Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: IfCDTigkZcBHyjgDw3QFKJY5HRHFUYrsePo/kfhd7S4=
Subject key identifier: 5F:4D:9B:1B:5F:B8:96:F0:83:37:56:3B:FD:82:5B:4A:70:D1:BB:F9
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 0194BBCDF921658E666E263EA1D6CE854F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: +he8fIH4y7Ylori6xhVjpEJ3KCk/2ZRR02F5qdQvTEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:21:65:8e:66:6e:26:3e:a1:d6:ce:85:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=5f4d9b1b5fb896f08337563bfd825b4a70d1bbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:91:0e:28:ed:9a:49:db:5b:d5:7b:24:e2:
44:86:69:54:16:59:5c:10:fc:f7:5d:ad:64:98:7c:
1d:76:b8:32:d3:e7:b7:0b:e7:3c:d6:f7:e3:17:b9:
d6:5d:3a:96:a4:18:10:02:57:b0:71:dc:bb:05:a2:
a3:74:05:be:dc:14:4a:d6:a2:2f:27:d7:37:e1:7d:
b6:05:ab:81:05:64:a7:f8:47:60:22:3c:01:13:8c:
13:c2:d1:0e:f6:b7:3d:86:9c:17:6b:9f:61:c4:73:
55:47:2d:e7:35:aa:5a:c1:85:87:01:0e:56:68:f1:
48:b7:e0:8e:ad:7e:e7:de:f7:76:aa:15:8b:b8:57:
96:c1:c0:55:fa:35:16:fd:75:8d:57:cd:ff:66:1e:
26:c7:ff:c2:fd:ae:c2:96:21:b7:9e:73:ee:e1:ea:
27:69:e1:c5:cb:b7:dc:a0:4a:ea:23:81:9e:28:14:
c5:2d:d3:f5:31:91:64:b4:35:92:8a:03:69:5d:7d:
83:bb:20:32:d5:27:9d:83:73:65:89:7d:6d:58:3b:
fc:bc:34:8b:e6:2d:2c:cf:94:b3:a7:09:77:9c:3d:
8c:5b:62:fc:87:39:45:15:e2:ce:a3:91:81:82:fd:
f0:cb:b6:49:4b:48:e4:a1:7e:4e:bb:f8:39:c6:80:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:9B:1B:5F:B8:96:F0:83:37:56:3B:FD:82:5B:4A:70:D1:BB:F9
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:40:1f:ed:ca:28:aa:a6:d2:6d:7e:8d:5f:f4:d7:a4:cc:
9d:fc:21:0b:9e:6a:ab:ba:b2:ed:70:1b:dc:99:e7:08:02:7c:
39:72:1f:cf:b0:b4:52:bb:8e:54:be:67:bb:0b:a6:d3:ec:60:
48:5d:ed:d2:24:ad:cb:3d:b3:48:1e:f9:45:5f:b4:3b:2c:c0:
1d:fe:5b:ea:28:2a:56:87:3b:a3:51:ae:ac:e3:68:1c:76:8c:
a3:f4:1d:02:53:22:ac:e4:71:bb:1b:18:63:f7:3a:42:ab:19:
de:87:bb:57:f3:ee:d7:38:cb:15:57:ea:7c:53:e0:42:0c:3d:
99:96:1a:2f:0d:f2:5c:f4:05:b9:b3:12:af:c2:0b:54:df:45:
4d:40:00:34:df:1d:14:e4:e9:17:d7:e3:d8:b4:f7:66:ab:8b:
54:fb:53:a0:ab:25:fb:86:f2:11:35:23:13:ce:79:66:6e:f8:
30:2d:d8:2f:8a:56:80:8f:e3:aa:59:c8:e6:31:a9:ab:34:1e:
55:f8:eb:34:4a:c2:2c:b6:8a:b9:3c:83:b2:e1:a8:a8:66:73:
aa:82:6c:40:da:99:29:27:51:6b:41:b5:8f:0c:48:45:1e:8c:
5a:89:7f:ff:75:17:ea:c5:00:0a:3e:c2:ce:60:6b:0f:b7:31:
80:55:66:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfkhZY5mbiY+odbOhU8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmM2YTk1NGVkMDA1MjExNmNhMjllZTBmY2Y1NWY3NTJk
OGU0NzYwHhcNMjUwMTMxMTAwMDI1WhcNMjUwMjAxMTAwMDI1WjAzMTEwLwYDVQQD
Eyg1ZjRkOWIxYjVmYjg5NmYwODMzNzU2M2JmZDgyNWI0YTcwZDFiYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wqRDijtmknbW9V7JOJEhmlUFllc
EPz3Xa1kmHwddrgy0+e3C+c81vfjF7nWXTqWpBgQAlewcdy7BaKjdAW+3BRK1qIv
J9c34X22BauBBWSn+EdgIjwBE4wTwtEO9rc9hpwXa59hxHNVRy3nNapawYWHAQ5W
aPFIt+COrX7n3vd2qhWLuFeWwcBV+jUW/XWNV83/Zh4mx//C/a7CliG3nnPu4eon
aeHFy7fcoErqI4GeKBTFLdP1MZFktDWSigNpXX2DuyAy1Sedg3NliX1tWDv8vDSL
5i0sz5Szpwl3nD2MW2L8hzlFFeLOo5GBgv3wy7ZJS0jkoX5Ou/g5xoA8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9NmxtfuJbwgzdWO/2CW0pw0bv5MB8GA1UdIwQY
MBaAFI4sapVO0AUhFsop7g/PVfdS2OR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iMmU1NmMtZWVjNy00MDZiLTk1MTYt
MzRlOGE5Y2RmMjE4LzEvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iMmU1NmMtZWVjNy00MDZiLTk1MTYtMzRlOGE5Y2RmMjE4
LzEvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0pAH+3K
KKqm0m1+jV/016TMnfwhC55qq7qy7XAb3JnnCAJ8OXIfz7C0UruOVL5nuwum0+xg
SF3t0iStyz2zSB75RV+0OyzAHf5b6igqVoc7o1GurONoHHaMo/QdAlMirORxuxsY
Y/c6QqsZ3oe7V/Pu1zjLFVfqfFPgQgw9mZYaLw3yXPQFubMSr8ILVN9FTUAANN8d
FOTpF9fj2LT3ZquLVPtToKsl+4byETUjE855Zm74MC3YL4pWgI/jqlnI5jGpqzQe
VfjrNErCLLaKuTyDsuGoqGZzqoJsQNqZKSdRa0G1jwxIRR6MWol//3UX6sUACj7C
zmBrD7cxgFVm4w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:11 2025 by rpki-client