Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: F4pCk+Rl0f5PHa9EBKMtMKgZYYUd7MT2qsV9T9s/DLQ=
Subject key identifier: CD:12:BC:48:29:D6:94:AF:EB:5E:D5:AF:F8:5F:B8:AE:3F:AB:77:FA
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 0194BD175F86F9E8D6F68B20324CE45FCFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 05E5
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: tu6oLW+89B0ZzakdL8rmzPqD7Bh8J5kvrFHT8xjcf2U=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:86:f9:e8:d6:f6:8b:20:32:4c:e4:5f:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=cd12bc4829d694afeb5ed5aff85fb8ae3fab77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:cd:a2:84:38:14:1b:a8:87:31:ce:c7:62:
11:37:2f:b3:34:6d:eb:49:92:c6:0a:24:03:e6:a4:
97:f4:a4:8a:f1:11:3b:5f:90:41:50:1b:a3:29:e3:
89:98:1e:d9:0a:36:48:af:5a:62:a7:9b:5b:e8:48:
c0:37:d6:d4:eb:5a:ad:75:e4:90:9d:27:12:c1:b7:
e2:e4:27:9d:97:14:72:e1:c9:fc:2e:d4:f9:78:ed:
79:c0:4e:9c:35:d4:49:41:54:4d:99:10:88:48:44:
e1:64:5f:ec:83:ba:90:a8:ab:eb:61:56:f9:cd:3c:
17:e4:2c:cb:57:41:c3:41:c1:f8:c6:51:53:61:c0:
25:0b:45:73:2d:07:d2:ca:96:c8:cd:e9:2c:50:98:
62:f4:f3:d7:53:46:d0:d3:13:cf:2b:bd:f5:fe:93:
88:bb:70:cb:17:cc:9a:8b:51:48:a9:b6:8b:6b:f8:
be:5a:0f:9d:89:c0:85:5f:f8:ef:20:e2:79:58:f0:
58:7c:01:9a:4b:60:b4:e6:05:c3:e9:e7:c5:85:87:
9c:f0:66:14:59:da:21:f5:73:db:74:6a:7b:ee:e0:
d2:2d:a0:7f:85:d4:8a:80:8c:ca:da:62:af:9f:b2:
21:d7:a0:2b:2e:1a:07:cc:0b:ca:c0:79:fc:90:d8:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:BC:48:29:D6:94:AF:EB:5E:D5:AF:F8:5F:B8:AE:3F:AB:77:FA
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a8:e1:f1:a4:8e:6e:78:90:06:fb:e0:d1:45:52:d5:ec:60:
84:7b:b1:9a:0a:d9:35:c4:fc:a4:2c:69:57:0e:f3:f2:ac:c0:
14:7f:f5:cc:44:f9:4d:90:16:3b:86:d4:fb:5a:f6:94:fc:8b:
b6:f5:3b:e6:28:54:d2:79:00:12:68:fe:5a:08:1a:b3:4e:80:
47:be:b6:88:86:e9:6f:1c:70:eb:d6:05:83:92:cc:e8:ba:cc:
34:aa:ad:27:6b:6d:52:f9:73:03:af:e3:1d:31:04:bd:13:d3:
aa:41:8a:23:9d:59:bb:09:cf:ea:9a:fa:9d:5d:cd:3e:0a:85:
33:dc:4d:b3:9a:40:08:6f:75:de:c4:36:24:89:a2:21:8f:0f:
7d:60:fd:33:66:84:6c:6f:ba:a3:54:e1:f2:67:6e:be:2a:33:
f5:7d:d1:85:ec:e9:c0:28:6b:e7:d8:5f:54:1d:6d:f1:a1:f5:
e9:04:0f:55:d5:02:e4:74:9d:66:99:06:43:75:3e:68:a7:c0:
15:1b:9f:a0:48:22:57:8e:bc:24:58:96:01:47:a0:42:ba:c1:
b0:00:fc:15:22:ee:34:a0:89:21:19:5c:23:7b:2c:ea:09:cc:
86:f8:92:46:c3:a8:ca:1b:85:31:b4:2f:90:39:99:49:96:3b:
6b:8f:69:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1+G+ejW9osgMkzkX8+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy
MzBiYTcwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
EyhjZDEyYmM0ODI5ZDY5NGFmZWI1ZWQ1YWZmODVmYjhhZTNmYWI3N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBPNooQ4FBuohzHOx2IRNy+zNG3r
SZLGCiQD5qSX9KSK8RE7X5BBUBujKeOJmB7ZCjZIr1pip5tb6EjAN9bU61qtdeSQ
nScSwbfi5CedlxRy4cn8LtT5eO15wE6cNdRJQVRNmRCISEThZF/sg7qQqKvrYVb5
zTwX5CzLV0HDQcH4xlFTYcAlC0VzLQfSypbIzeksUJhi9PPXU0bQ0xPPK731/pOI
u3DLF8yai1FIqbaLa/i+Wg+dicCFX/jvIOJ5WPBYfAGaS2C05gXD6efFhYec8GYU
Wdoh9XPbdGp77uDSLaB/hdSKgIzK2mKvn7Ih16ArLhoHzAvKwHn8kNh9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0SvEgp1pSv617Vr/hfuK4/q3f6MB8GA1UdIwQY
MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt
NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3
LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqjh8aSO
bniQBvvg0UVS1exghHuxmgrZNcT8pCxpVw7z8qzAFH/1zET5TZAWO4bU+1r2lPyL
tvU75ihU0nkAEmj+Wggas06AR762iIbpbxxw69YFg5LM6LrMNKqtJ2ttUvlzA6/j
HTEEvRPTqkGKI51ZuwnP6pr6nV3NPgqFM9xNs5pACG913sQ2JImiIY8PfWD9M2aE
bG+6o1Th8mduvioz9X3RhezpwChr59hfVB1t8aH16QQPVdUC5HSdZpkGQ3U+aKfA
FRufoEgiV468JFiWAUegQrrBsAD8FSLuNKCJIRlcI3ss6gnMhviSRsOoyhuFMbQv
kDmZSZY7a49p+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:55 2025 by rpki-client