Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
File: jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft (raw, json)
Hash identifier: MNta0vYW/TX9lU3qETd451M7AnYhwhPNwEPlBwgw2Rs=
Subject key identifier: 3E:34:99:83:9B:9F:DC:1E:D2:6E:16:60:BD:18:66:D9:67:59:5E:00
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Certificate issuer: /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial: 0194BC72A343BF87E9E00FDBD557579909CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl (hash: In3RLjdbMXDW0f1t9sGH0B1FeJF51gJmr8BsYtiNwoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a3:43:bf:87:e9:e0:0f:db:d5:57:57:99:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=3e3499839b9fdc1ed26e1660bd1866d967595e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:51:c0:de:57:9a:41:d1:38:7f:f3:15:cd:
72:08:18:dd:6f:aa:b5:44:71:e5:65:3a:e7:07:58:
be:36:ee:ec:71:6e:5b:c0:8d:da:06:2a:f6:00:71:
6d:55:61:d0:03:dc:db:c5:bc:c3:b8:b1:33:de:8c:
62:95:43:53:4b:e9:bb:59:b5:c5:65:20:10:8a:5f:
80:5d:e7:33:db:aa:af:e2:c5:62:f8:ed:21:12:d9:
93:e8:d7:e3:18:e8:90:40:91:74:80:c2:3f:19:ea:
26:ba:ad:3c:de:03:11:0a:23:a6:39:17:6f:92:d2:
f4:00:6c:ff:c4:56:fd:1d:89:05:8f:fe:1d:d2:d2:
76:e6:d4:03:89:a0:bd:e6:fa:47:43:d3:84:43:86:
fe:20:7c:da:f6:df:fc:84:13:eb:e1:70:c7:12:a6:
1c:34:6d:16:c4:de:02:0e:b4:0b:96:f3:c0:0e:15:
4d:64:13:29:bc:d1:6b:ae:36:99:ce:b6:c9:ae:cc:
e5:58:e5:13:37:04:6b:b0:d0:7f:b7:f1:6d:07:4d:
62:54:62:10:5b:3f:33:d7:30:92:6e:5a:49:b6:05:
66:f3:c6:a3:3d:bc:c7:c7:0c:7f:3e:62:80:6d:d6:
39:c9:fd:ec:d5:ae:ab:6c:0c:71:c2:ee:31:9c:f0:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:34:99:83:9B:9F:DC:1E:D2:6E:16:60:BD:18:66:D9:67:59:5E:00
X509v3 Authority Key Identifier:
keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:13:65:e2:37:0a:7b:22:a5:0d:1b:6f:40:d8:a1:3c:38:57:
b5:6b:91:88:61:6d:29:24:5a:a0:0d:ed:47:46:7a:ac:d4:31:
9a:f9:2f:50:a9:89:0f:17:ed:c1:d3:ab:ed:03:2e:04:87:08:
23:eb:07:9e:c4:64:7a:c9:c1:22:4e:29:e2:86:12:ef:52:71:
52:0e:a9:9b:4f:21:34:72:e8:51:0a:26:2a:34:8e:53:79:2c:
70:e2:32:7d:5d:80:11:5c:d2:c0:18:24:9d:b1:4a:f0:2e:e3:
b7:0f:24:5e:d9:ba:7f:e9:5f:c2:32:e8:ea:cc:49:81:58:59:
95:46:c1:06:3f:c3:71:55:01:9a:af:9e:a0:a0:ef:7e:b7:91:
a8:22:8f:a4:17:21:91:a8:a4:39:22:83:17:2d:aa:7f:bb:5a:
e4:5a:f6:4a:0b:7b:4d:4d:78:52:1d:9c:36:41:44:5c:e5:4c:
45:35:08:4f:33:a1:d4:1a:9e:b5:a5:14:d6:73:73:77:ee:65:
72:d0:9d:31:52:e9:7e:ae:4f:cb:ff:4c:81:cd:f2:21:8c:38:
2c:cf:88:c1:55:c8:c2:9a:f9:ad:75:03:7f:71:62:d7:9c:a7:
c0:ed:8b:18:56:34:84:27:10:bf:dd:c0:d5:26:af:de:c7:1f:
d0:e1:81:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqNDv4fp4A/b1VdXmQnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2Y4MjY5MDI2MmYwNjIyZWViZmFhZDE0MzNkNThmYjlj
YTllMWYwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
EygzZTM0OTk4MzliOWZkYzFlZDI2ZTE2NjBiZDE4NjZkOTY3NTk1ZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqZRwN5XmkHROH/zFc1yCBjdb6q1
RHHlZTrnB1i+Nu7scW5bwI3aBir2AHFtVWHQA9zbxbzDuLEz3oxilUNTS+m7WbXF
ZSAQil+AXecz26qv4sVi+O0hEtmT6NfjGOiQQJF0gMI/Geomuq083gMRCiOmORdv
ktL0AGz/xFb9HYkFj/4d0tJ25tQDiaC95vpHQ9OEQ4b+IHza9t/8hBPr4XDHEqYc
NG0WxN4CDrQLlvPADhVNZBMpvNFrrjaZzrbJrszlWOUTNwRrsNB/t/FtB01iVGIQ
Wz8z1zCSblpJtgVm88ajPbzHxwx/PmKAbdY5yf3s1a6rbAxxwu4xnPBv5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD40mYObn9we0m4WYL0YZtlnWV4AMB8GA1UdIwQY
MBaAFI3PgmkCYvBiLuv6rRQz1Y+5yp4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamMtQ2FRSmk4R0l1Nl9xdEZEUFZqN25Lbmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85MzhhMDctMjc1OC00MjIzLWE5NDct
NDljODQ0NzkxYWUyLzEvamMtQ2FRSmk4R0l1Nl9xdEZEUFZqN25Lbmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS85MzhhMDctMjc1OC00MjIzLWE5NDctNDljODQ0NzkxYWUy
LzEvamMtQ2FRSmk4R0l1Nl9xdEZEUFZqN25Lbmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRNl4jcK
eyKlDRtvQNihPDhXtWuRiGFtKSRaoA3tR0Z6rNQxmvkvUKmJDxftwdOr7QMuBIcI
I+sHnsRkesnBIk4p4oYS71JxUg6pm08hNHLoUQomKjSOU3kscOIyfV2AEVzSwBgk
nbFK8C7jtw8kXtm6f+lfwjLo6sxJgVhZlUbBBj/DcVUBmq+eoKDvfreRqCKPpBch
kaikOSKDFy2qf7ta5Fr2Sgt7TU14Uh2cNkFEXOVMRTUITzOh1BqetaUU1nNzd+5l
ctCdMVLpfq5Py/9Mgc3yIYw4LM+IwVXIwpr5rXUDf3Fi15ynwO2LGFY0hCcQv93A
1Sav3scf0OGBdw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:34 2025 by rpki-client