Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: 9o8bblETljZbt65kXnaNyX/jfyYIybGjIPlQcaRvK34=
Subject key identifier: 6B:8F:8B:28:79:17:C9:A9:5B:0C:B9:08:6B:0D:52:98:9A:32:18:39
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 0194BC04CE52304C811D40C6DA7BF261F210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 0178
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: pSOambUkHI9XSADmuDdHOogTjgNRI/nPPm3tJ581cos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:52:30:4c:81:1d:40:c6:da:7b:f2:61:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=6b8f8b287917c9a95b0cb9086b0d52989a321839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:69:bd:56:26:2c:b1:41:6a:28:8b:1c:40:
c8:62:b5:c3:ea:96:d7:af:de:2d:fc:33:90:64:6a:
e8:d3:c7:e8:cc:04:13:52:6a:48:72:13:36:05:b8:
3a:95:ac:fc:b4:63:49:54:c2:6f:01:b0:56:51:a6:
bc:c7:19:f2:fc:53:0c:86:4e:81:f8:23:21:01:68:
e7:86:fd:cd:3c:e7:39:19:ac:36:8e:d3:bc:47:48:
f9:ea:3a:98:71:a8:db:a7:ed:82:c4:0a:e9:67:b2:
84:4b:da:2a:b1:a8:28:fa:f0:c8:3a:ab:11:df:1d:
72:b2:14:ba:c2:e4:99:39:03:a5:52:58:01:c0:5e:
90:f6:1d:f5:8d:f1:da:9e:1b:d3:d5:ae:6d:a5:84:
70:66:df:2f:84:b2:2e:f5:d4:e7:15:56:1a:76:c2:
8a:37:ac:75:1d:31:0f:a3:75:7e:53:12:d6:f1:b5:
a0:58:b1:56:44:7c:15:2c:81:83:c9:1e:c3:00:4f:
5c:34:db:d8:f3:c7:71:4d:42:95:0b:95:90:da:66:
fd:3b:c1:c3:38:b0:42:f9:08:dd:23:52:2c:80:55:
e2:8f:9f:8f:74:3b:8b:b8:dd:13:4a:fe:cd:09:16:
2d:53:cc:f7:2a:b8:36:1d:3e:9c:25:ec:22:82:3a:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:8B:28:79:17:C9:A9:5B:0C:B9:08:6B:0D:52:98:9A:32:18:39
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:d4:ba:12:73:8b:af:b5:13:d1:19:fd:33:a1:e0:ae:e1:
b3:52:8a:4d:9e:dc:44:df:6f:70:f3:ae:fd:0a:f5:2d:99:e6:
da:a4:bd:fc:c2:9b:27:10:4a:1a:04:81:5c:31:82:65:90:51:
a0:d7:f5:18:3b:18:2c:66:13:01:97:ad:5d:e2:fd:83:4f:e9:
50:28:10:7f:a9:73:f0:21:ab:41:de:e9:52:e8:fc:7b:4d:99:
b9:87:23:16:11:52:26:f1:39:5a:bd:2f:a4:e8:03:73:e8:f9:
c3:06:d5:52:ed:d6:d5:ea:a6:d8:4e:d3:5e:c5:38:3b:61:35:
1a:92:7e:3a:29:d0:92:26:53:e1:e5:6a:8e:c8:31:32:e6:ce:
3a:a3:bd:28:7c:68:52:33:97:4c:36:e0:e8:b5:5e:e6:8b:d0:
c1:11:c0:f5:53:9e:ac:26:e7:a6:19:4f:fa:bc:31:64:ce:cc:
71:da:8b:ef:14:6f:60:cd:5f:6c:c3:0e:7a:45:cb:91:60:f2:
68:f0:66:34:3d:72:8f:b6:26:7c:3d:5d:bd:fa:4d:31:62:3c:
44:ce:57:2c:d9:76:f4:44:bf:2b:bd:f6:6c:8e:c3:4e:1d:79:
7f:36:52:0c:e1:ec:c0:1c:fc:c0:00:36:63:97:a3:7f:1b:dd:
75:73:35:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BM5SMEyBHUDG2nvyYfIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzUyNmJiMzFiOWUzMGM0OTA0NWY0MzY4YzYwMmVlOThi
ZWMwMWEwHhcNMjUwMTMxMTEwMDE5WhcNMjUwMjAxMTEwMDE5WjAzMTEwLwYDVQQD
Eyg2YjhmOGIyODc5MTdjOWE5NWIwY2I5MDg2YjBkNTI5ODlhMzIxODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBpvVYmLLFBaiiLHEDIYrXD6pbX
r94t/DOQZGro08fozAQTUmpIchM2Bbg6laz8tGNJVMJvAbBWUaa8xxny/FMMhk6B
+CMhAWjnhv3NPOc5Gaw2jtO8R0j56jqYcajbp+2CxArpZ7KES9oqsago+vDIOqsR
3x1yshS6wuSZOQOlUlgBwF6Q9h31jfHanhvT1a5tpYRwZt8vhLIu9dTnFVYadsKK
N6x1HTEPo3V+UxLW8bWgWLFWRHwVLIGDyR7DAE9cNNvY88dxTUKVC5WQ2mb9O8HD
OLBC+QjdI1IsgFXij5+PdDuLuN0TSv7NCRYtU8z3Krg2HT6cJewigjq6PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuPiyh5F8mpWwy5CGsNUpiaMhg5MB8GA1UdIwQY
MBaAFI01JrsxueMMSQRfQ2jGAu6YvsAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAt
NzI1M2RhMzUxMGVlLzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAtNzI1M2RhMzUxMGVl
LzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBPUuhJz
i6+1E9EZ/TOh4K7hs1KKTZ7cRN9vcPOu/Qr1LZnm2qS9/MKbJxBKGgSBXDGCZZBR
oNf1GDsYLGYTAZetXeL9g0/pUCgQf6lz8CGrQd7pUuj8e02ZuYcjFhFSJvE5Wr0v
pOgDc+j5wwbVUu3W1eqm2E7TXsU4O2E1GpJ+OinQkiZT4eVqjsgxMubOOqO9KHxo
UjOXTDbg6LVe5ovQwRHA9VOerCbnphlP+rwxZM7McdqL7xRvYM1fbMMOekXLkWDy
aPBmND1yj7YmfD1dvfpNMWI8RM5XLNl29ES/K732bI7DTh15fzZSDOHswBz8wAA2
Y5ejfxvddXM13Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:41 2025 by rpki-client