Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: F1QNMadlRJ838aGnASoiOWhXQiNM/1ivUd3ntAY9ZTQ=
Subject key identifier: 47:E6:51:6F:77:2B:5A:56:67:4F:11:77:DD:75:9D:B3:FA:55:84:78
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 0194BC0518D662CC6CED0B8B6E6DFE0656BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 1105
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: n5rzJkokvA9T9qrSt2dGuVGBc+W2zLxiKC0MUwd3M14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:d6:62:cc:6c:ed:0b:8b:6e:6d:fe:06:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=47e6516f772b5a56674f1177dd759db3fa558478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:f5:1d:b4:35:95:d4:bc:14:13:90:c0:28:
65:e6:86:64:ca:ce:2a:d2:dd:b5:39:f5:08:34:fd:
5c:c6:c6:e9:12:a6:5a:3a:b9:ac:d5:f6:86:fa:9a:
15:89:2d:52:c4:5c:ee:f3:7a:f3:ac:c2:62:91:22:
e4:90:a2:fb:7e:a9:3f:76:8b:ac:95:eb:40:42:0f:
aa:45:d8:82:a8:c2:a6:85:56:94:64:52:b1:97:ea:
4d:4d:c2:75:a1:bc:06:7e:bb:1b:49:e6:2a:2a:a5:
bc:0a:5b:a2:c0:41:ff:0d:f8:fc:91:34:d7:3b:59:
f2:aa:be:dc:70:3d:d2:3f:5c:cf:ff:c7:f2:d2:15:
32:05:89:09:16:ce:8f:3b:29:af:bb:79:31:fc:75:
a8:d3:e5:95:e8:9f:93:8a:32:aa:73:c8:58:33:f1:
9e:f8:07:89:56:9d:6c:6f:d7:f2:11:7f:c2:a7:93:
8d:38:8a:a0:c1:96:dd:58:96:fc:d7:59:c5:c3:ed:
09:34:12:a1:00:a9:60:06:a3:47:19:dc:7c:5d:88:
75:39:47:b9:08:7d:88:9c:ed:07:6d:ad:b2:a9:91:
38:52:0f:00:7f:de:15:b4:84:4f:cf:c5:8a:7c:79:
45:85:85:c7:71:f3:88:79:90:3e:1d:91:4a:3a:12:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:51:6F:77:2B:5A:56:67:4F:11:77:DD:75:9D:B3:FA:55:84:78
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1f:19:b4:e0:1c:64:d5:a0:12:3e:38:d2:cf:42:74:4b:ec:
dd:c2:ef:f8:20:99:1b:a3:6e:c5:bd:9e:10:e0:5d:23:5d:a9:
e0:86:a0:3e:a1:b5:4e:4d:b6:d0:c1:5d:df:5a:60:3e:3f:e4:
64:f8:20:ac:da:77:cb:ab:ed:65:b1:33:71:49:49:4a:25:0f:
76:1f:77:63:b5:f1:aa:2f:25:6a:a0:12:88:7f:94:84:d9:11:
54:04:64:a3:43:4e:2e:7c:f3:0e:fc:96:f7:31:d6:d0:de:ae:
76:61:1e:a4:85:c3:81:bc:7d:c1:dd:b1:bd:75:86:7a:37:0d:
78:59:69:52:44:c2:98:24:80:b9:16:e8:71:ed:55:32:71:c1:
f2:21:f0:c0:f7:06:d1:77:6f:9f:a6:ea:c1:4c:5f:0b:97:3e:
d3:d4:96:62:e2:71:db:0f:9a:51:7b:cc:53:85:f9:e3:e2:aa:
a6:42:c2:f5:61:64:62:df:75:31:4b:53:20:f4:f3:65:f2:fe:
98:1c:9f:13:67:d5:1f:5a:e0:82:e3:c9:88:1e:4e:0d:68:21:
f4:2c:cc:69:c4:bc:6c:6a:5b:2a:91:b6:1c:93:65:90:56:fe:
e5:22:62:6e:43:bc:89:d8:c6:00:18:82:a6:21:5d:13:23:09:
85:b8:4b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRjWYsxs7QuLbm3+Bla6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjUwMTMxMTEwMDM4WhcNMjUwMjAxMTEwMDM4WjAzMTEwLwYDVQQD
Eyg0N2U2NTE2Zjc3MmI1YTU2Njc0ZjExNzdkZDc1OWRiM2ZhNTU4NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviP1HbQ1ldS8FBOQwChl5oZkys4q
0t21OfUINP1cxsbpEqZaOrms1faG+poViS1SxFzu83rzrMJikSLkkKL7fqk/dous
letAQg+qRdiCqMKmhVaUZFKxl+pNTcJ1obwGfrsbSeYqKqW8CluiwEH/Dfj8kTTX
O1nyqr7ccD3SP1zP/8fy0hUyBYkJFs6POymvu3kx/HWo0+WV6J+TijKqc8hYM/Ge
+AeJVp1sb9fyEX/Cp5ONOIqgwZbdWJb811nFw+0JNBKhAKlgBqNHGdx8XYh1OUe5
CH2InO0Hba2yqZE4Ug8Af94VtIRPz8WKfHlFhYXHcfOIeZA+HZFKOhIh8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfmUW93K1pWZ08Rd911nbP6VYR4MB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlR8ZtOAc
ZNWgEj440s9CdEvs3cLv+CCZG6Nuxb2eEOBdI12p4IagPqG1Tk220MFd31pgPj/k
ZPggrNp3y6vtZbEzcUlJSiUPdh93Y7Xxqi8laqASiH+UhNkRVARko0NOLnzzDvyW
9zHW0N6udmEepIXDgbx9wd2xvXWGejcNeFlpUkTCmCSAuRboce1VMnHB8iHwwPcG
0Xdvn6bqwUxfC5c+09SWYuJx2w+aUXvMU4X54+KqpkLC9WFkYt91MUtTIPTzZfL+
mByfE2fVH1rgguPJiB5ODWgh9CzMacS8bGpbKpG2HJNlkFb+5SJibkO8idjGABiC
piFdEyMJhbhLKw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:16 2025 by rpki-client