Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: wgCJBWS80FLL9soLZdGGIQnMIhcYnWhopC42/rBd9i4=
Subject key identifier: 36:10:40:65:8C:56:6C:0E:53:2B:47:BF:D0:A2:32:4C:30:E1:EE:66
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0194BBCE1273317B701EC34A9045809E0730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0980
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: 4on3y6SgPpsHjCplmMv44D+jgGhhaC0ypljzBox9O4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:73:31:7b:70:1e:c3:4a:90:45:80:9e:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=361040658c566c0e532b47bfd0a2324c30e1ee66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:dd:b4:d8:ad:47:93:f8:19:a0:ab:86:f8:
eb:c1:35:b5:96:68:50:61:c0:db:75:f4:8c:03:a7:
e1:14:a5:22:0b:69:9b:bc:36:d0:e5:84:db:52:5d:
1b:d6:d6:0a:24:1a:f2:5e:76:b9:91:b6:e9:d3:07:
23:c7:1d:30:a3:14:88:be:fb:0e:93:c1:2f:28:8e:
a5:66:8f:53:2b:58:67:45:4b:03:14:65:bb:05:56:
77:ab:17:86:6e:ef:2e:0e:15:d0:2f:0b:60:6c:64:
46:d3:7f:cd:ec:70:29:a5:ad:56:28:15:2d:de:04:
05:dd:28:e5:e9:17:b1:13:3a:62:53:e2:ae:c4:20:
f1:33:e7:0f:8b:f6:f5:fe:98:2d:37:0a:4f:6d:0e:
d9:f5:9c:2d:9f:a5:0d:bf:13:a9:04:6d:b0:b2:3c:
d2:ba:6b:15:4a:e5:4b:71:30:e8:9b:c7:bc:4a:f5:
f4:c5:96:40:11:ed:e2:45:91:07:5e:0a:84:ad:b7:
29:0a:8f:fb:b9:d0:5b:ec:1a:e7:e6:31:f5:03:f1:
22:2d:a1:9e:09:55:f8:f4:00:42:d1:dc:c4:a8:4d:
45:35:c9:90:b1:73:77:36:2a:40:1d:bf:f4:c5:b5:
ab:13:26:2b:76:3b:e6:63:e6:9f:0e:13:8d:7a:00:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:40:65:8C:56:6C:0E:53:2B:47:BF:D0:A2:32:4C:30:E1:EE:66
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:15:3b:6a:f3:73:de:f1:56:5e:84:1d:27:4d:60:cd:fe:ff:
1c:b3:d7:53:9c:0a:74:76:5c:55:05:41:0c:4a:d4:93:5e:76:
7f:d5:b3:c3:da:6c:d0:c9:6c:85:b4:04:47:35:52:29:7d:76:
33:af:10:a2:3b:a7:5f:23:0f:e0:6b:ff:54:b1:76:9c:4e:39:
ea:13:cb:0c:a9:78:db:6b:bc:b8:69:b1:e4:6e:bc:ea:84:36:
0f:7f:e2:22:0d:8c:c7:4f:bd:2d:b0:e8:9f:33:dd:a7:43:17:
69:83:f9:fa:a4:fa:26:03:d9:eb:08:9f:1d:60:cf:99:82:d8:
63:d9:9e:f0:3a:36:21:63:c8:6d:e5:0c:e1:df:4e:e6:22:82:
a8:48:9c:13:16:1f:c1:b7:ff:91:1e:f8:35:63:24:1f:b9:a6:
d0:3d:1d:49:de:1d:e3:35:78:1c:f9:34:41:a3:02:a9:d9:8c:
17:b3:c9:8b:fe:bd:75:a5:c3:54:82:0c:d8:17:bf:1d:f0:06:
74:1a:e3:17:ec:96:0d:cb:9e:6b:7d:25:27:db:9b:fc:c5:a9:
3d:ad:93:d4:8d:27:fd:35:f2:1b:48:f1:7a:36:f1:2e:3b:3f:
f3:68:8b:a9:58:bd:e1:1d:d1:bf:e2:00:7c:ae:92:e4:93:17:
61:98:4c:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhJzMXtwHsNKkEWAngcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0
MTVkM2UwHhcNMjUwMTMxMTAwMDMyWhcNMjUwMjAxMTAwMDMyWjAzMTEwLwYDVQQD
EygzNjEwNDA2NThjNTY2YzBlNTMyYjQ3YmZkMGEyMzI0YzMwZTFlZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQfdtNitR5P4GaCrhvjrwTW1lmhQ
YcDbdfSMA6fhFKUiC2mbvDbQ5YTbUl0b1tYKJBryXna5kbbp0wcjxx0woxSIvvsO
k8EvKI6lZo9TK1hnRUsDFGW7BVZ3qxeGbu8uDhXQLwtgbGRG03/N7HAppa1WKBUt
3gQF3Sjl6RexEzpiU+KuxCDxM+cPi/b1/pgtNwpPbQ7Z9Zwtn6UNvxOpBG2wsjzS
umsVSuVLcTDom8e8SvX0xZZAEe3iRZEHXgqErbcpCo/7udBb7Brn5jH1A/EiLaGe
CVX49ABC0dzEqE1FNcmQsXN3NipAHb/0xbWrEyYrdjvmY+afDhONegAbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYQQGWMVmwOUytHv9CiMkww4e5mMB8GA1UdIwQY
MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt
NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi
LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxU7avNz
3vFWXoQdJ01gzf7/HLPXU5wKdHZcVQVBDErUk152f9Wzw9ps0MlshbQERzVSKX12
M68QojunXyMP4Gv/VLF2nE456hPLDKl422u8uGmx5G686oQ2D3/iIg2Mx0+9LbDo
nzPdp0MXaYP5+qT6JgPZ6wifHWDPmYLYY9me8Do2IWPIbeUM4d9O5iKCqEicExYf
wbf/kR74NWMkH7mm0D0dSd4d4zV4HPk0QaMCqdmMF7PJi/69daXDVIIM2Be/HfAG
dBrjF+yWDcuea30lJ9ub/MWpPa2T1I0n/TXyG0jxejbxLjs/82iLqVi94R3Rv+IA
fK6S5JMXYZhMeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:39 2025 by rpki-client