Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: /pHyacWaLlw1FcqqqYhM5TyON2rxZXe+aCbQYyS5Fec=
Subject key identifier: 7A:3E:A5:0D:EA:8D:09:6D:FD:7E:92:00:6B:C1:DB:ED:14:B8:5E:AF
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0194BCE0E49D782D2852F5D13ED12876DF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 02D3
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: IufdbQ/noBACf4ep8SXM3K3wlkbHwzoS4KC1rLw9dgA=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:9d:78:2d:28:52:f5:d1:3e:d1:28:76:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=7a3ea50dea8d096dfd7e92006bc1dbed14b85eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:84:b0:92:eb:99:c0:12:c8:56:8b:48:7e:
28:99:0f:00:6a:c8:d8:1e:15:94:9a:bb:9c:20:7d:
e2:8e:b7:90:91:84:df:fe:74:70:01:2d:4f:90:ca:
cb:76:cf:77:b9:76:d2:f1:0c:bb:ed:89:2b:e7:50:
58:af:3f:57:f9:d9:5f:12:ee:d2:96:f3:88:f9:2a:
35:b0:70:96:d6:66:0a:15:29:1b:4c:9f:77:a4:af:
08:8b:c7:3b:3b:44:6d:54:cb:91:89:15:e0:fd:29:
c3:2a:d1:87:10:ee:57:f3:85:57:23:99:f1:1b:b1:
9c:0f:24:60:f0:81:56:68:d7:3f:cf:16:af:aa:15:
67:60:c3:c9:1d:78:56:e4:c9:91:09:73:d0:7e:59:
0e:0d:b2:8b:ca:08:ae:3d:77:85:61:72:c7:a6:55:
68:3a:f1:cd:41:e5:05:69:2b:11:02:de:bf:88:98:
d0:28:5f:cd:e8:e9:db:04:dd:16:41:97:52:60:b3:
49:2f:d0:03:ab:b2:9f:fe:40:2a:bc:cd:30:59:c8:
e3:e6:e3:68:02:a2:74:ee:00:59:92:65:7e:8e:6f:
a9:2a:11:36:f0:06:1a:89:89:11:43:fa:c6:6b:b9:
30:29:0c:06:3b:cb:12:82:dc:c6:78:f7:81:2b:62:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:A5:0D:EA:8D:09:6D:FD:7E:92:00:6B:C1:DB:ED:14:B8:5E:AF
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:84:0a:fc:d4:5c:ee:17:27:b6:98:5a:9c:52:b7:66:7e:
95:de:81:5f:ed:33:8a:e0:b8:c9:5b:18:ba:e9:8c:3a:1c:7b:
7c:10:fe:92:1a:ae:e4:d8:89:b5:f7:e5:22:e2:dc:d7:6c:dd:
f2:60:36:56:7e:d5:23:94:cd:0c:1d:bb:0c:aa:30:00:26:f9:
e0:2c:70:ef:1e:45:24:eb:72:8e:fb:1c:dd:77:07:1e:a8:00:
3a:8e:b2:36:f7:90:82:c8:99:5f:cb:d8:9d:60:51:7b:f1:e6:
6e:c6:2f:46:65:e5:d3:23:f0:1f:cc:6f:b2:fd:9f:5d:99:6b:
96:9d:b9:22:78:08:65:e7:8a:eb:a9:96:2d:20:64:1b:41:ef:
c3:91:b7:5e:71:27:a1:58:0a:71:7b:9b:61:8d:71:4c:8f:bd:
b7:64:2f:a3:ee:19:aa:22:e3:fe:1a:49:c1:3a:fc:f2:cd:b8:
9d:34:17:f8:a7:c0:d6:05:6f:51:90:08:29:c5:84:f2:12:f4:
ae:1e:88:3f:79:5f:8b:bb:ed:b1:63:8e:08:e2:ae:82:ed:e5:
bb:fe:b0:81:30:aa:03:94:c4:b7:79:b6:99:65:5a:28:13:99:
da:d6:3c:9b:6b:2d:ea:fc:69:78:c7:3d:4b:1f:f5:ce:18:ca:
e2:e6:d7:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OSdeC0oUvXRPtEodt+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
Eyg3YTNlYTUwZGVhOGQwOTZkZmQ3ZTkyMDA2YmMxZGJlZDE0Yjg1ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+6EsJLrmcASyFaLSH4omQ8AasjY
HhWUmrucIH3ijreQkYTf/nRwAS1PkMrLds93uXbS8Qy77Ykr51BYrz9X+dlfEu7S
lvOI+So1sHCW1mYKFSkbTJ93pK8Ii8c7O0RtVMuRiRXg/SnDKtGHEO5X84VXI5nx
G7GcDyRg8IFWaNc/zxavqhVnYMPJHXhW5MmRCXPQflkODbKLygiuPXeFYXLHplVo
OvHNQeUFaSsRAt6/iJjQKF/N6OnbBN0WQZdSYLNJL9ADq7Kf/kAqvM0wWcjj5uNo
AqJ07gBZkmV+jm+pKhE28AYaiYkRQ/rGa7kwKQwGO8sSgtzGePeBK2IERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo+pQ3qjQlt/X6SAGvB2+0UuF6vMB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIuECvzU
XO4XJ7aYWpxSt2Z+ld6BX+0ziuC4yVsYuumMOhx7fBD+khqu5NiJtfflIuLc12zd
8mA2Vn7VI5TNDB27DKowACb54Cxw7x5FJOtyjvsc3XcHHqgAOo6yNveQgsiZX8vY
nWBRe/HmbsYvRmXl0yPwH8xvsv2fXZlrlp25IngIZeeK66mWLSBkG0Hvw5G3XnEn
oVgKcXubYY1xTI+9t2Qvo+4ZqiLj/hpJwTr88s24nTQX+KfA1gVvUZAIKcWE8hL0
rh6IP3lfi7vtsWOOCOKugu3lu/6wgTCqA5TEt3m2mWVaKBOZ2tY8m2st6vxpeMc9
Sx/1zhjK4ubXhg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:37 2025 by rpki-client