Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: R4S3jNyw3qnJ55F+ZppFZjb/bjiC7aEoh2lnWifGDtg=
Subject key identifier: 0D:0E:A3:00:EC:3C:09:2A:18:57:A1:37:5D:89:C9:DE:76:6A:C5:CF
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 0194BBCDCBB7C0A5D8E33689CA0E88578FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 0BCC
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: W8eIaDpxaZWFZWX0HRnHGhZJaqP3EL3D3THBrvHXglU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:b7:c0:a5:d8:e3:36:89:ca:0e:88:57:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=0d0ea300ec3c092a1857a1375d89c9de766ac5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:e8:bb:ad:74:21:8e:2b:51:af:cb:d5:67:
e9:06:e6:49:88:ec:c3:6e:bc:fe:8e:5f:1e:cf:dd:
be:11:6d:70:c4:0c:c0:0d:f8:74:61:db:99:fb:98:
3e:c8:5d:96:d0:b9:5c:56:55:b5:c6:13:44:9f:c7:
69:c6:9a:2f:bb:ae:a1:67:34:18:1a:1d:8a:11:df:
1b:82:c4:99:71:7d:6a:1c:bf:bd:04:e7:c6:71:b4:
e5:83:79:2a:9b:ce:c2:d3:87:0c:2f:2c:e5:0e:d7:
2d:3e:75:2b:5f:95:0e:8a:86:04:73:7f:40:9d:0e:
91:f2:19:20:1e:5a:32:ac:d1:dc:36:f2:a8:66:1f:
4b:f1:2b:df:84:70:48:20:39:83:c0:21:be:be:ad:
da:e4:52:ba:b7:54:88:4f:2d:41:61:5c:ab:fe:bb:
ac:46:37:d0:51:5e:10:6d:39:35:1d:22:46:53:c6:
99:cd:af:bc:5b:b8:dd:28:b9:b0:26:b4:c1:47:9b:
85:32:d8:d3:ab:e8:fd:53:74:2e:6f:36:54:45:1c:
ad:40:9b:46:32:21:a3:75:31:22:c3:d2:1a:a7:e6:
26:75:9a:28:07:91:ca:5e:e0:a6:5d:ef:dd:5a:ca:
68:9c:63:2e:91:98:46:e5:27:56:c2:63:b6:c3:48:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:A3:00:EC:3C:09:2A:18:57:A1:37:5D:89:C9:DE:76:6A:C5:CF
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:d5:b8:6f:63:2f:64:7d:86:16:8c:da:d4:0f:f2:42:06:
ab:5e:67:46:05:4c:b0:e5:29:12:d1:02:65:ac:50:da:e2:23:
03:b0:09:02:59:b4:65:13:80:b4:9d:f2:48:b3:8d:5f:0c:85:
df:3b:fa:d0:11:74:18:2d:22:d4:cc:42:4e:93:1c:f0:15:b9:
f6:6f:19:56:53:d7:86:89:db:9e:bf:8d:17:ee:77:7f:af:24:
d2:a1:59:4d:fc:cf:28:53:30:36:90:b4:ce:f1:25:e9:e4:44:
21:5d:56:b9:09:fe:ea:e1:ce:be:9f:cc:06:b3:c9:00:10:73:
a9:4f:16:e8:6e:49:a3:80:3a:b5:fe:0e:83:73:ab:7f:3c:15:
f4:3c:96:9e:c9:bb:43:7c:99:dd:d6:26:64:c7:a7:20:2d:f2:
76:40:99:6b:96:dd:ef:a0:ba:ee:1e:da:7b:13:0d:7c:98:cd:
af:6a:bb:dc:f8:da:6b:36:9d:5a:6d:be:f8:29:f1:6a:c8:f1:
6e:a1:88:25:41:0b:f7:f3:80:5a:a2:a9:61:fd:b0:3c:93:1c:
82:a1:d9:7d:4d:e8:3f:62:5d:f5:12:88:66:be:95:9e:81:ce:
4d:cc:6a:1a:23:f7:ba:e3:28:e4:19:52:f2:80:68:72:40:c6:
3b:a7:4e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcu3wKXY4zaJyg6IV4+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNmFjM2ZhYzQ1ZjA1ZDkwMjY4ODIzNzVmZTAyYjE1N2Q0
Yjc1MTgwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
EygwZDBlYTMwMGVjM2MwOTJhMTg1N2ExMzc1ZDg5YzlkZTc2NmFjNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgbou610IY4rUa/L1WfpBuZJiOzD
brz+jl8ez92+EW1wxAzADfh0YduZ+5g+yF2W0LlcVlW1xhNEn8dpxpovu66hZzQY
Gh2KEd8bgsSZcX1qHL+9BOfGcbTlg3kqm87C04cMLyzlDtctPnUrX5UOioYEc39A
nQ6R8hkgHloyrNHcNvKoZh9L8SvfhHBIIDmDwCG+vq3a5FK6t1SITy1BYVyr/rus
RjfQUV4QbTk1HSJGU8aZza+8W7jdKLmwJrTBR5uFMtjTq+j9U3QubzZURRytQJtG
MiGjdTEiw9Iap+YmdZooB5HKXuCmXe/dWsponGMukZhG5SdWwmO2w0gP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0OowDsPAkqGFehN12Jyd52asXPMB8GA1UdIwQY
MBaAFIxqw/rEXwXZAmiCN1/gKxV9S3UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgt
ODIyMTBjYmY4NDQ4LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgtODIyMTBjYmY4NDQ4
LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWfVuG9j
L2R9hhaM2tQP8kIGq15nRgVMsOUpEtECZaxQ2uIjA7AJAlm0ZROAtJ3ySLONXwyF
3zv60BF0GC0i1MxCTpMc8BW59m8ZVlPXhonbnr+NF+53f68k0qFZTfzPKFMwNpC0
zvEl6eREIV1WuQn+6uHOvp/MBrPJABBzqU8W6G5Jo4A6tf4Og3OrfzwV9DyWnsm7
Q3yZ3dYmZMenIC3ydkCZa5bd76C67h7aexMNfJjNr2q73PjaazadWm2++Cnxasjx
bqGIJUEL9/OAWqKpYf2wPJMcgqHZfU3oP2Jd9RKIZr6VnoHOTcxqGiP3uuMo5BlS
8oBockDGO6dO0Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:10 2025 by rpki-client