTRP2Si41qDti7MvDkqkb6zRoUG8wA3VUMM3bYh9oWnLJHAnm0+UEQS89h4
ebcwvPbKB5VFa3LzkTzBLBUSfguR6Nfzp0rg8zqyxLzeV+2NPu8ajKz9AbrvkAsr
7ZxS9w5icPmJOYnH8Sea/9Y53kvHtEXSTdSBDu/WT1DWNtpV1NFJsMa0JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy5rdjYO04Ab9fuBzGKGmA3qM4tMB8GA1UdIwQY
MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt
MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz
LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ii8yqAM
mtX5JOH4381XFXzuhaG9flD4iAzIbE4v+XR62o8wIyktdJKCI/9fxlLOr+skXBpS
CnddEM6TPZQZ5tpDzg5VUcyspf8X36gkM/+uj/u59d27SbInYczJ9Q2IpJweeVWS
rZZmJZw+njfFgBMRAtB6DxCVDK2OVTuDwR32jFjHU0g5TNUlhIxTckj+Qcs/aaPi
0njRNC53elPZZr8KQ58tJqiJlOTiUusDAVmnv2AbUGHjWTpPzfiqINuEqiV3V0sv
NuvK7iVX4xWaUlYzD+EpCt3t51SBAP6Eutj463at2pvogEtnPXU3HZEdR/wxsRjc
52z81V9be4NoUQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:06 2025 by rpki-client