Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: RrEFjwT7oh3iQYtDmUppc2YBQ0125r57ZYrqpS2MdyA=
Subject key identifier: 60:2B:33:E7:B6:33:2E:D7:85:02:63:CF:17:05:AA:CF:E1:98:AA:16
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 0194BD4EB7E450F3B5E45F4E6742DEE05C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 1401
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: Y6Ey/R/zHvbHHbYBx2ccsmO+2npg7MgY9+jQcfn/s0o=)
2: sQUp-AbS_KxkGCffMeLCbixURSE.roa (hash: pCvwu2+e0TI/6BJxpMcxOzTCXPwA7YINyMnHTgFQvmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:e4:50:f3:b5:e4:5f:4e:67:42:de:e0:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=602b33e7b6332ed7850263cf1705aacfe198aa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:b1:c3:c3:b5:21:ae:1f:5c:64:e9:7e:9c:
fc:94:9d:08:f5:07:b3:64:8d:d6:c4:68:f7:9f:16:
c0:be:55:a0:56:5c:6f:85:4f:92:ce:37:c3:a3:00:
74:b4:f4:40:a8:7e:45:3e:66:2c:85:86:e7:4e:24:
90:8b:41:b1:b9:b7:d1:72:3f:35:a0:57:10:15:95:
5f:17:35:7b:d6:69:fe:f3:69:f4:9b:d9:e9:47:9c:
ee:8e:8f:59:0d:92:9a:c2:bd:db:8d:cd:e9:24:87:
62:41:f5:4a:e1:b3:27:97:84:07:e5:8a:d1:75:05:
b4:23:1a:b8:0e:7c:44:c9:ea:58:9d:a2:74:98:ef:
bb:8f:5c:5f:d2:fe:51:53:13:f0:25:fd:7c:02:d1:
a7:36:36:49:f2:2e:54:02:11:d4:b4:da:ac:6c:e8:
ab:f6:68:e7:47:aa:07:05:1b:e0:52:df:a7:a7:15:
6c:1a:d5:6a:c9:95:f4:2d:7d:5a:3c:3c:4f:09:74:
f0:c2:75:2f:e9:12:06:e3:cd:e2:e3:3b:09:95:3f:
29:48:45:81:92:f0:2e:76:c4:b4:ff:0b:08:18:72:
3e:30:5e:48:98:8e:e0:ae:b2:96:fd:7f:cf:82:29:
6f:7f:dd:91:b5:93:41:07:42:06:9e:42:8d:45:31:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:33:E7:B6:33:2E:D7:85:02:63:CF:17:05:AA:CF:E1:98:AA:16
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:db:5f:2d:b3:bf:66:32:78:cf:4f:98:22:e7:03:61:a4:a1:
c6:56:5d:46:b6:15:51:9b:5a:7f:16:13:0f:d8:55:69:10:87:
c2:2f:e7:73:8d:d0:01:3a:62:e4:f5:d7:84:a6:e0:ae:cb:00:
6f:b2:68:a3:c5:eb:f4:61:f0:94:4f:87:52:d7:9b:57:91:d7:
4e:da:ec:2a:04:37:53:a1:38:fa:ae:78:44:a4:45:9a:fc:00:
48:b4:13:87:a9:92:55:ce:57:a7:ad:b5:62:29:3a:8e:fb:91:
39:e4:4a:e7:d7:c4:47:81:8a:ce:ba:b4:e2:9e:4f:81:7f:7f:
f3:bc:b5:2d:14:a9:d8:c7:71:c9:26:8d:85:78:3a:25:50:62:
2c:51:1f:4c:f9:d9:c5:98:60:58:65:68:bd:25:9e:cf:40:a8:
27:03:24:19:d0:4f:77:c9:3a:a9:5b:bc:1f:04:da:b7:97:c1:
f1:2b:6b:9d:8c:78:ec:3f:4e:1c:75:d7:48:7c:dd:44:43:e4:
d5:3e:4e:06:55:3a:f8:71:cc:b1:3d:85:1d:a8:8d:24:45:6f:
18:1e:f5:8b:c7:3a:4a:f6:fd:5f:ad:4c:5d:29:74:da:08:7e:
ff:2c:99:c3:f9:56:45:d9:4a:33:72:f5:ec:ec:04:fe:4d:4a:
e7:42:ae:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrfkUPO15F9OZ0Le4FwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjA4NmY0ODI0MjY2Mzg0ZTA3OGNmNzc3Mzc1ZjIxYmQz
NzBiNzAwHhcNMjUwMTMxMTcwMDQwWhcNMjUwMjAxMTcwMDQwWjAzMTEwLwYDVQQD
Eyg2MDJiMzNlN2I2MzMyZWQ3ODUwMjYzY2YxNzA1YWFjZmUxOThhYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9axw8O1Ia4fXGTpfpz8lJ0I9Qez
ZI3WxGj3nxbAvlWgVlxvhU+SzjfDowB0tPRAqH5FPmYshYbnTiSQi0GxubfRcj81
oFcQFZVfFzV71mn+82n0m9npR5zujo9ZDZKawr3bjc3pJIdiQfVK4bMnl4QH5YrR
dQW0Ixq4DnxEyepYnaJ0mO+7j1xf0v5RUxPwJf18AtGnNjZJ8i5UAhHUtNqsbOir
9mjnR6oHBRvgUt+npxVsGtVqyZX0LX1aPDxPCXTwwnUv6RIG483i4zsJlT8pSEWB
kvAudsS0/wsIGHI+MF5ImI7grrKW/X/Pgilvf92RtZNBB0IGnkKNRTEakwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGArM+e2My7XhQJjzxcFqs/hmKoWMB8GA1UdIwQY
MBaAFCSwhvSCQmY4TgeM93c3XyG9NwtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZTEzOGYtNWU2My00Y2M0LThlNzUt
ZGVjYjE4OGEwMDBkLzEvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZTEzOGYtNWU2My00Y2M0LThlNzUtZGVjYjE4OGEwMDBk
LzEvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdtfLbO/
ZjJ4z0+YIucDYaShxlZdRrYVUZtafxYTD9hVaRCHwi/nc43QATpi5PXXhKbgrssA
b7Joo8Xr9GHwlE+HUtebV5HXTtrsKgQ3U6E4+q54RKRFmvwASLQTh6mSVc5Xp621
Yik6jvuROeRK59fER4GKzrq04p5PgX9/87y1LRSp2MdxySaNhXg6JVBiLFEfTPnZ
xZhgWGVovSWez0CoJwMkGdBPd8k6qVu8HwTat5fB8StrnYx47D9OHHXXSHzdREPk
1T5OBlU6+HHMsT2FHaiNJEVvGB71i8c6Svb9X61MXSl02gh+/yyZw/lWRdlKM3L1
7OwE/k1K50KuCA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:06 2025 by rpki-client