Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: I1XLBOIBYbGS+CeOYipsJkHhfmSKBBrCKmFy3RLGZvc=
Subject key identifier: 69:45:54:EF:44:5E:8A:C0:D6:AC:9C:91:24:BB:D4:A5:5E:D4:27:50
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 0194BBCE76DA94910BF3BE560B69F306CF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: CekIexmI5fIMu1Mf8k4kuOj1+Wic4fQh8QuetBncWMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:da:94:91:0b:f3:be:56:0b:69:f3:06:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=694554ef445e8ac0d6ac9c9124bbd4a55ed42750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:ff:92:c1:6d:89:7e:2a:9b:e5:58:3d:bd:
12:b6:d3:5e:7d:c5:2a:6e:22:3f:6f:65:84:69:1a:
de:ef:67:e9:fd:17:34:72:25:28:0a:54:3e:56:79:
9d:af:1c:57:98:7b:46:a8:ed:57:1d:97:ee:51:6d:
d5:90:33:74:dc:6f:9c:71:1a:ce:11:77:67:d2:67:
3b:48:06:e8:99:92:48:25:01:9d:ed:b3:7e:30:3b:
96:dc:c4:69:c1:15:7b:9d:ba:89:f4:7d:13:e8:e0:
a1:bc:a3:fb:b5:65:f8:83:a5:d3:67:18:83:1a:94:
78:5a:df:9d:43:a0:0c:76:61:df:95:ee:0f:55:c0:
dc:b0:c7:07:60:29:03:3b:67:81:7c:30:05:b4:9c:
5e:9f:60:15:72:5b:cd:8c:a2:2d:a1:73:18:55:e7:
75:4a:58:4e:38:26:63:3b:fa:d4:eb:b1:89:20:6f:
35:32:62:52:b0:12:14:4a:ee:5c:56:78:99:f2:61:
98:ea:69:6b:bc:b3:fa:73:61:4a:10:53:9b:a2:05:
f1:5b:05:7e:da:a5:91:70:ff:b6:63:88:1b:51:39:
30:75:05:a7:85:a7:97:48:15:2e:b8:c4:9a:11:56:
93:81:db:40:45:79:1a:34:8e:96:72:3d:4d:78:46:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:54:EF:44:5E:8A:C0:D6:AC:9C:91:24:BB:D4:A5:5E:D4:27:50
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:85:9f:e2:58:cb:54:f4:64:fa:b8:b3:89:c6:ac:f6:d5:
0b:fe:38:e6:6d:a3:c7:74:e4:87:48:c6:42:23:69:fa:b4:3d:
06:14:c5:c3:0b:49:3e:72:98:d5:8f:7a:d5:0e:c3:1b:13:04:
6e:2e:7a:96:84:69:a8:48:26:44:a3:8f:74:56:fc:16:19:40:
72:33:84:82:1b:6a:1b:a1:d2:b5:20:1b:8a:42:ea:32:a4:6d:
ca:d0:fd:e3:d4:c9:c0:78:81:4f:e9:e9:92:6b:a2:cc:d0:fd:
80:e8:14:b3:f5:db:f1:52:a4:7f:74:e1:bc:0b:cd:7e:2c:4f:
34:82:8d:21:2a:a1:aa:93:3c:69:51:71:33:a2:b0:a0:05:51:
5a:fd:e4:62:3b:6c:46:ce:be:92:38:d7:e8:ef:b6:41:d9:76:
65:27:74:38:df:4f:03:aa:9a:6b:ed:c0:0c:dd:f1:12:c4:00:
10:e1:f6:0a:6f:0a:47:e1:c3:f3:21:d9:07:4e:2c:4e:22:52:
8e:07:7c:b8:3f:07:ff:36:c3:f5:fa:c6:b6:50:82:9b:45:64:
54:a8:a4:4e:35:da:48:92:45:3a:ae:5a:1f:25:96:b7:3a:c9:
5f:55:a3:c0:60:02:4b:00:45:36:76:4c:73:10:32:c9:4d:f7:
21:b7:29:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znbalJEL875WC2nzBs8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh
MDBhYjMwHhcNMjUwMTMxMTAwMDU3WhcNMjUwMjAxMTAwMDU3WjAzMTEwLwYDVQQD
Eyg2OTQ1NTRlZjQ0NWU4YWMwZDZhYzljOTEyNGJiZDRhNTVlZDQyNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOb/ksFtiX4qm+VYPb0SttNefcUq
biI/b2WEaRre72fp/Rc0ciUoClQ+VnmdrxxXmHtGqO1XHZfuUW3VkDN03G+ccRrO
EXdn0mc7SAbomZJIJQGd7bN+MDuW3MRpwRV7nbqJ9H0T6OChvKP7tWX4g6XTZxiD
GpR4Wt+dQ6AMdmHfle4PVcDcsMcHYCkDO2eBfDAFtJxen2AVclvNjKItoXMYVed1
SlhOOCZjO/rU67GJIG81MmJSsBIUSu5cVniZ8mGY6mlrvLP6c2FKEFObogXxWwV+
2qWRcP+2Y4gbUTkwdQWnhaeXSBUuuMSaEVaTgdtARXkaNI6Wcj1NeEZUNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlFVO9EXorA1qyckSS71KVe1CdQMB8GA1UdIwQY
MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt
YTEwNGQyNDc3MTVmLzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm
LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWCFn+JY
y1T0ZPq4s4nGrPbVC/445m2jx3Tkh0jGQiNp+rQ9BhTFwwtJPnKY1Y961Q7DGxME
bi56loRpqEgmRKOPdFb8FhlAcjOEghtqG6HStSAbikLqMqRtytD949TJwHiBT+np
kmuizND9gOgUs/Xb8VKkf3ThvAvNfixPNIKNISqhqpM8aVFxM6KwoAVRWv3kYjts
Rs6+kjjX6O+2Qdl2ZSd0ON9PA6qaa+3ADN3xEsQAEOH2Cm8KR+HD8yHZB04sTiJS
jgd8uD8H/zbD9frGtlCCm0VkVKikTjXaSJJFOq5aHyWWtzrJX1WjwGACSwBFNnZM
cxAyyU33IbcpVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:22 2025 by rpki-client