Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File: JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier: tbhGHXNRVJMbXKKSlBPg7vjFZfyflnuNwWbBbn4bPjo=
Subject key identifier: 60:54:90:3B:7A:F3:55:E4:D2:86:F6:DA:03:74:62:D6:E6:23:1B:55
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer: /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial: 0194BC72B167EAE27F2651C53A5C9702F82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: RRmYWwfJ1GTYwFKjCCYNIgamCMC3nI4mDNh4ljBPJBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:67:ea:e2:7f:26:51:c5:3a:5c:97:02:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=6054903b7af355e4d286f6da037462d6e6231b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:6d:3e:61:1b:36:57:1f:82:fa:6b:9b:8c:
2d:0e:ae:3c:9a:bc:44:77:4d:46:77:5a:6f:39:99:
0e:a6:6f:73:52:97:5d:a5:83:8c:70:db:d7:37:8a:
db:2f:8b:21:9d:9d:cb:d5:70:0e:d9:52:47:65:63:
de:d4:ca:73:09:28:31:a7:62:ca:74:8a:03:63:04:
66:c9:db:b8:c3:89:43:af:89:d0:dc:d4:fb:8d:e2:
97:82:4e:02:6a:bf:29:af:65:dc:57:e9:e8:1e:6b:
ee:a3:6c:39:aa:6e:a4:54:f3:16:36:28:2a:ea:86:
9f:5d:66:cc:a0:0d:91:74:9d:a1:cb:de:77:be:0c:
0c:b1:64:b4:77:b5:bd:b0:f9:81:dd:45:b7:17:00:
87:f2:11:44:0b:2d:d7:41:47:ca:3f:47:d6:52:a9:
be:29:f6:89:35:60:09:12:cb:42:1c:2e:76:e1:d5:
ab:12:98:bd:79:b8:84:7b:35:7b:57:d9:86:69:db:
bc:25:f7:eb:5a:4d:67:2e:2f:8f:1c:f5:ab:fb:8a:
0b:c2:c9:78:c3:d3:19:3d:09:b0:78:07:2d:e6:82:
c8:38:32:ca:85:fb:db:9d:31:93:91:e3:da:62:19:
ad:84:0b:0b:4c:51:a0:5f:fc:8d:c5:44:83:80:02:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:90:3B:7A:F3:55:E4:D2:86:F6:DA:03:74:62:D6:E6:23:1B:55
X509v3 Authority Key Identifier:
keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:94:fd:93:0c:3a:36:6c:3e:59:73:58:4e:6a:01:a8:52:c8:
aa:b9:77:c5:8f:7a:c3:7c:cd:b3:33:62:2b:63:50:45:17:17:
04:64:b7:10:18:3c:7b:27:95:00:1c:61:f7:76:58:f6:14:11:
8a:56:86:82:0b:ab:c3:4f:c1:e6:d1:71:27:bf:3a:2a:68:7a:
30:66:41:4f:3a:61:ff:45:a6:d3:67:54:66:e9:82:62:f1:aa:
f6:7c:fe:b2:78:f2:01:44:a3:be:99:d2:3c:ca:47:15:20:a7:
15:8f:4f:38:3d:60:22:19:b1:69:83:05:77:93:19:0d:2a:0c:
27:49:6b:b6:2b:77:09:c5:86:82:6d:99:6c:13:72:33:37:04:
4f:82:96:9e:38:e7:b3:a3:9f:a6:15:56:d8:e9:e5:62:60:d0:
32:94:da:56:78:35:ba:cf:5f:69:4d:cb:15:cc:ae:88:04:01:
04:8f:17:b3:d5:6a:ad:41:08:ca:21:92:eb:ec:a2:28:96:53:
a3:6b:d5:43:81:fd:0d:d1:56:11:60:40:1a:b7:e8:0e:3c:9b:
0f:54:23:fa:d7:23:ee:d2:fb:6b:12:a5:96:88:b7:34:cf:91:
b1:9b:2f:5d:68:c4:92:27:ca:10:31:9f:16:7b:4c:77:fc:9f:
af:d6:65:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crFn6uJ/JlHFOlyXAvgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDIyYWU3ZDQxMjNkYzdiZjI4OGYxMzc5ZTQzN2Y2ZTFj
YjJhOWEwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
Eyg2MDU0OTAzYjdhZjM1NWU0ZDI4NmY2ZGEwMzc0NjJkNmU2MjMxYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXBtPmEbNlcfgvprm4wtDq48mrxE
d01Gd1pvOZkOpm9zUpddpYOMcNvXN4rbL4shnZ3L1XAO2VJHZWPe1MpzCSgxp2LK
dIoDYwRmydu4w4lDr4nQ3NT7jeKXgk4Car8pr2XcV+noHmvuo2w5qm6kVPMWNigq
6oafXWbMoA2RdJ2hy953vgwMsWS0d7W9sPmB3UW3FwCH8hFECy3XQUfKP0fWUqm+
KfaJNWAJEstCHC524dWrEpi9ebiEezV7V9mGadu8JffrWk1nLi+PHPWr+4oLwsl4
w9MZPQmweAct5oLIODLKhfvbnTGTkePaYhmthAsLTFGgX/yNxUSDgAIWgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBUkDt681Xk0ob22gN0YtbmIxtVMB8GA1UdIwQY
MBaAFCVCKufUEj3HvyiPE3nkN/bhyyqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83YmRkNzEtMTU1My00N2U0LWFhMDAt
ZmFhNmJlY2RhZjA1LzEvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS83YmRkNzEtMTU1My00N2U0LWFhMDAtZmFhNmJlY2RhZjA1
LzEvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZT9kww6
Nmw+WXNYTmoBqFLIqrl3xY96w3zNszNiK2NQRRcXBGS3EBg8eyeVABxh93ZY9hQR
ilaGggurw0/B5tFxJ786Kmh6MGZBTzph/0Wm02dUZumCYvGq9nz+snjyAUSjvpnS
PMpHFSCnFY9POD1gIhmxaYMFd5MZDSoMJ0lrtit3CcWGgm2ZbBNyMzcET4KWnjjn
s6OfphVW2OnlYmDQMpTaVng1us9faU3LFcyuiAQBBI8Xs9VqrUEIyiGS6+yiKJZT
o2vVQ4H9DdFWEWBAGrfoDjybD1Qj+tcj7tL7axKlloi3NM+RsZsvXWjEkifKEDGf
FntMd/yfr9ZlCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:22 2025 by rpki-client