Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File: jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier: gza0R18zZkEh6TlWM6gy91iZCD40AQLG1TYEh63GJO0=
Subject key identifier: 33:49:CD:40:4F:B9:DB:82:BE:D7:97:22:39:53:36:9B:57:24:32:54
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer: /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial: 0194BCA98994560DCC28B5B0E9584BF2532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number: 0B86
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: Wyfbi9dajb6P+bUs+bWQpQTEQSBzVLzxoXNYRvZzSXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:94:56:0d:cc:28:b5:b0:e9:58:4b:f2:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=3349cd404fb9db82bed797223953369b57243254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:08:38:ad:92:3a:93:93:ac:00:8c:c1:47:
5e:52:b6:61:0c:cc:4d:29:2d:fc:c8:78:f5:98:22:
82:0b:04:93:ee:67:d2:07:76:17:c0:fa:b5:e5:93:
2e:73:a0:8f:39:ea:4c:b1:2c:93:28:74:a3:f0:de:
9f:14:b9:7c:0d:7b:11:7a:fe:8e:7c:14:2c:49:85:
69:8b:27:22:6e:33:dc:d2:6c:85:fd:d2:3b:b2:c5:
c3:4a:bf:53:3b:53:f4:33:42:87:2f:c0:e0:ac:da:
82:24:d7:d1:db:4b:fb:62:43:ae:ee:e0:aa:f5:7d:
26:aa:40:4f:7a:2f:4f:44:c8:ad:98:84:c4:d8:30:
3d:90:17:45:b0:78:0d:6e:b8:80:1f:23:53:6f:55:
a8:20:e3:7f:4f:1c:d9:e5:f8:95:16:90:6a:67:52:
f2:d2:9a:62:bd:6a:93:8a:70:18:2d:69:b4:2a:83:
d9:c3:a7:54:55:84:16:92:8d:09:ea:da:9d:e3:13:
a8:f6:e0:02:c7:6b:12:11:73:ac:75:da:34:a1:90:
87:ce:7a:71:12:ff:84:59:bf:ca:ae:b4:fc:cc:fb:
3c:59:db:12:c3:b2:93:ab:77:a0:0f:11:3e:7b:63:
c4:f8:6f:2d:f7:7b:4d:d7:f0:8e:19:ac:fc:e9:9f:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:CD:40:4F:B9:DB:82:BE:D7:97:22:39:53:36:9B:57:24:32:54
X509v3 Authority Key Identifier:
keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:09:89:e8:82:d2:22:0d:fe:69:6c:b3:8e:f6:34:b8:e6:
05:4d:a0:66:34:6e:2b:56:ad:ef:7a:b8:30:cf:85:9a:44:3b:
cc:c2:b0:82:75:c1:78:c0:d9:7c:e6:8e:9f:ec:4e:c9:bd:d8:
15:ca:38:04:2c:5d:c0:1a:97:db:a2:20:3f:6f:b6:5f:c1:66:
7a:3d:69:1f:0f:db:db:89:0a:9e:5b:50:12:74:c0:ce:31:31:
f2:0b:31:bd:b9:cb:2e:b6:de:7e:ee:dd:51:87:1c:7e:6f:fc:
d1:5e:1b:69:4f:bc:a5:a2:af:d8:3d:d0:85:29:f2:74:d5:ae:
d0:3a:cf:4a:4f:cc:90:ac:61:47:fc:de:b0:59:77:84:68:25:
4a:d8:87:df:5b:42:8c:38:5a:4d:7b:16:3f:26:50:10:a6:1f:
1f:8e:0e:43:a0:e8:4a:e1:59:0d:e7:af:6b:f6:9f:29:0e:d4:
95:44:46:b3:09:53:00:10:85:20:8b:de:f0:f1:96:a7:19:84:
81:cb:53:2a:7c:cb:6b:26:83:8b:4c:83:cf:eb:e7:0e:76:54:
4f:bf:69:b2:95:bf:c8:08:34:16:f5:8c:ab:ca:c1:5a:8a:da:
a1:93:81:e1:4b:7c:2e:8d:0f:75:e0:b1:28:15:de:f7:bf:45:
5f:51:d0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYmUVg3MKLWw6VhL8lMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjkzNDhlMjc3MTE0Y2NlYmJhZDg5ZWZlODk1ZjUwYTEy
YTgxODcwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
EygzMzQ5Y2Q0MDRmYjlkYjgyYmVkNzk3MjIzOTUzMzY5YjU3MjQzMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s0IOK2SOpOTrACMwUdeUrZhDMxN
KS38yHj1mCKCCwST7mfSB3YXwPq15ZMuc6CPOepMsSyTKHSj8N6fFLl8DXsRev6O
fBQsSYVpiycibjPc0myF/dI7ssXDSr9TO1P0M0KHL8DgrNqCJNfR20v7YkOu7uCq
9X0mqkBPei9PRMitmITE2DA9kBdFsHgNbriAHyNTb1WoION/TxzZ5fiVFpBqZ1Ly
0ppivWqTinAYLWm0KoPZw6dUVYQWko0J6tqd4xOo9uACx2sSEXOsddo0oZCHznpx
Ev+EWb/KrrT8zPs8WdsSw7KTq3egDxE+e2PE+G8t93tN1/COGaz86Z8v2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNJzUBPuduCvteXIjlTNptXJDJUMB8GA1UdIwQY
MBaAFI75NI4ncRTM67rYnv6JX1ChKoGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YTVjMTctOTU2ZS00MDc3LTk0YzMt
ZDZmZjkxM2ZjYTEyLzEvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YTVjMTctOTU2ZS00MDc3LTk0YzMtZDZmZjkxM2ZjYTEy
LzEvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7AJieiC
0iIN/mlss472NLjmBU2gZjRuK1at73q4MM+FmkQ7zMKwgnXBeMDZfOaOn+xOyb3Y
Fco4BCxdwBqX26IgP2+2X8Fmej1pHw/b24kKnltQEnTAzjEx8gsxvbnLLrbefu7d
UYccfm/80V4baU+8paKv2D3QhSnydNWu0DrPSk/MkKxhR/zesFl3hGglStiH31tC
jDhaTXsWPyZQEKYfH44OQ6DoSuFZDeeva/afKQ7UlURGswlTABCFIIve8PGWpxmE
gctTKnzLayaDi0yDz+vnDnZUT79pspW/yAg0FvWMq8rBWoraoZOB4Ut8Lo0PdeCx
KBXe979FX1HQ1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:44 2025 by rpki-client