Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: YvbwqNeAX5AOwkeSCx6pzxTi+xLpQv6YLe0xcPkGvuE=
Subject key identifier: 9F:B0:71:40:0B:3A:44:80:5E:F3:EB:56:8F:CA:01:41:94:A4:7C:24
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 0194BBCE48AEA127CE9F8E3B20C01FB1CAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 075D
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: XYq6wJJ3++LNq0DZJUnehfOoOHhlh7x+j08JI/Yj1Js=)
2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:ae:a1:27:ce:9f:8e:3b:20:c0:1f:b1:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=9fb071400b3a44805ef3eb568fca014194a47c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:a8:fd:94:f3:ea:5d:68:8d:1c:56:d2:ae:
78:94:35:1c:c8:e0:2b:24:ac:82:44:2a:12:f2:36:
0e:e5:d6:ec:b6:7f:50:f4:d5:27:67:ba:44:11:42:
ec:5f:cb:b5:b4:61:aa:e8:9e:ca:07:b5:d6:39:01:
38:6f:11:1b:6d:fc:1f:19:5f:b4:15:4a:6e:69:19:
2d:ce:17:92:50:23:62:e6:c2:88:73:ab:44:23:e5:
08:2c:1e:f8:5d:75:fb:7b:6a:4a:14:dc:d6:dd:82:
6d:c8:b2:4f:10:d0:c0:c9:e8:f1:c9:cb:4b:f5:d3:
1c:c9:97:8a:c8:3d:4b:09:1f:11:36:ad:06:60:20:
52:29:91:52:f2:64:91:4a:9f:98:28:d1:56:77:5a:
97:a2:20:b7:1b:3b:c9:4a:60:8b:ec:4d:c9:94:ab:
42:4f:01:b3:a8:aa:8a:2b:ca:05:eb:5c:6e:62:b0:
ae:40:9c:f8:d0:90:19:d0:ab:4f:3f:9b:ac:0b:db:
0a:81:8a:ee:50:3b:ab:22:4a:10:4a:c0:44:08:35:
31:25:60:20:e7:4d:29:c0:a3:2f:15:11:b8:d3:8d:
1c:a8:f4:44:dd:7f:f9:03:89:9a:c9:b4:80:89:1b:
71:73:5d:6a:3f:49:5a:3a:ad:d6:de:6d:e3:17:49:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:71:40:0B:3A:44:80:5E:F3:EB:56:8F:CA:01:41:94:A4:7C:24
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:06:03:92:51:a5:0b:d8:d6:ce:31:76:46:bb:0b:84:a4:
ec:6b:ba:e1:35:35:3e:02:ef:ed:cd:55:7d:06:da:9e:9e:8f:
30:db:1a:20:bf:60:06:fb:65:e1:6f:ec:6b:e2:66:4a:54:3e:
59:a1:a0:1f:9a:74:db:fa:b2:e6:3e:82:3f:7a:d0:24:81:23:
61:b9:ba:aa:7c:25:82:98:34:c2:78:3c:ff:8a:c4:e8:33:ad:
95:7d:21:93:d7:95:d8:fe:b1:e2:5e:1c:d6:19:f0:e1:f9:4f:
33:62:18:cb:f2:69:a4:2d:3d:c9:0b:8d:10:b9:fe:16:a1:8e:
b7:e7:03:94:60:ad:08:dc:f0:57:9f:e5:4a:6f:6d:2a:e3:b9:
8b:fc:bb:7b:50:68:60:4e:d1:7f:a4:f0:7f:1a:05:96:f7:55:
0b:b4:03:d0:4a:90:e6:0a:27:34:f5:7a:dc:e8:2f:a2:89:14:
a5:1e:db:b7:9d:b4:5d:53:6c:b2:8c:0f:ce:25:89:47:88:f3:
ed:86:f2:80:bc:6b:ab:10:a7:a6:0e:65:b6:60:a1:e0:d5:d5:
fa:19:4a:d8:c4:7b:9a:17:d6:04:58:3a:71:85:f2:8d:be:eb:
e6:d9:8f:a0:40:1c:c2:69:9f:9e:c2:95:b5:85:3c:ff:a1:78:
da:7e:b4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkiuoSfOn447IMAfscrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWJlNjdiMjFkMzIzYjJiMmI0NDJjNmIwNmFlMzJjYzI4
MDM1OGQwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZmIwNzE0MDBiM2E0NDgwNWVmM2ViNTY4ZmNhMDE0MTk0YTQ3YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqmo/ZTz6l1ojRxW0q54lDUcyOAr
JKyCRCoS8jYO5dbstn9Q9NUnZ7pEEULsX8u1tGGq6J7KB7XWOQE4bxEbbfwfGV+0
FUpuaRktzheSUCNi5sKIc6tEI+UILB74XXX7e2pKFNzW3YJtyLJPENDAyejxyctL
9dMcyZeKyD1LCR8RNq0GYCBSKZFS8mSRSp+YKNFWd1qXoiC3GzvJSmCL7E3JlKtC
TwGzqKqKK8oF61xuYrCuQJz40JAZ0KtPP5usC9sKgYruUDurIkoQSsBECDUxJWAg
500pwKMvFRG4040cqPRE3X/5A4maybSAiRtxc11qP0laOq3W3m3jF0nFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+wcUALOkSAXvPrVo/KAUGUpHwkMB8GA1UdIwQY
MBaAFCWr5nsh0yOysrRCxrBq4yzCgDWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjIt
NzIxOGEzMTc5MGYzLzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjItNzIxOGEzMTc5MGYz
LzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyEGA5JR
pQvY1s4xdka7C4Sk7Gu64TU1PgLv7c1VfQbanp6PMNsaIL9gBvtl4W/sa+JmSlQ+
WaGgH5p02/qy5j6CP3rQJIEjYbm6qnwlgpg0wng8/4rE6DOtlX0hk9eV2P6x4l4c
1hnw4flPM2IYy/JppC09yQuNELn+FqGOt+cDlGCtCNzwV5/lSm9tKuO5i/y7e1Bo
YE7Rf6TwfxoFlvdVC7QD0EqQ5gonNPV63OgvookUpR7bt520XVNssowPziWJR4jz
7YbygLxrqxCnpg5ltmCh4NXV+hlK2MR7mhfWBFg6cYXyjb7r5tmPoEAcwmmfnsKV
tYU8/6F42n604A==
-----END CERTIFICATE-----
Generated at Tue May 13 17:44:25 2025 by rpki-client