Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
File: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json)
Hash identifier: 1xOn0zRjmubmy7GLdc+Fk2tchhcS/qULcneb49ECwZk=
Subject key identifier: 71:14:E8:28:8A:93:F2:31:A1:A5:C5:53:7F:46:C7:6C:38:AA:F3:6F
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 0194BCA97A4F4BED848B5ABF81D115AC3529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
Manifest number: 0727
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: TqybCcgozdX89JoZ+3Abf/x6LOBh7C4liCJJ5WVM7/A=)
2: tGF0KepWs_QQSq5Gqg3jdlf7Wg4.roa (hash: TESttPZc3JvCUN0ojsF44ZWR9WcYNw/S3gDe81zvl7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7a:4f:4b:ed:84:8b:5a:bf:81:d1:15:ac:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=7114e8288a93f231a1a5c5537f46c76c38aaf36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:32:a6:d1:c4:ab:2f:ea:ed:44:22:5d:05:
78:0f:58:80:25:4a:00:be:48:94:11:44:23:3c:11:
77:d3:32:b8:9e:ce:93:47:77:ba:23:f9:f2:6e:f6:
c1:c6:f2:8d:2c:e8:42:d7:0d:7e:8e:04:e2:9e:84:
d6:a0:af:11:b2:ef:77:be:e5:9d:e6:9e:4d:30:0e:
16:22:a7:13:e8:01:27:01:f9:f8:1c:26:cd:a7:e8:
ec:54:da:4e:71:51:3e:4e:b5:33:92:62:13:b4:5d:
b8:0b:ec:59:aa:91:76:d7:fc:fa:05:d1:ac:33:68:
23:03:9e:0d:37:8c:69:34:05:7f:cc:39:f7:f2:6c:
21:9b:94:e8:ff:dd:3b:8e:23:da:93:ad:ea:98:af:
62:0f:71:14:de:1b:52:71:57:11:58:4f:7e:12:59:
ab:cb:ef:95:e0:68:0c:32:e7:98:c7:bd:71:32:48:
3f:d4:d2:6b:46:7a:6e:80:e1:c6:27:4c:69:19:06:
8d:b9:d6:cf:46:30:b1:31:0b:89:2e:23:33:eb:ae:
87:1c:86:fb:02:b6:05:52:1f:38:02:a3:18:9f:84:
07:37:bc:c4:04:ee:04:4e:a5:ef:a0:26:e7:f6:38:
57:13:9a:ea:41:24:f7:47:5c:13:fc:2a:7c:8b:c4:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:E8:28:8A:93:F2:31:A1:A5:C5:53:7F:46:C7:6C:38:AA:F3:6F
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:c8:db:a7:c8:c9:36:f7:0c:39:02:8b:82:18:3b:9e:cc:
65:c9:f3:cd:4e:72:0a:2b:de:53:d4:33:66:e4:77:c6:90:10:
aa:11:0b:f7:b3:c5:92:1c:b4:86:97:f0:f9:59:ec:76:48:4b:
05:cf:a5:df:91:8d:74:cb:31:00:69:a5:c3:39:87:c6:a8:20:
c2:60:eb:24:df:49:03:44:75:62:55:de:fc:07:0d:74:a8:d1:
5b:ef:01:dd:5e:13:cf:5b:ac:5f:41:5b:b2:fb:c1:93:dc:1c:
b7:b1:76:02:f7:ad:31:27:c0:f8:94:37:b0:82:ab:40:fe:78:
28:fe:b7:d3:16:3c:53:41:20:a5:6d:9d:f9:4a:db:b3:f5:1a:
76:6e:24:13:98:06:47:ea:73:1b:e0:22:c2:3c:91:b6:81:67:
dd:58:d1:de:cb:b0:a6:45:95:73:43:15:97:b5:15:4e:53:5e:
6a:da:d0:37:e2:1d:b0:e5:99:c3:18:02:49:61:ea:0e:46:06:
46:83:aa:f7:f8:b3:97:5d:ea:7b:85:19:0a:33:15:bb:dc:6c:
f8:f2:2c:4c:e8:5f:e7:f9:cc:b0:5d:b6:39:9d:a3:a1:63:0f:
25:eb:67:5f:09:85:41:02:f3:81:60:8c:be:4f:89:f1:28:06:
1f:38:c4:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXpPS+2Ei1q/gdEVrDUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDZmNWE3MzE0YjJmOTY2YjI0ZmM1MzE1NWNlN2JmNjA0
YzA3YTYwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
Eyg3MTE0ZTgyODhhOTNmMjMxYTFhNWM1NTM3ZjQ2Yzc2YzM4YWFmMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHUyptHEqy/q7UQiXQV4D1iAJUoA
vkiUEUQjPBF30zK4ns6TR3e6I/nybvbBxvKNLOhC1w1+jgTinoTWoK8Rsu93vuWd
5p5NMA4WIqcT6AEnAfn4HCbNp+jsVNpOcVE+TrUzkmITtF24C+xZqpF21/z6BdGs
M2gjA54NN4xpNAV/zDn38mwhm5To/907jiPak63qmK9iD3EU3htScVcRWE9+Elmr
y++V4GgMMueYx71xMkg/1NJrRnpugOHGJ0xpGQaNudbPRjCxMQuJLiMz666HHIb7
ArYFUh84AqMYn4QHN7zEBO4ETqXvoCbn9jhXE5rqQST3R1wT/Cp8i8QL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEU6CiKk/IxoaXFU39Gx2w4qvNvMB8GA1UdIwQY
MBaAFI4G9acxSy+WayT8UxVc579gTAemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEt
YjQ3NDk3MGVjYTY2LzEvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEtYjQ3NDk3MGVjYTY2
LzEvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbnI26fI
yTb3DDkCi4IYO57MZcnzzU5yCiveU9QzZuR3xpAQqhEL97PFkhy0hpfw+VnsdkhL
Bc+l35GNdMsxAGmlwzmHxqggwmDrJN9JA0R1YlXe/AcNdKjRW+8B3V4Tz1usX0Fb
svvBk9wct7F2AvetMSfA+JQ3sIKrQP54KP630xY8U0EgpW2d+Urbs/Uadm4kE5gG
R+pzG+AiwjyRtoFn3VjR3suwpkWVc0MVl7UVTlNeatrQN+IdsOWZwxgCSWHqDkYG
RoOq9/izl13qe4UZCjMVu9xs+PIsTOhf5/nMsF22OZ2joWMPJetnXwmFQQLzgWCM
vk+J8SgGHzjEJA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:24 2025 by rpki-client