Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: jAVGFj01ke85bjtEWEPYlHCjKAB4i+mBJx9bQ6ATDZk=
Subject key identifier: 28:34:A1:2C:A0:D2:1A:7B:E9:CF:4C:05:5A:95:96:3A:F1:A6:73:11
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 0194BCAA1D2E51EA6A358FE0A11A1239CA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 0F84
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: MEDzHD9q2eGweUQdapdjXMBMfTQ.roa (hash: zXMAfE64URHINF27A6nJI8RqMOkKP0TBeGh/Il74bmY=)
2: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: gVdhUF42jt4vT6Pn3j2+MCSghWEC/fElf6psHVgHWg4=)
4: sL9Kz85GaDEa7LnBULtmZSLy-lo.roa (hash: XUJoqmnJJ5H1J5j7ZDude3PAUu4a4U54u3Ws3xOI5pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:2e:51:ea:6a:35:8f:e0:a1:1a:12:39:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=2834a12ca0d21a7be9cf4c055a95963af1a67311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:93:27:7f:cc:a0:df:fc:d1:d4:07:f8:cd:
9d:e9:97:bd:79:35:db:6f:ac:3b:7e:2e:a5:38:7f:
70:5f:38:86:f4:a0:90:a6:cc:f8:bc:36:8f:56:2f:
6e:58:44:94:67:47:2a:4d:cd:58:55:74:f5:21:e9:
83:ce:0f:96:77:ac:7a:dc:e9:c5:3a:ee:9c:f4:5d:
f6:74:d2:a7:c2:ba:80:0c:7d:00:d1:0e:32:85:30:
52:84:c2:ed:d0:ee:6d:b5:f2:4f:3f:1a:e9:cf:d4:
2c:a2:50:2c:1f:7b:33:bb:32:c5:c6:dd:1e:d9:22:
53:50:42:3b:44:4d:0a:11:af:1b:3d:fa:63:c8:18:
b2:f0:82:23:0c:01:5a:09:4d:30:27:a0:82:d4:1e:
83:62:81:9a:a7:1d:63:7a:f8:06:4e:dd:81:80:b3:
ea:26:e3:b9:31:98:c8:6e:92:b4:62:83:8c:22:48:
5c:4c:84:67:d4:14:c7:39:15:73:9d:60:f8:96:dd:
ee:da:4c:67:8d:ce:dd:99:76:8e:87:3a:a9:c2:26:
3f:12:a3:b5:57:ed:63:3e:99:13:58:4b:a5:64:17:
bf:e3:4e:77:dd:c1:6f:56:91:21:6b:ce:58:60:e8:
87:13:2f:37:c9:31:7b:63:b7:1f:6a:3c:1b:00:1f:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:A1:2C:A0:D2:1A:7B:E9:CF:4C:05:5A:95:96:3A:F1:A6:73:11
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:03:a4:15:75:c0:dd:5b:ef:0e:e8:50:6a:58:cc:bd:5a:b5:
1c:ff:2e:4f:bd:b2:5d:82:22:8d:e9:6e:87:e4:a8:c8:9f:98:
c3:71:64:d7:a9:b5:78:18:9b:ac:b9:04:92:ee:6a:96:22:76:
26:00:56:a4:84:bf:c7:17:8e:61:b0:13:b9:7d:0f:3a:68:a1:
d0:47:d0:ef:74:b0:2f:49:37:8b:e9:92:4b:02:31:eb:5f:d7:
ca:60:56:e2:3a:43:07:1d:23:d6:30:ea:3d:f6:44:28:50:e2:
cf:bc:de:18:e0:93:2f:d3:b0:25:88:63:dc:06:9e:71:58:0f:
64:48:09:eb:8f:31:cf:ff:a7:44:b2:a0:e3:96:3f:ea:45:32:
26:4d:9e:fe:7d:de:7b:2f:f6:c0:ae:7a:71:14:17:7f:b7:a6:
74:87:16:6b:b0:97:c5:68:1d:be:cb:8e:b1:05:bd:cc:c1:b1:
34:43:e5:11:55:6c:b8:08:7f:4f:e8:18:4c:8d:35:fb:9d:e3:
32:ea:3e:9b:b2:e8:60:ae:16:bf:ec:05:81:81:f7:42:5f:45:
2d:76:15:24:8f:eb:96:65:e0:04:4e:e4:35:2f:56:30:0a:c4:
d9:36:8d:df:2a:d1:0d:f6:97:8f:5d:47:da:d5:53:ef:5a:9f:
79:f6:00:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh0uUepqNY/goRoSOcplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
EygyODM0YTEyY2EwZDIxYTdiZTljZjRjMDU1YTk1OTYzYWYxYTY3MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0aTJ3/MoN/80dQH+M2d6Ze9eTXb
b6w7fi6lOH9wXziG9KCQpsz4vDaPVi9uWESUZ0cqTc1YVXT1IemDzg+Wd6x63OnF
Ou6c9F32dNKnwrqADH0A0Q4yhTBShMLt0O5ttfJPPxrpz9QsolAsH3szuzLFxt0e
2SJTUEI7RE0KEa8bPfpjyBiy8IIjDAFaCU0wJ6CC1B6DYoGapx1jevgGTt2BgLPq
JuO5MZjIbpK0YoOMIkhcTIRn1BTHORVznWD4lt3u2kxnjc7dmXaOhzqpwiY/EqO1
V+1jPpkTWEulZBe/40533cFvVpEha85YYOiHEy83yTF7Y7cfajwbAB/dHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg0oSyg0hp76c9MBVqVljrxpnMRMB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAOkFXXA
3VvvDuhQaljMvVq1HP8uT72yXYIijeluh+SoyJ+Yw3Fk16m1eBibrLkEku5qliJ2
JgBWpIS/xxeOYbATuX0POmih0EfQ73SwL0k3i+mSSwIx61/XymBW4jpDBx0j1jDq
PfZEKFDiz7zeGOCTL9OwJYhj3AaecVgPZEgJ648xz/+nRLKg45Y/6kUyJk2e/n3e
ey/2wK56cRQXf7emdIcWa7CXxWgdvsuOsQW9zMGxNEPlEVVsuAh/T+gYTI01+53j
Muo+m7LoYK4Wv+wFgYH3Ql9FLXYVJI/rlmXgBE7kNS9WMArE2TaN3yrRDfaXj11H
2tVT71qfefYAKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client