Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: Am4rU2yQ3shrRjaTWlR7LK+il4jCLMWgRpj23QXBen4=
Subject key identifier: D1:E0:85:78:AF:71:64:39:EB:9A:E8:FC:46:CF:16:AB:E0:47:9C:5D
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 0194BC3C8513A5CCCA2C102A66C610A8F87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 0ED0
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: 7Gt3VaJh1oyaDk0vGEBckyrZejCW1xUP8nHCXHf4Etk=)
2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:13:a5:cc:ca:2c:10:2a:66:c6:10:a8:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=d1e08578af716439eb9ae8fc46cf16abe0479c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:b5:71:4f:a4:8b:5c:b7:44:0d:b3:11:19:
42:e0:74:ac:ca:aa:34:eb:ac:10:ad:75:ac:27:89:
a3:99:80:50:f3:ad:60:da:80:f2:e7:09:96:17:9a:
ee:0b:25:15:f8:20:b8:67:7a:b3:b2:5b:69:4c:c8:
70:f0:53:f2:73:d7:18:2d:5b:5c:e8:1a:9b:7c:0d:
38:94:26:9c:db:e4:01:a2:03:24:a8:d3:db:b7:8c:
72:ee:c6:7d:10:9f:7b:46:06:e8:e5:70:a5:7a:0b:
17:7a:c4:c7:6e:7a:f9:46:5f:74:fe:5b:d9:61:50:
a0:f9:ab:fe:0f:d7:50:38:1c:e3:0e:f6:64:4c:3c:
36:85:de:3d:09:71:c6:0f:f8:05:90:95:f2:45:93:
0d:17:52:73:74:a0:f4:ab:d2:b6:3a:2d:ed:fa:8f:
97:6f:e8:9b:26:3d:65:25:0e:b2:a3:fe:01:5f:79:
60:f4:55:6b:f8:a7:e7:e3:4d:6c:e0:3a:24:03:e8:
cc:b2:34:af:9e:47:d4:17:22:65:97:c7:85:91:fb:
20:06:2f:ab:74:90:30:5e:3e:77:77:1a:74:b3:87:
3c:3a:4d:bc:ea:76:a6:50:fa:b6:1c:af:5a:f7:6c:
0e:63:ea:16:69:7d:e3:b3:25:da:ab:b4:4f:72:3b:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:85:78:AF:71:64:39:EB:9A:E8:FC:46:CF:16:AB:E0:47:9C:5D
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:33:df:af:96:15:7c:e6:4e:38:6e:4b:d7:5d:b2:0e:5d:cb:
66:a7:42:76:6b:d6:4a:21:91:cc:5c:d8:ff:49:44:d4:e0:2b:
d0:36:9f:3c:2a:ea:fb:1a:b3:e2:95:94:6a:dd:1d:c7:ef:ed:
81:4b:51:13:6e:bf:ca:6c:eb:3b:5a:4a:40:12:00:69:d4:64:
09:ff:fe:45:bd:e6:00:6e:38:39:22:31:00:1d:4d:9a:43:21:
6a:49:1e:d6:64:aa:80:26:79:a4:ad:d9:e3:cf:77:58:36:e5:
a3:83:b0:da:40:ab:f4:b7:3a:01:4a:32:01:5f:fa:9a:a7:80:
cf:df:0c:0f:e4:f7:47:f4:00:31:14:ed:7e:ee:01:63:bf:b2:
9a:ef:32:c4:48:a1:25:51:b1:87:c0:cb:e2:4f:25:9a:63:57:
d4:99:91:ad:a9:e6:67:c1:3d:0c:e2:b5:b0:d8:dc:ad:e9:ee:
1f:ec:a7:11:2a:64:b6:b0:95:21:2d:df:fc:4b:75:f5:f6:89:
0e:41:57:3f:44:3d:fa:7c:d6:ca:0e:e3:6a:ae:8f:6e:9f:67:
e1:21:70:4a:80:27:23:37:ad:e6:11:15:80:1f:f5:cb:15:e6:
d1:a8:57:0b:55:e4:1c:66:a0:b7:ca:c2:84:53:4d:c3:fe:25:
e9:c1:7b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIUTpczKLBAqZsYQqPh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1
MTYyNTIwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
EyhkMWUwODU3OGFmNzE2NDM5ZWI5YWU4ZmM0NmNmMTZhYmUwNDc5YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ny1cU+ki1y3RA2zERlC4HSsyqo0
66wQrXWsJ4mjmYBQ861g2oDy5wmWF5ruCyUV+CC4Z3qzsltpTMhw8FPyc9cYLVtc
6BqbfA04lCac2+QBogMkqNPbt4xy7sZ9EJ97Rgbo5XClegsXesTHbnr5Rl90/lvZ
YVCg+av+D9dQOBzjDvZkTDw2hd49CXHGD/gFkJXyRZMNF1JzdKD0q9K2Oi3t+o+X
b+ibJj1lJQ6yo/4BX3lg9FVr+Kfn401s4DokA+jMsjSvnkfUFyJll8eFkfsgBi+r
dJAwXj53dxp0s4c8Ok286namUPq2HK9a92wOY+oWaX3jsyXaq7RPcjtsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHghXivcWQ565ro/EbPFqvgR5xdMB8GA1UdIwQY
MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt
NjdjZDJiNDU5YWFlLzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl
LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDPfr5YV
fOZOOG5L112yDl3LZqdCdmvWSiGRzFzY/0lE1OAr0DafPCrq+xqz4pWUat0dx+/t
gUtRE26/ymzrO1pKQBIAadRkCf/+Rb3mAG44OSIxAB1NmkMhakke1mSqgCZ5pK3Z
4893WDblo4Ow2kCr9Lc6AUoyAV/6mqeAz98MD+T3R/QAMRTtfu4BY7+ymu8yxEih
JVGxh8DL4k8lmmNX1JmRranmZ8E9DOK1sNjcrenuH+ynESpktrCVIS3f/Et19faJ
DkFXP0Q9+nzWyg7jaq6Pbp9n4SFwSoAnIzet5hEVgB/1yxXm0ahXC1XkHGagt8rC
hFNNw/4l6cF7Rw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:57 2025 by rpki-client