Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: p+T16KazFfbQF8wjzVsaHBBX2SDd/6WWa8YZll7FT/w=
Subject key identifier: BA:E6:4E:AE:7A:69:1A:B7:1A:C0:38:E9:2C:3B:3C:FB:B5:BD:66:84
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 0194BD4E7205516787EFAE722A2F0141A1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 04EF
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: DgjFWJIBX8y1ncssqkbdW81uoiI.roa (hash: OY/CaDzEd9lidEEYQxzAb4fZAC1my1A5QmXbAVprDmk=)
2: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: JQrqhEnL/61khAWpz1mJ8Kw9AvhvMfOc8X52MFlMINY=)
3: pun04S8PJLiec3KmUI5nMW8lD_A.roa (hash: 6Tumawphhj8GgdSPIhoUdOCLjbhHz3FfGCu5o7Kmg20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:05:51:67:87:ef:ae:72:2a:2f:01:41:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=bae64eae7a691ab71ac038e92c3b3cfbb5bd6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:46:91:86:8d:c0:dd:09:43:79:8a:44:82:
ea:35:1b:2c:9c:b6:1b:b7:09:51:5d:f5:bf:74:cf:
4f:06:39:df:c2:f6:8f:0c:88:ea:87:c6:88:2a:2f:
05:46:ed:77:51:8a:a1:5a:65:6e:a7:ba:f1:77:5d:
b2:a7:34:52:ac:28:46:cc:4e:4c:98:7b:6e:c0:fc:
a4:9c:92:06:0d:6b:ef:81:dc:01:81:e5:eb:67:4e:
02:44:df:ca:6d:1a:38:98:37:c5:2e:a4:63:b2:d9:
f9:2e:48:b8:52:83:b8:7d:6d:b1:9a:b0:20:dd:b3:
62:03:81:df:6f:9c:6c:61:2d:1f:d6:d7:17:fb:b1:
a4:69:78:26:c4:68:90:f6:9e:6a:bf:72:9e:1a:e3:
fa:9e:e4:a8:1b:df:6d:db:d7:e7:06:e0:7d:51:40:
30:b1:37:e4:41:cf:51:9a:38:ca:c3:cc:a2:66:bc:
41:ec:36:cc:e5:e3:39:b7:b7:6b:fa:c9:df:c4:ea:
64:e9:7a:8a:14:96:74:ad:3b:d5:0f:1d:4d:c0:47:
b4:45:fb:63:57:43:f8:5e:68:1d:f4:29:07:38:6f:
f4:3e:0f:78:df:5c:99:f5:0d:ef:50:5f:f5:2a:14:
80:28:df:28:6e:ea:20:7f:54:d1:5b:ff:be:0f:8e:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:4E:AE:7A:69:1A:B7:1A:C0:38:E9:2C:3B:3C:FB:B5:BD:66:84
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:f2:b3:21:de:f7:2f:fa:a4:88:9c:86:e4:39:21:88:0d:
83:41:2b:f5:a5:f3:dc:b4:f0:e4:3d:1f:ee:06:fa:f1:95:a8:
69:50:3b:be:50:f8:08:7c:0f:7e:88:6a:f5:f2:87:8d:9e:55:
79:6b:75:2c:9b:15:b7:d0:0c:a3:46:f2:42:57:86:dc:a3:70:
29:1a:1d:a7:58:32:a8:0f:59:f1:8d:66:ee:22:94:43:fa:ef:
2f:01:21:92:2a:8e:61:52:5d:6f:7b:09:33:1e:3d:bf:fc:a3:
f3:d7:46:11:7b:4c:a7:d8:85:34:ef:a8:21:11:e1:8a:c0:0f:
ec:92:3b:92:ea:3b:7e:2d:de:af:67:72:33:1c:41:c1:bf:43:
f4:63:20:db:72:65:cb:7c:8e:99:1d:ea:92:bf:a2:bd:c5:9e:
94:ef:d1:bf:41:79:7c:04:d8:d2:93:5b:c1:d0:fc:3f:c7:78:
87:63:0c:d6:ef:56:f3:51:b6:c3:2e:9d:7f:d1:23:54:12:a9:
eb:d7:a0:0a:b7:38:0b:3e:cd:3a:1c:89:84:f8:cd:93:d0:a6:
30:ce:3c:f4:17:de:e0:6a:0b:79:bf:56:14:a9:9f:69:00:33:
cc:61:64:5e:05:f7:bf:7d:84:71:ec:e3:5e:70:4d:e9:58:ea:
f8:c6:c5:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnIFUWeH765yKi8BQaHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjhjNDcxZTgzYjE0ZmM2YzZjYzdjZmM5NmMxYWMzZTMw
ODdlYWUwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
EyhiYWU2NGVhZTdhNjkxYWI3MWFjMDM4ZTkyYzNiM2NmYmI1YmQ2Njg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspFGkYaNwN0JQ3mKRILqNRssnLYb
twlRXfW/dM9PBjnfwvaPDIjqh8aIKi8FRu13UYqhWmVup7rxd12ypzRSrChGzE5M
mHtuwPyknJIGDWvvgdwBgeXrZ04CRN/KbRo4mDfFLqRjstn5Lki4UoO4fW2xmrAg
3bNiA4Hfb5xsYS0f1tcX+7GkaXgmxGiQ9p5qv3KeGuP6nuSoG99t29fnBuB9UUAw
sTfkQc9RmjjKw8yiZrxB7DbM5eM5t7dr+snfxOpk6XqKFJZ0rTvVDx1NwEe0Rftj
V0P4Xmgd9CkHOG/0Pg9431yZ9Q3vUF/1KhSAKN8obuogf1TRW/++D44gWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrmTq56aRq3GsA46Sw7PPu1vWaEMB8GA1UdIwQY
MBaAFI74xHHoOxT8bGzHz8lsGsPjCH6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEt
MTM4YTcxMTdkZTM2LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEtMTM4YTcxMTdkZTM2
LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbbysyHe
9y/6pIichuQ5IYgNg0Er9aXz3LTw5D0f7gb68ZWoaVA7vlD4CHwPfohq9fKHjZ5V
eWt1LJsVt9AMo0byQleG3KNwKRodp1gyqA9Z8Y1m7iKUQ/rvLwEhkiqOYVJdb3sJ
Mx49v/yj89dGEXtMp9iFNO+oIRHhisAP7JI7kuo7fi3er2dyMxxBwb9D9GMg23Jl
y3yOmR3qkr+ivcWelO/Rv0F5fATY0pNbwdD8P8d4h2MM1u9W81G2wy6df9EjVBKp
69egCrc4Cz7NOhyJhPjNk9CmMM489Bfe4GoLeb9WFKmfaQAzzGFkXgX3v32Ecezj
XnBN6Vjq+MbFnA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:45 2025 by rpki-client