Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: yZ8emjW2AX7rVGSuh4d4hm/f1UqpibHO2gye4FOwgu8=
Subject key identifier: 59:01:82:3B:E5:19:7F:D9:9A:D6:9E:7D:8B:D6:4F:7E:5B:1D:FD:38
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 0194BD17E395A8A349AD5B2BAE346C5EDFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 0521
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: 3FomV9lcOzzxr9wQlYU17SlSflEJwUlf9jyQUe+ePc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:95:a8:a3:49:ad:5b:2b:ae:34:6c:5e:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=5901823be5197fd99ad69e7d8bd64f7e5b1dfd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:c6:56:08:5e:5a:00:bb:fe:b4:db:da:da:
61:49:ef:04:74:70:69:a3:c5:97:2a:13:0b:d1:ae:
da:7a:d0:b6:d4:2f:ee:63:f9:a0:db:4a:aa:4c:38:
df:35:f8:9c:86:87:49:32:33:fb:4a:6c:5d:c6:f6:
d7:bb:7e:65:48:be:0b:f3:9a:41:67:a5:95:bc:ac:
61:1a:5e:37:e7:d4:4a:42:74:5c:b8:bc:3f:34:00:
39:b0:7e:17:3a:ec:8a:21:0b:c8:92:70:e1:8f:ab:
58:7e:05:3b:cd:36:08:c9:7b:64:8f:ce:73:5f:bc:
bc:f3:a0:be:03:ca:25:56:3c:3b:1c:02:bc:9b:02:
c8:5d:55:b5:51:10:13:e9:5d:87:16:f1:cd:cf:3e:
21:dd:f9:98:91:9e:37:34:2d:5d:d3:a1:cf:eb:54:
4c:98:1c:b4:5f:bf:74:34:8c:b4:c8:c8:5f:41:42:
7a:4a:39:f6:b0:fa:32:a5:3d:15:64:0f:4a:9d:ec:
ea:99:53:c6:dd:59:31:ad:96:39:99:7a:e5:e4:07:
5a:59:3f:12:74:26:e5:4f:10:a4:40:3d:57:a5:14:
e7:0b:29:11:f9:fa:21:0b:20:52:30:8f:97:26:ca:
80:1d:c9:5f:17:f6:6b:99:a0:1c:b4:dc:40:84:e1:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:82:3B:E5:19:7F:D9:9A:D6:9E:7D:8B:D6:4F:7E:5B:1D:FD:38
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:63:bb:76:80:2e:81:51:d4:dc:d5:f1:a2:55:9f:2c:39:
7a:3f:bb:ab:c9:56:d5:ed:53:6d:79:b5:1d:1e:7f:e6:ca:fd:
00:f7:3a:be:74:87:da:8d:a7:fc:1b:2c:a9:c8:33:96:99:dd:
34:9c:cd:2a:f1:c1:fb:0a:8a:3f:6f:98:07:cf:72:8b:80:09:
8b:f4:dd:9d:d5:a0:c2:db:00:12:f0:1a:11:b3:74:75:19:02:
0b:d5:11:29:fc:d0:8b:ab:20:a8:2d:ec:97:12:83:90:f9:2f:
54:78:f2:90:ab:39:36:e2:65:16:40:15:56:43:6a:95:ca:a5:
16:58:f7:d3:10:7e:7d:24:3a:ae:aa:08:0e:3f:b7:26:bf:6d:
c2:c5:9c:6b:fd:f4:e1:1e:2e:0f:7a:20:52:bc:b6:90:21:c3:
e1:7d:6a:ef:39:f6:06:95:8b:29:37:85:96:24:98:57:27:b3:
43:28:9e:d1:66:eb:65:9e:75:a3:64:50:20:55:1e:3d:f5:54:
24:6b:f1:2d:1b:a4:92:4a:16:e5:3c:88:20:3f:54:85:9f:1b:
a5:ef:b4:40:5d:0a:dc:a7:64:d6:5c:78:50:f6:4f:95:b5:10:
ed:45:79:a5:2c:1c:83:93:13:05:11:1d:08:f1:e6:39:3a:4a:
6c:e9:f9:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+OVqKNJrVsrrjRsXt/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODQ2NGNkN2Q1NjQ3ZGI1YTAzYjY2OWJkYzZiMGZmNzNi
MGRmOGEwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg1OTAxODIzYmU1MTk3ZmQ5OWFkNjllN2Q4YmQ2NGY3ZTViMWRmZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwzGVgheWgC7/rTb2tphSe8EdHBp
o8WXKhML0a7aetC21C/uY/mg20qqTDjfNfichodJMjP7SmxdxvbXu35lSL4L85pB
Z6WVvKxhGl4359RKQnRcuLw/NAA5sH4XOuyKIQvIknDhj6tYfgU7zTYIyXtkj85z
X7y886C+A8olVjw7HAK8mwLIXVW1URAT6V2HFvHNzz4h3fmYkZ43NC1d06HP61RM
mBy0X790NIy0yMhfQUJ6Sjn2sPoypT0VZA9KnezqmVPG3VkxrZY5mXrl5AdaWT8S
dCblTxCkQD1XpRTnCykR+fohCyBSMI+XJsqAHclfF/ZrmaActNxAhOEyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkBgjvlGX/ZmtaefYvWT35bHf04MB8GA1UdIwQY
MBaAFCWEZM19VkfbWgO2ab3GsP9zsN+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQt
ZDYyMzAyMmM5ZTk3LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQtZDYyMzAyMmM5ZTk3
LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG5ju3aA
LoFR1NzV8aJVnyw5ej+7q8lW1e1TbXm1HR5/5sr9APc6vnSH2o2n/Bssqcgzlpnd
NJzNKvHB+wqKP2+YB89yi4AJi/TdndWgwtsAEvAaEbN0dRkCC9URKfzQi6sgqC3s
lxKDkPkvVHjykKs5NuJlFkAVVkNqlcqlFlj30xB+fSQ6rqoIDj+3Jr9twsWca/30
4R4uD3ogUry2kCHD4X1q7zn2BpWLKTeFliSYVyezQyie0WbrZZ51o2RQIFUePfVU
JGvxLRukkkoW5TyIID9UhZ8bpe+0QF0K3Kdk1lx4UPZPlbUQ7UV5pSwcg5MTBREd
CPHmOTpKbOn5yg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:47 2025 by rpki-client