Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: vItwTirjKrePK/Vui1JqoKdZ7IrB2X3NojMWBtDLSLM=
Subject key identifier: 2D:9F:7A:58:72:7C:4A:08:96:43:CA:31:35:B8:C0:AC:8A:53:80:FD
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 0194BC72B05682309603ADC9FE2FB90354D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 049D
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: vtdhXqM0WIeOOU+ngkSSAMywcWysZDvdprQK3i4VyS4=)
2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:56:82:30:96:03:ad:c9:fe:2f:b9:03:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=2d9f7a58727c4a089643ca3135b8c0ac8a5380fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:aa:18:d6:70:4b:c2:37:47:e4:ff:b6:50:
b3:a8:21:74:bc:62:49:dd:59:46:e1:20:7c:45:83:
61:3c:86:da:5d:20:a0:40:d9:ca:30:12:99:ff:e5:
ca:5c:4d:a0:d4:ed:17:7c:45:cb:d1:b1:75:a2:f8:
e4:3e:41:32:41:11:70:e1:21:b3:85:0e:bc:93:42:
85:3a:7f:ab:f8:25:a4:a0:6f:f2:15:b0:39:a7:7c:
47:00:1f:71:db:d5:5a:20:fc:28:b3:30:af:36:8a:
b5:bf:40:02:8d:30:51:29:fa:20:f1:e9:44:7a:f6:
e3:c6:90:15:c2:96:1f:15:02:4a:34:4e:7a:b1:54:
75:50:1a:a6:09:d6:bc:62:48:75:51:42:0b:b0:1f:
e8:2a:01:49:8a:1c:93:9e:a7:92:fa:d1:03:b2:2c:
23:da:7c:13:a0:4e:1d:ed:27:f0:6d:e3:85:ac:1e:
4e:d7:55:e7:bb:ee:c0:b2:f6:54:ba:25:43:f1:b3:
6f:60:86:34:38:61:41:6d:8d:09:f0:db:54:f9:ee:
f3:30:3d:ad:d7:7f:0e:68:05:f9:0d:b2:96:d1:76:
70:1f:62:ff:f7:96:df:27:01:31:db:bc:d4:8e:a3:
93:44:68:1e:f3:bf:87:1a:6c:54:e1:98:2b:66:e0:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:7A:58:72:7C:4A:08:96:43:CA:31:35:B8:C0:AC:8A:53:80:FD
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:8b:8c:26:e3:9a:52:3f:d4:1d:0d:30:01:68:5e:3d:e2:
e8:b8:da:5c:14:5a:45:9d:01:4c:ad:4e:83:90:69:df:53:eb:
2d:5e:b1:af:f8:42:f2:36:6b:c0:9b:23:3c:e1:c9:ff:3b:71:
24:64:0b:8c:59:1a:f3:a2:28:a9:30:fd:25:d7:8e:e4:b3:3d:
6b:13:6b:d6:30:fd:92:f1:28:cd:09:31:2b:00:d0:95:28:42:
09:17:65:4b:0e:74:f7:9e:36:78:3c:f4:95:ed:df:72:54:32:
fb:9f:95:c9:7e:83:d7:ad:2f:3b:a6:58:ba:c4:26:09:55:77:
60:31:b3:c0:a7:03:e7:48:e8:81:01:4f:93:d0:54:f0:d7:01:
f5:a9:f3:b5:61:2e:52:f9:70:bb:5e:75:97:30:5d:71:e6:e8:
2e:2a:b9:d1:06:4a:c5:76:2d:0c:0e:7a:90:a4:c2:6d:3b:9b:
da:13:97:6d:b5:df:1a:a7:83:eb:39:fa:b7:6d:e5:f8:bd:76:
2e:04:a5:01:a4:5b:f0:c3:91:eb:b9:44:6e:35:63:b1:c8:f2:
01:92:a0:8d:a4:6d:dd:21:b9:98:c1:e1:7c:84:3c:4b:24:4f:
2d:21:09:08:0e:0a:b3:21:17:6f:07:3c:47:b7:67:75:88:ae:
bd:bd:d2:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crBWgjCWA63J/i+5A1TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh
ODJiYjIwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
EygyZDlmN2E1ODcyN2M0YTA4OTY0M2NhMzEzNWI4YzBhYzhhNTM4MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9GqGNZwS8I3R+T/tlCzqCF0vGJJ
3VlG4SB8RYNhPIbaXSCgQNnKMBKZ/+XKXE2g1O0XfEXL0bF1ovjkPkEyQRFw4SGz
hQ68k0KFOn+r+CWkoG/yFbA5p3xHAB9x29VaIPwoszCvNoq1v0ACjTBRKfog8elE
evbjxpAVwpYfFQJKNE56sVR1UBqmCda8Ykh1UUILsB/oKgFJihyTnqeS+tEDsiwj
2nwToE4d7SfwbeOFrB5O11Xnu+7AsvZUuiVD8bNvYIY0OGFBbY0J8NtU+e7zMD2t
138OaAX5DbKW0XZwH2L/95bfJwEx27zUjqOTRGge87+HGmxU4ZgrZuACKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2felhyfEoIlkPKMTW4wKyKU4D9MB8GA1UdIwQY
MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt
N2JhZmRlNGM0YjI0LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0
LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo26LjCbj
mlI/1B0NMAFoXj3i6LjaXBRaRZ0BTK1Og5Bp31PrLV6xr/hC8jZrwJsjPOHJ/ztx
JGQLjFka86IoqTD9JdeO5LM9axNr1jD9kvEozQkxKwDQlShCCRdlSw509542eDz0
le3fclQy+5+VyX6D160vO6ZYusQmCVV3YDGzwKcD50jogQFPk9BU8NcB9anztWEu
Uvlwu151lzBdceboLiq50QZKxXYtDA56kKTCbTub2hOXbbXfGqeD6zn6t23l+L12
LgSlAaRb8MOR67lEbjVjscjyAZKgjaRt3SG5mMHhfIQ8SyRPLSEJCA4KsyEXbwc8
R7dndYiuvb3SNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:15 2025 by rpki-client