Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
File: _JfnqMJOB2HT5dydVjmLxH0m08A.mft (raw, json)
Hash identifier: A1UIr7B3KPnTyR9OUFkKVq9Y7aKiGxPZ2YUKbqYLSR4=
Subject key identifier: C0:68:AE:10:85:6F:F3:8A:26:E6:DC:6F:D5:A0:7D:67:08:7C:AB:84
Authority key identifier: FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
Certificate issuer: /CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Certificate serial: 0194BD856C1C6643DD8CED143BA8B24A1D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
Manifest number: 0358
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: _JfnqMJOB2HT5dydVjmLxH0m08A.crl (hash: vV7ztwux0gYhOthMthiUXCkSFSi7qBZ5He4B87PP3wU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:1c:66:43:dd:8c:ed:14:3b:a8:b2:4a:1d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=c068ae10856ff38a26e6dc6fd5a07d67087cab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:b4:d7:5e:17:0d:23:13:e1:94:19:12:2d:
12:74:a8:3e:cc:fe:da:c6:b0:2c:43:2e:e4:2d:e4:
9c:f7:4e:55:2e:26:c1:49:2d:9f:f4:d6:1b:a4:70:
a1:c3:c7:09:78:0d:10:28:5d:e9:e1:cd:11:25:a3:
b1:52:e5:e7:0d:f3:cc:89:6d:e3:91:86:f3:de:23:
70:cc:fb:3f:3f:22:00:ac:b3:d5:9d:86:7e:eb:99:
3e:40:97:ae:6d:be:80:65:9c:3d:e7:29:97:0e:e9:
0e:ed:a6:8d:39:7d:0d:e7:94:9f:8e:a0:8e:19:21:
0a:5a:5f:57:0a:94:61:b9:c7:62:56:a1:3f:b9:4b:
83:7b:4f:9f:a8:a6:95:b2:c5:f6:7c:db:bc:a9:9b:
d8:97:47:2c:aa:71:9a:e3:b0:a6:a1:07:cb:cd:de:
dc:4b:af:0e:6e:e5:df:24:5d:01:21:7e:b2:a1:87:
4a:bf:3f:ec:3f:ce:96:81:a6:c7:ea:ba:83:fa:eb:
bf:ca:82:8e:60:15:7d:31:9d:60:73:7e:ed:16:f8:
61:c4:ce:04:c0:cc:6a:79:1b:ff:0a:c6:1a:24:85:
1f:0b:fb:35:89:a8:45:33:12:c6:f4:c9:76:8e:d1:
d3:eb:a4:b1:a2:dd:bb:12:e6:ce:b7:56:2a:ab:a2:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:AE:10:85:6F:F3:8A:26:E6:DC:6F:D5:A0:7D:67:08:7C:AB:84
X509v3 Authority Key Identifier:
keyid:FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a5:05:c9:29:27:ed:36:7c:1c:58:c8:43:02:0f:cb:b4:96:
6b:ee:d4:79:04:bd:20:dc:5c:9c:96:7b:65:87:86:79:b3:1e:
9d:07:87:b1:8e:06:8d:87:78:c5:a1:2a:38:19:3d:d4:89:4d:
ae:e4:f9:cd:35:a1:b4:10:fa:ed:7e:ac:56:0f:1a:9f:53:b1:
23:1b:c8:c7:01:4c:1e:01:47:91:85:c8:5e:5d:7b:0c:e0:a0:
fd:ae:74:b0:6b:51:93:70:72:59:e4:d5:ae:87:77:a5:96:43:
75:34:a9:89:3d:82:fe:7b:3c:f7:94:0f:38:3e:92:08:42:1f:
95:fe:2a:f9:42:f7:e2:a7:fa:2b:c7:1a:24:5c:90:7b:23:9d:
e0:ba:07:ce:ac:0d:93:8d:a7:c2:9d:2b:c8:23:1d:e0:71:54:
4b:a1:17:8e:64:04:b2:9e:fa:25:eb:cb:12:e6:a4:85:61:70:
15:80:42:6c:d2:33:0f:90:ec:f2:8a:39:03:d7:50:06:10:13:
a4:9c:d5:4f:9b:80:8e:31:18:e1:62:0d:7d:7c:b0:14:2d:d4:
7c:83:1b:86:dc:ee:2f:4c:01:43:f2:6b:08:07:f0:eb:9f:5f:
8d:a0:f0:a6:c3:40:92:3b:21:2f:ce:c8:47:fa:41:41:1a:b4:
cc:33:06:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWwcZkPdjO0UO6iySh1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTdlN2E4YzI0ZTA3NjFkM2U1ZGM5ZDU2Mzk4YmM0N2Qy
NmQzYzAwHhcNMjUwMTMxMTgwMDI1WhcNMjUwMjAxMTgwMDI1WjAzMTEwLwYDVQQD
EyhjMDY4YWUxMDg1NmZmMzhhMjZlNmRjNmZkNWEwN2Q2NzA4N2NhYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJy0114XDSMT4ZQZEi0SdKg+zP7a
xrAsQy7kLeSc905VLibBSS2f9NYbpHChw8cJeA0QKF3p4c0RJaOxUuXnDfPMiW3j
kYbz3iNwzPs/PyIArLPVnYZ+65k+QJeubb6AZZw95ymXDukO7aaNOX0N55SfjqCO
GSEKWl9XCpRhucdiVqE/uUuDe0+fqKaVssX2fNu8qZvYl0csqnGa47CmoQfLzd7c
S68ObuXfJF0BIX6yoYdKvz/sP86WgabH6rqD+uu/yoKOYBV9MZ1gc37tFvhhxM4E
wMxqeRv/CsYaJIUfC/s1iahFMxLG9Ml2jtHT66Sxot27EubOt1Yqq6Jt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBorhCFb/OKJubcb9WgfWcIfKuEMB8GA1UdIwQY
MBaAFPyX56jCTgdh0+XcnVY5i8R9JtPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTct
M2E1OWM3MGMwYTk5LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTctM2E1OWM3MGMwYTk5
LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1aUFySkn
7TZ8HFjIQwIPy7SWa+7UeQS9INxcnJZ7ZYeGebMenQeHsY4GjYd4xaEqOBk91IlN
ruT5zTWhtBD67X6sVg8an1OxIxvIxwFMHgFHkYXIXl17DOCg/a50sGtRk3ByWeTV
rod3pZZDdTSpiT2C/ns895QPOD6SCEIflf4q+UL34qf6K8caJFyQeyOd4LoHzqwN
k42nwp0ryCMd4HFUS6EXjmQEsp76JevLEuakhWFwFYBCbNIzD5Ds8oo5A9dQBhAT
pJzVT5uAjjEY4WINfXywFC3UfIMbhtzuL0wBQ/JrCAfw659fjaDwpsNAkjshL87I
R/pBQRq0zDMGeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:42 2025 by rpki-client