Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File: J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier: OH6D4L9KDWBgqpS3N0pyhN6vrubp2cGTbott2b1Z/fg=
Subject key identifier: 03:C2:BA:E3:19:B7:26:70:0D:63:16:98:7F:CE:D8:47:23:FB:FC:76
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial: 0194BC732448DB9E8C453B09D6DB45249D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number: 0A59
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: kMw1wGUAs+w0OnjSSeUJ6oeGpeZtB8xlqqaMf0hvz8Q=)
2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:48:db:9e:8c:45:3b:09:d6:db:45:24:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=03c2bae319b726700d6316987fced84723fbfc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:a2:5d:24:d7:9f:4f:55:a6:e0:07:a0:3f:
f7:d9:43:eb:d5:6a:53:88:e0:ff:84:c9:1e:1e:0c:
e7:f7:60:38:3f:82:12:48:91:d6:c7:0a:d9:86:fb:
78:24:e9:52:55:60:c6:e2:d0:17:e3:38:a3:e3:4c:
46:c4:17:d5:3c:45:af:59:32:4d:08:57:02:29:68:
d4:51:1b:35:7a:59:99:32:2f:3c:01:8c:99:78:d2:
b4:25:c1:1f:10:b0:ce:43:58:e1:27:d2:cf:7e:7a:
9f:0b:a6:db:b4:8e:55:89:7a:b5:cd:d5:a6:f9:4b:
b8:57:33:90:d6:d7:ae:26:c6:55:e3:e8:32:1c:f4:
6f:82:ce:1e:94:dc:9f:07:eb:ff:a6:dd:2c:b5:60:
73:a6:6f:b4:c2:52:6f:6c:d8:9b:ce:eb:0c:49:96:
7c:68:2c:fd:51:58:df:1c:26:09:0c:75:d9:07:b1:
8b:c2:97:67:cc:42:8f:26:92:92:64:04:87:01:25:
a1:22:93:d6:29:ba:04:58:85:50:b0:51:a4:48:02:
74:b8:1a:75:fe:31:12:03:c2:98:a4:b8:17:8f:25:
12:54:9c:30:6a:f9:d4:d6:6a:51:b2:da:83:da:d3:
0b:0d:21:61:fa:b4:33:49:40:45:08:b7:77:f6:89:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:BA:E3:19:B7:26:70:0D:63:16:98:7F:CE:D8:47:23:FB:FC:76
X509v3 Authority Key Identifier:
keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:0b:ca:ec:de:13:d4:a2:ba:c8:9b:15:85:d8:5b:d7:f2:
80:f8:46:6d:f7:c1:06:c9:ce:e7:f6:16:10:e5:39:45:12:1a:
1c:89:00:17:79:ca:79:46:d7:03:78:3c:23:42:d5:c5:7d:53:
cd:bc:c4:57:06:af:16:9c:a0:78:a1:71:5e:05:ee:7c:a5:de:
c8:cd:98:b0:a4:1f:33:7f:3e:28:3a:65:f5:3e:dc:70:9a:c1:
5b:5e:8f:8b:12:7f:34:18:fa:ec:47:9b:c4:d1:e4:e5:c7:3d:
ee:fe:53:16:4e:36:4b:73:49:9a:16:33:1b:21:b6:09:e0:a1:
46:7e:e3:74:8e:4d:71:c6:74:53:22:8e:36:14:b8:18:15:13:
c0:aa:c6:c9:fd:20:2c:6b:d2:f1:5c:a9:3f:52:21:13:cf:b5:
4e:a8:98:62:47:77:4d:aa:7a:40:01:f7:05:3d:83:86:a2:d8:
5e:2e:24:fe:b7:b9:51:f5:d1:d8:c4:d6:d9:6f:4b:08:3a:78:
f8:c8:30:14:b1:71:a6:25:eb:c3:12:ba:cf:b7:fc:31:36:35:
db:f2:e1:2d:ea:23:af:81:87:b4:82:f4:e0:ee:ff:5a:56:4d:
be:b5:75:4a:3a:05:47:ab:8f:ac:ee:8d:80:04:b0:08:60:8e:
aa:2f:05:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyRI256MRTsJ1ttFJJ18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2
NGExZGYwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EygwM2MyYmFlMzE5YjcyNjcwMGQ2MzE2OTg3ZmNlZDg0NzIzZmJmYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug+iXSTXn09VpuAHoD/32UPr1WpT
iOD/hMkeHgzn92A4P4ISSJHWxwrZhvt4JOlSVWDG4tAX4zij40xGxBfVPEWvWTJN
CFcCKWjUURs1elmZMi88AYyZeNK0JcEfELDOQ1jhJ9LPfnqfC6bbtI5ViXq1zdWm
+Uu4VzOQ1teuJsZV4+gyHPRvgs4elNyfB+v/pt0stWBzpm+0wlJvbNibzusMSZZ8
aCz9UVjfHCYJDHXZB7GLwpdnzEKPJpKSZASHASWhIpPWKboEWIVQsFGkSAJ0uBp1
/jESA8KYpLgXjyUSVJwwavnU1mpRstqD2tMLDSFh+rQzSUBFCLd39ok/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPCuuMZtyZwDWMWmH/O2Ecj+/x2MB8GA1UdIwQY
MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt
MGQwZDdjMDE4OWFkLzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk
LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNgLyuze
E9SiusibFYXYW9fygPhGbffBBsnO5/YWEOU5RRIaHIkAF3nKeUbXA3g8I0LVxX1T
zbzEVwavFpygeKFxXgXufKXeyM2YsKQfM38+KDpl9T7ccJrBW16PixJ/NBj67Eeb
xNHk5cc97v5TFk42S3NJmhYzGyG2CeChRn7jdI5NccZ0UyKONhS4GBUTwKrGyf0g
LGvS8VypP1IhE8+1TqiYYkd3Tap6QAH3BT2DhqLYXi4k/re5UfXR2MTW2W9LCDp4
+MgwFLFxpiXrwxK6z7f8MTY12/LhLeojr4GHtIL04O7/WlZNvrV1SjoFR6uPrO6N
gASwCGCOqi8FBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:27 2025 by rpki-client