Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
File: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json)
Hash identifier: oTGrmj7wO4t//CFgTZcw0L7Lma4JFCPBaY2QYTjL0C0=
Subject key identifier: 44:77:35:B1:84:39:86:28:7B:0B:FE:11:E6:A4:04:FB:77:DE:D0:49
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Certificate issuer: /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial: 0194BD4E785831742F021C88960DAA982905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: DPsWBUTvlD7MybNUAkUQJcp8KsnLVRfhjfcDBla0fVg=)
2: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (hash: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:58:31:74:2f:02:1c:88:96:0d:aa:98:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=447735b1843986287b0bfe11e6a404fb77ded049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:e5:ab:23:7d:a9:30:a9:53:2b:10:d3:a6:
65:3c:3a:8e:93:42:e2:e5:5b:57:2a:86:b1:af:80:
7e:f3:a6:4d:f1:db:68:6c:79:d4:72:c6:76:5d:b8:
7f:d7:09:64:f6:84:e3:51:30:b1:7a:ba:1e:1a:17:
14:b9:bd:1e:55:39:01:31:28:dd:dc:37:f4:f0:a9:
97:a2:78:97:fe:48:9b:ed:ea:a0:31:07:12:2c:f2:
5a:0a:a6:d6:19:9b:b4:87:40:53:7d:6e:d0:70:35:
ae:08:67:3c:b7:14:64:38:0d:04:0d:13:8a:05:12:
e7:43:f6:08:53:6a:c0:d0:47:03:b6:06:00:fd:6a:
a9:62:34:94:c4:c4:2d:a3:f8:3a:f2:be:df:ca:39:
8a:a9:ae:39:7d:fa:97:0a:c1:d9:b9:70:1c:29:bc:
95:08:f1:b1:30:d3:7d:dd:fe:35:8e:be:16:bd:01:
e2:a3:77:93:54:82:ef:be:3a:7d:2d:f4:1e:6e:2c:
dc:e8:fd:2c:d2:aa:b2:bb:89:24:a3:20:33:24:4f:
e7:29:d5:f6:5b:8e:7c:5f:9e:98:27:02:69:7f:d5:
d8:66:37:fc:b4:15:e0:e1:d7:f2:82:e3:91:b9:e6:
6c:d0:d1:b0:58:74:40:31:fa:17:0c:15:fc:a2:bf:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:35:B1:84:39:86:28:7B:0B:FE:11:E6:A4:04:FB:77:DE:D0:49
X509v3 Authority Key Identifier:
keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:0e:ff:b9:63:97:b0:f4:42:22:65:f9:6e:81:35:56:84:
f8:60:48:22:70:86:1e:6f:73:85:43:a9:93:39:f9:a3:9e:ce:
9d:bf:2a:1f:be:fe:b9:c5:74:0d:60:82:f2:07:58:8a:d4:ca:
55:39:12:ad:6c:6e:a8:b6:79:4a:50:f3:c3:52:af:6e:4e:a9:
f0:cd:d0:43:02:68:70:2b:7e:e0:04:ad:e0:d8:0f:ce:2e:c8:
42:55:c5:33:e5:87:96:84:ee:13:fb:40:04:b4:29:08:a9:9d:
75:e9:02:35:79:af:43:8b:c5:ae:03:a9:4c:97:9f:e6:91:f5:
33:69:14:ae:a3:ed:02:99:8a:b0:59:d0:e6:73:e9:fe:3d:9d:
ae:f5:5b:31:7c:dc:3d:67:0f:da:0c:91:a1:c0:17:ef:78:50:
ca:45:00:2b:e1:e3:97:59:cd:8f:8a:1d:31:1d:37:51:1c:ed:
bc:28:a5:4b:f0:eb:4c:de:b5:f1:ad:73:0f:3c:17:6b:9b:64:
e9:f5:b8:c9:15:0e:92:27:be:ba:d6:3c:56:49:43:13:04:01:
4f:bc:5b:ed:13:7d:e6:ea:04:21:01:91:fc:78:88:42:bc:b3:
f9:f0:89:55:f9:6f:b1:30:39:6a:5e:c2:5f:e2:3b:fe:b7:0c:
52:d3:a2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnhYMXQvAhyIlg2qmCkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM2M2NmZWJiYmY5MmE1MWU0Mjg1MzNkM2U4YWQ0MTJh
YTMzNzQwHhcNMjUwMTMxMTcwMDIzWhcNMjUwMjAxMTcwMDIzWjAzMTEwLwYDVQQD
Eyg0NDc3MzViMTg0Mzk4NjI4N2IwYmZlMTFlNmE0MDRmYjc3ZGVkMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDLlqyN9qTCpUysQ06ZlPDqOk0Li
5VtXKoaxr4B+86ZN8dtobHnUcsZ2Xbh/1wlk9oTjUTCxeroeGhcUub0eVTkBMSjd
3Df08KmXoniX/kib7eqgMQcSLPJaCqbWGZu0h0BTfW7QcDWuCGc8txRkOA0EDROK
BRLnQ/YIU2rA0EcDtgYA/WqpYjSUxMQto/g68r7fyjmKqa45ffqXCsHZuXAcKbyV
CPGxMNN93f41jr4WvQHio3eTVILvvjp9LfQebizc6P0s0qqyu4kkoyAzJE/nKdX2
W458X56YJwJpf9XYZjf8tBXg4dfyguORueZs0NGwWHRAMfoXDBX8or9DkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER3NbGEOYYoewv+EeakBPt33tBJMB8GA1UdIwQY
MBaAFNCTY8/ru/kqUeQoUz0+itQSqjN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wODE2NGEtODgyMS00N2MxLWJkNDgt
NWY5ZTQ4MmYxYmY0LzEvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wODE2NGEtODgyMS00N2MxLWJkNDgtNWY5ZTQ4MmYxYmY0
LzEvMEpOanotdTctU3BSNUNoVFBUNksxQktxTTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw4O/7lj
l7D0QiJl+W6BNVaE+GBIInCGHm9zhUOpkzn5o57Onb8qH77+ucV0DWCC8gdYitTK
VTkSrWxuqLZ5SlDzw1Kvbk6p8M3QQwJocCt+4ASt4NgPzi7IQlXFM+WHloTuE/tA
BLQpCKmddekCNXmvQ4vFrgOpTJef5pH1M2kUrqPtApmKsFnQ5nPp/j2drvVbMXzc
PWcP2gyRocAX73hQykUAK+Hjl1nNj4odMR03URztvCilS/DrTN618a1zDzwXa5tk
6fW4yRUOkie+utY8VklDEwQBT7xb7RN95uoEIQGR/HiIQryz+fCJVflvsTA5al7C
X+I7/rcMUtOiPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:37 2025 by rpki-client