Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: WVOA1Smrveg3jeHzthxny7voWhVc1fhhK43d1gy/niE=
Subject key identifier: 9A:2C:B4:F1:64:59:E8:4A:19:BF:C8:B4:FC:C8:E0:47:72:DD:03:3F
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 0194BBCE2AB4432ADD40E559362CBD02BECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: DjWmpy6qZB80nKef9Bef/+LA3Ie0HOpBsl6o0FBrXC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:b4:43:2a:dd:40:e5:59:36:2c:bd:02:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=9a2cb4f16459e84a19bfc8b4fcc8e04772dd033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:ab:5b:7a:df:d5:f8:0a:72:d2:fb:05:74:
b8:72:40:57:7e:56:a2:6f:71:c1:eb:53:7f:df:92:
d0:a5:59:b6:0e:af:13:0b:da:75:18:0b:77:7e:ea:
cd:75:2d:7d:6e:57:b9:b6:67:fb:6e:4a:a8:b1:6b:
1c:16:ab:b2:da:28:25:32:19:fe:c3:0d:76:66:a3:
14:a3:64:14:01:a3:5e:55:93:23:b6:c5:db:1a:b3:
6b:b7:06:d2:c9:ef:9b:61:77:31:bb:24:dd:02:b4:
cd:08:d7:26:be:fe:49:c4:3f:ca:4c:25:49:18:36:
a2:15:5c:5e:54:29:3c:f4:34:bc:46:b6:28:9a:15:
98:84:77:a5:a5:fc:c7:0d:0a:19:9c:a8:2b:bb:c0:
9a:d8:b6:40:a1:e5:f8:a1:b5:f2:43:ee:22:4b:5b:
c1:4a:7c:76:0b:87:7d:e2:fd:95:b7:74:15:0b:85:
dc:87:cb:30:68:0a:d9:ba:40:02:60:d4:ee:dd:01:
16:15:91:c7:4f:55:c5:6f:cf:46:9e:b1:58:f6:59:
7d:0c:56:39:7b:18:9f:8e:4b:35:fa:88:fd:7a:8d:
ee:e9:5c:50:87:8b:cd:36:2a:b9:52:4f:b8:96:de:
34:09:81:5d:2f:78:0a:49:74:81:af:17:ed:ba:89:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:B4:F1:64:59:E8:4A:19:BF:C8:B4:FC:C8:E0:47:72:DD:03:3F
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:79:ef:b9:4f:9e:5b:cd:cc:2a:ab:93:0b:ca:80:05:dc:87:
da:57:ca:8d:0b:67:32:80:7e:a4:84:56:6f:a4:85:18:5e:e6:
3c:c8:8b:05:27:74:f4:86:e0:0b:fc:de:66:35:4c:5b:c9:45:
7f:c6:59:e2:1e:39:f3:c2:46:f2:81:87:1f:22:b6:b7:3d:6d:
a4:f0:b8:ba:f4:ef:d0:d5:de:56:8a:6e:72:ee:4c:86:2b:62:
ab:fd:ba:54:9b:ce:03:4b:46:5b:0a:04:7f:f1:3d:24:dc:36:
2d:de:b4:34:1d:bf:34:94:5b:50:f8:67:8c:4a:54:7f:cb:b6:
ce:4d:ac:35:6b:ba:0a:25:a1:6a:9f:22:fc:49:ca:5b:cb:5f:
a3:8f:e5:31:3b:e8:79:da:84:e4:20:a2:09:16:05:1f:7f:c8:
39:96:e3:71:80:2f:29:e4:f1:f6:1e:fa:76:32:6e:4d:21:2b:
32:de:b7:c6:15:90:6c:43:99:88:73:73:15:fe:99:0b:98:f6:
9b:2b:cb:d0:e2:e5:5f:0d:46:2e:4a:28:d7:36:12:7d:b5:4a:
1d:50:78:f3:cb:33:30:f0:25:6b:df:93:0e:e1:1f:b3:4e:6e:
f7:fa:ae:66:ba:f7:68:cd:69:51:1b:4c:a4:aa:89:05:4b:70:
ab:be:86:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziq0QyrdQOVZNiy9Ar7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm
MTM0MGMwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
Eyg5YTJjYjRmMTY0NTllODRhMTliZmM4YjRmY2M4ZTA0NzcyZGQwMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8SrW3rf1fgKctL7BXS4ckBXflai
b3HB61N/35LQpVm2Dq8TC9p1GAt3furNdS19ble5tmf7bkqosWscFquy2iglMhn+
ww12ZqMUo2QUAaNeVZMjtsXbGrNrtwbSye+bYXcxuyTdArTNCNcmvv5JxD/KTCVJ
GDaiFVxeVCk89DS8RrYomhWYhHelpfzHDQoZnKgru8Ca2LZAoeX4obXyQ+4iS1vB
Snx2C4d94v2Vt3QVC4Xch8swaArZukACYNTu3QEWFZHHT1XFb89GnrFY9ll9DFY5
exifjks1+oj9eo3u6VxQh4vNNiq5Uk+4lt40CYFdL3gKSXSBrxftuol1ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJostPFkWehKGb/ItPzI4Edy3QM/MB8GA1UdIwQY
MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt
YjdjOTlkZGFjNzAzLzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz
LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXnvuU+e
W83MKquTC8qABdyH2lfKjQtnMoB+pIRWb6SFGF7mPMiLBSd09IbgC/zeZjVMW8lF
f8ZZ4h4588JG8oGHHyK2tz1tpPC4uvTv0NXeVopucu5Mhitiq/26VJvOA0tGWwoE
f/E9JNw2Ld60NB2/NJRbUPhnjEpUf8u2zk2sNWu6CiWhap8i/EnKW8tfo4/lMTvo
edqE5CCiCRYFH3/IOZbjcYAvKeTx9h76djJuTSErMt63xhWQbEOZiHNzFf6ZC5j2
myvL0OLlXw1GLkoo1zYSfbVKHVB488szMPAla9+TDuEfs05u9/quZrr3aM1pURtM
pKqJBUtwq76GyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:16:01 2025 by rpki-client