Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: Sy0G3ZjFdE/w6oEl04zmNds1SIxi9z3DRWReU3mpUfI=
Subject key identifier: 2D:46:58:2F:78:5F:34:08:F6:7B:EB:9D:EE:4F:15:FB:3C:33:63:DB
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 0194BBCE8C4FF9D514A6465129F46391889B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: 4pRTPKnmmMCx1j5H6DfzJ52uTVg2mL0oF8Mz4V783iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:4f:f9:d5:14:a6:46:51:29:f4:63:91:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=2d46582f785f3408f67beb9dee4f15fb3c3363db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:8c:8a:c8:e6:ea:13:93:91:df:9a:3b:78:
37:b8:c5:8b:35:47:1f:67:25:ad:dc:32:ff:66:06:
25:31:5d:ce:be:2c:7e:1a:60:79:aa:5a:a6:ce:c7:
a1:fe:db:8c:4f:e5:99:6a:bb:cd:4d:c4:99:2f:26:
f5:32:81:43:ac:05:43:93:b7:3a:c6:69:82:02:2c:
fd:3f:13:19:49:ff:1e:70:6c:83:6a:42:0b:7c:78:
2b:e9:30:61:ef:72:f7:17:4b:2f:14:d9:e5:4e:60:
07:8d:1c:94:32:dc:ec:65:b0:45:d5:e7:20:5b:b8:
05:bc:8b:24:6b:46:a1:57:69:10:f8:0e:09:ac:0d:
8b:3b:0e:7a:0f:dd:59:42:75:ab:cf:ef:2a:70:f0:
68:97:5a:a6:7b:78:82:55:d4:ff:cb:d3:bd:74:ad:
a6:3a:78:6c:73:5d:5a:fd:31:41:48:3b:0e:39:0c:
cb:ef:bf:52:24:31:e6:9e:ef:21:1c:6d:8f:15:35:
32:f6:9f:bb:86:ab:b8:e5:15:61:ae:ad:cb:20:49:
20:6a:57:4b:7b:ed:ea:22:f3:dc:f4:07:64:7b:bb:
06:78:92:5b:94:e0:1c:e9:d5:60:3f:58:4c:e4:91:
2a:6e:f4:75:72:10:2c:42:95:a8:2f:b1:18:95:35:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:58:2F:78:5F:34:08:F6:7B:EB:9D:EE:4F:15:FB:3C:33:63:DB
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:d1:9c:02:a3:25:fd:d9:2d:89:95:43:70:af:ed:c8:9f:
1d:41:c4:a6:a1:93:31:2c:51:a1:84:3d:3c:12:d8:9d:7b:1b:
42:4b:da:6a:05:0a:8b:df:22:be:83:f5:53:b5:3c:34:d0:f2:
f6:86:4c:16:14:d5:43:98:72:0c:16:93:ea:4c:14:1e:36:7c:
d5:0e:97:17:69:20:3e:0f:fd:a7:9d:3b:b2:84:a8:1d:c2:e6:
04:a8:fc:bb:23:be:be:59:aa:f6:46:40:52:cf:2d:ad:2b:1d:
25:2f:e8:d4:63:7f:1b:40:72:2b:68:b2:7a:e8:ab:d3:b6:34:
d9:ae:ec:db:eb:9b:bd:a4:3f:9f:29:c3:ae:98:dc:cf:16:96:
60:c1:16:e4:49:ab:53:5a:20:e6:63:83:52:62:ce:bf:af:0f:
e6:84:3d:5c:3f:c0:df:83:2a:15:c3:28:c9:61:65:da:01:96:
83:7f:f7:a3:e2:71:11:aa:68:e9:f6:2b:a2:9f:f3:48:a8:11:
08:51:cd:b9:e7:2c:e6:f7:3e:bd:b3:99:c9:0c:2a:77:bc:ac:
ed:28:4f:ec:39:73:db:32:7e:5a:c0:e8:9b:7d:2f:c9:e7:01:
ba:65:fd:96:e9:4f:02:d2:d6:4f:d5:7c:98:44:27:1f:59:ed:
df:d3:8d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoxP+dUUpkZRKfRjkYibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx
NzQyZjUwHhcNMjUwMTMxMTAwMTAzWhcNMjUwMjAxMTAwMTAzWjAzMTEwLwYDVQQD
EygyZDQ2NTgyZjc4NWYzNDA4ZjY3YmViOWRlZTRmMTVmYjNjMzM2M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW2Misjm6hOTkd+aO3g3uMWLNUcf
ZyWt3DL/ZgYlMV3Ovix+GmB5qlqmzseh/tuMT+WZarvNTcSZLyb1MoFDrAVDk7c6
xmmCAiz9PxMZSf8ecGyDakILfHgr6TBh73L3F0svFNnlTmAHjRyUMtzsZbBF1ecg
W7gFvIska0ahV2kQ+A4JrA2LOw56D91ZQnWrz+8qcPBol1qme3iCVdT/y9O9dK2m
Onhsc11a/TFBSDsOOQzL779SJDHmnu8hHG2PFTUy9p+7hqu45RVhrq3LIEkgaldL
e+3qIvPc9Adke7sGeJJblOAc6dVgP1hM5JEqbvR1chAsQpWoL7EYlTXxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1GWC94XzQI9nvrne5PFfs8M2PbMB8GA1UdIwQY
MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt
YWZkMjcyZGQwZmI1LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1
LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRjRnAKj
Jf3ZLYmVQ3Cv7cifHUHEpqGTMSxRoYQ9PBLYnXsbQkvaagUKi98ivoP1U7U8NNDy
9oZMFhTVQ5hyDBaT6kwUHjZ81Q6XF2kgPg/9p507soSoHcLmBKj8uyO+vlmq9kZA
Us8trSsdJS/o1GN/G0ByK2iyeuir07Y02a7s2+ubvaQ/nynDrpjczxaWYMEW5Emr
U1og5mODUmLOv68P5oQ9XD/A34MqFcMoyWFl2gGWg3/3o+JxEapo6fYrop/zSKgR
CFHNuecs5vc+vbOZyQwqd7ys7ShP7Dlz2zJ+WsDom30vyecBumX9lulPAtLWT9V8
mEQnH1nt39ONUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client