Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: GwB2lcbSd6l9Ki9PLHguNM5UkDEM0ClHYywbrIWHAeo=
Subject key identifier: 5B:59:E8:BD:6E:FE:0A:0E:45:3C:5D:DF:E3:F3:70:DE:2E:9D:21:D2
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 0194BBCDF2DEAC6025D130552D4B3EB02612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 86n4VoMP6u6vA4XE45FWD2fzqvS0x2XdVmNZPxhtkXE=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:de:ac:60:25:d1:30:55:2d:4b:3e:b0:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=5b59e8bd6efe0a0e453c5ddfe3f370de2e9d21d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:d4:fd:bf:25:9f:c9:1f:1f:59:df:e8:ec:
e9:fa:32:b0:b0:2d:b3:25:6c:53:c5:20:fd:33:e9:
27:73:03:8f:cc:23:fb:7a:fa:56:92:00:27:04:a8:
81:17:3d:4c:bc:f8:7a:5f:c7:ed:17:fc:66:40:3b:
72:bd:6b:65:be:66:70:b1:69:12:af:1f:9b:d8:f4:
c6:a6:92:29:61:e2:67:a0:38:50:ec:22:5c:9a:73:
48:52:18:23:37:1e:07:ab:2e:81:a9:c7:29:c8:0e:
4b:cc:8b:8b:07:6d:ed:d8:4d:7a:fe:09:ff:99:b0:
62:41:e0:22:44:5a:73:ed:d3:a0:65:f2:6c:34:04:
40:2e:3c:4a:d3:93:d8:66:af:6a:59:9a:1e:17:4c:
e8:af:b9:f4:c8:de:3f:4d:92:a7:80:c0:b5:cb:f3:
8b:16:9c:1b:be:9a:8f:8d:cb:fc:37:28:51:d1:99:
7e:95:35:8a:64:a5:43:26:e9:2d:59:a1:7f:25:85:
a4:6d:5e:52:06:39:15:d5:75:1e:ed:6e:9f:d8:ba:
a9:9f:2b:e6:4f:83:c2:63:f0:b0:eb:a3:6b:ff:3a:
82:fc:ff:af:44:6f:d1:cc:86:64:f8:bc:53:81:82:
2e:42:43:b8:42:6b:01:5f:13:f2:71:4f:d9:17:36:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:E8:BD:6E:FE:0A:0E:45:3C:5D:DF:E3:F3:70:DE:2E:9D:21:D2
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:c6:1b:ea:75:40:aa:11:d9:36:39:59:95:76:ab:d4:39:
83:c0:61:5b:6e:ef:39:cf:be:fc:00:48:22:6e:49:33:cd:43:
6e:c2:d2:73:96:e5:ff:7a:8b:68:d8:40:a9:e3:6c:25:71:8c:
d3:fa:e4:40:17:0d:8a:e4:63:65:61:f5:13:33:ef:50:42:3a:
8c:82:b7:66:4a:1f:6b:d1:3b:b6:15:7d:25:0f:5c:7d:75:c8:
a6:04:2a:8a:5a:ca:02:4a:cc:f2:ce:4d:75:3e:92:6d:09:5d:
f4:20:1c:a5:bb:5f:68:22:a5:1b:3b:2e:72:ef:c8:af:54:71:
d5:94:5e:6f:b6:92:ac:24:d2:d1:86:c3:a9:26:c3:ee:a5:13:
1b:36:d3:7d:79:e2:7a:f5:11:10:77:62:ab:59:9d:55:12:8f:
ac:13:99:9f:29:a8:f8:93:57:e6:dc:c9:4d:c2:88:4a:5e:e9:
f4:c6:7a:c5:2b:42:be:73:32:0c:70:35:17:b2:04:1d:25:9d:
65:42:ca:64:24:50:33:85:37:68:17:2b:28:63:eb:de:62:41:
42:54:49:59:58:58:19:7f:99:09:4c:f2:ca:0a:28:48:98:60:
30:6e:ac:d2:3d:ca:32:0d:a7:23:1f:4d:30:53:81:3b:b2:06:
79:40:46:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfLerGAl0TBVLUs+sCYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1
MjcxMjYwHhcNMjUwMTMxMTAwMDIzWhcNMjUwMjAxMTAwMDIzWjAzMTEwLwYDVQQD
Eyg1YjU5ZThiZDZlZmUwYTBlNDUzYzVkZGZlM2YzNzBkZTJlOWQyMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R7U/b8ln8kfH1nf6Ozp+jKwsC2z
JWxTxSD9M+kncwOPzCP7evpWkgAnBKiBFz1MvPh6X8ftF/xmQDtyvWtlvmZwsWkS
rx+b2PTGppIpYeJnoDhQ7CJcmnNIUhgjNx4Hqy6BqccpyA5LzIuLB23t2E16/gn/
mbBiQeAiRFpz7dOgZfJsNARALjxK05PYZq9qWZoeF0zor7n0yN4/TZKngMC1y/OL
FpwbvpqPjcv8NyhR0Zl+lTWKZKVDJuktWaF/JYWkbV5SBjkV1XUe7W6f2Lqpnyvm
T4PCY/Cw66Nr/zqC/P+vRG/RzIZk+LxTgYIuQkO4QmsBXxPycU/ZFzYolwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtZ6L1u/goORTxd3+PzcN4unSHSMB8GA1UdIwQY
MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt
NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx
LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDHGG+p1
QKoR2TY5WZV2q9Q5g8BhW27vOc++/ABIIm5JM81DbsLSc5bl/3qLaNhAqeNsJXGM
0/rkQBcNiuRjZWH1EzPvUEI6jIK3Zkofa9E7thV9JQ9cfXXIpgQqilrKAkrM8s5N
dT6SbQld9CAcpbtfaCKlGzsucu/Ir1Rx1ZReb7aSrCTS0YbDqSbD7qUTGzbTfXni
evUREHdiq1mdVRKPrBOZnymo+JNX5tzJTcKISl7p9MZ6xStCvnMyDHA1F7IEHSWd
ZULKZCRQM4U3aBcrKGPr3mJBQlRJWVhYGX+ZCUzyygooSJhgMG6s0j3KMg2nIx9N
MFOBO7IGeUBGSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:10 2025 by rpki-client