Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: 1PiUXd6ZTGQU03f3lsDNVLxo77IgKcDAYpjitB2pHfk=
Subject key identifier: D5:BD:90:9C:F6:6D:74:80:B1:D3:AD:C6:99:09:0D:48:78:65:3C:26
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 0194BCAA2A7035663020893EAE07785DBCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 0F2B
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: IIxqtkACFs+0LRDUiIshbPN/RngxS0NUL4G/7nhynrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:70:35:66:30:20:89:3e:ae:07:78:5d:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=d5bd909cf66d7480b1d3adc699090d4878653c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:cb:1a:8e:c1:f5:93:cd:4c:2a:20:ac:ee:
35:ac:00:e6:a3:f4:6e:c1:e3:45:42:e7:fc:d1:52:
1c:94:67:78:dd:94:a3:06:52:48:84:fd:5d:53:96:
7c:21:d9:51:e8:1c:ca:66:1e:6e:8f:5b:d3:3e:67:
01:c1:ce:cb:d9:4e:1d:e7:76:38:76:26:9b:c1:00:
50:6e:34:5e:a7:a7:94:9c:f0:b2:03:3e:d3:da:b5:
22:de:07:6b:b9:8d:10:16:1b:5e:a9:4a:80:0c:d9:
ec:93:9c:35:64:46:12:c7:fa:05:f2:16:de:99:d0:
c9:e0:d4:e0:72:c7:db:c3:61:b6:b3:3f:5c:10:c3:
34:ff:63:01:59:7c:ee:13:71:30:f1:0d:1d:75:7f:
56:21:53:ca:d6:15:47:53:e0:1e:a5:87:81:e6:00:
b9:56:36:10:1a:c6:12:9a:67:92:15:4d:44:18:a7:
2f:5c:86:be:f9:f1:81:99:c1:fd:9a:70:a9:73:fc:
fa:34:7a:ee:d5:8e:94:aa:1c:3c:4a:6b:f7:83:58:
38:49:a5:15:27:0b:bc:18:50:f8:0e:fa:59:a6:03:
48:11:e7:49:3a:ef:60:eb:ae:d8:86:36:56:89:32:
02:1b:d4:1a:1d:7c:d5:c7:0e:9a:de:76:9a:ff:4e:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:90:9C:F6:6D:74:80:B1:D3:AD:C6:99:09:0D:48:78:65:3C:26
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:b5:c6:af:dc:ed:5a:c3:b6:e2:7c:89:08:fe:45:0b:42:
c3:0f:2c:03:97:db:c2:df:d0:fd:79:e7:b5:77:2b:1c:61:dd:
72:17:41:02:fa:89:c3:d7:bb:6c:44:ed:37:50:cb:96:f3:0d:
09:53:86:8f:99:dc:83:44:8f:f4:ca:82:91:db:25:06:98:67:
df:55:3c:89:8e:33:8a:88:9e:6e:0b:35:a1:d4:00:74:cb:d9:
f0:bb:13:d4:3c:ee:54:5d:8e:8f:29:be:7f:47:39:b9:f3:1a:
9f:a1:35:77:2a:2e:2c:47:64:2f:99:69:10:ed:95:ad:68:eb:
fa:c5:55:00:3a:86:d5:6b:73:bb:22:77:07:62:11:09:0a:72:
2a:35:2c:0b:f7:75:5d:3e:52:8c:68:38:f4:d7:ca:fe:d4:c0:
df:83:7f:21:d3:87:84:e4:ac:c0:45:54:e5:4c:e2:77:55:56:
65:5d:e7:38:7b:ff:ca:36:a5:e0:f3:1b:fd:9d:48:69:48:52:
10:d7:9f:9e:80:7b:d1:c8:a8:0b:da:e2:30:99:1e:75:d4:f3:
cf:e4:de:39:9c:60:4c:ec:23:ae:5b:61:e6:61:4f:01:95:e2:
9f:c8:40:67:c6:94:bb:24:71:17:78:01:78:df:7e:32:73:c3:
af:ce:b5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qipwNWYwIIk+rgd4Xby3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDA2Y2Q0ZWFiYzU1YjM2YzkzMDg5ZjE0ZDBmYTZlMGZh
MGNjNmQwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
EyhkNWJkOTA5Y2Y2NmQ3NDgwYjFkM2FkYzY5OTA5MGQ0ODc4NjUzYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDbLGo7B9ZPNTCogrO41rADmo/Ru
weNFQuf80VIclGd43ZSjBlJIhP1dU5Z8IdlR6BzKZh5uj1vTPmcBwc7L2U4d53Y4
diabwQBQbjRep6eUnPCyAz7T2rUi3gdruY0QFhteqUqADNnsk5w1ZEYSx/oF8hbe
mdDJ4NTgcsfbw2G2sz9cEMM0/2MBWXzuE3Ew8Q0ddX9WIVPK1hVHU+AepYeB5gC5
VjYQGsYSmmeSFU1EGKcvXIa++fGBmcH9mnCpc/z6NHru1Y6Uqhw8Smv3g1g4SaUV
Jwu8GFD4DvpZpgNIEedJOu9g667YhjZWiTICG9QaHXzVxw6a3naa/07uyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW9kJz2bXSAsdOtxpkJDUh4ZTwmMB8GA1UdIwQY
MBaAFCcAbNTqvFWzbJMInxTQ+m4PoMxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgt
ZGNlMTI4MDIyYWM0LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgtZGNlMTI4MDIyYWM0
LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexO1xq/c
7VrDtuJ8iQj+RQtCww8sA5fbwt/Q/XnntXcrHGHdchdBAvqJw9e7bETtN1DLlvMN
CVOGj5ncg0SP9MqCkdslBphn31U8iY4zioiebgs1odQAdMvZ8LsT1DzuVF2Ojym+
f0c5ufMan6E1dyouLEdkL5lpEO2VrWjr+sVVADqG1WtzuyJ3B2IRCQpyKjUsC/d1
XT5SjGg49NfK/tTA34N/IdOHhOSswEVU5Uzid1VWZV3nOHv/yjal4PMb/Z1IaUhS
ENefnoB70cioC9riMJkeddTzz+TeOZxgTOwjrlth5mFPAZXin8hAZ8aUuyRxF3gB
eN9+MnPDr861pA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:39 2025 by rpki-client