Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: r+DMS3kuHmY1h/zBtNP1b7W80CHdBexEV1Yd7/iKUNA=
Subject key identifier: D2:51:17:5D:C2:94:0C:7F:A1:44:A3:66:F2:BB:FE:0F:9C:80:F9:EC
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 0194BD1747D547AAE11C7AD6C18C10F36C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 0EE1
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: BM2CHyZvd9ij3Pk18VvCdobRL0TBf7sJCKGENTEwR9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:47:d5:47:aa:e1:1c:7a:d6:c1:8c:10:f3:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=d251175dc2940c7fa144a366f2bbfe0f9c80f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:80:61:cd:cd:11:bd:7a:b9:4a:c2:35:1f:
bf:52:6e:d6:dd:81:18:7f:d2:37:49:12:4e:02:b5:
2e:b4:b8:1f:8d:9d:ef:d8:8a:84:ee:eb:c7:1a:b9:
d5:24:c5:3d:c8:08:d1:70:5d:a9:02:fc:8a:94:3c:
bb:3d:85:97:cf:1d:48:3f:da:8a:26:05:32:2d:ff:
bc:2d:f5:bb:66:53:85:f2:71:cb:81:6c:aa:ed:98:
af:e1:28:a5:80:96:54:a1:01:45:ad:7c:98:31:1d:
4f:bc:72:09:32:d3:6e:9d:b0:86:ac:a5:2e:e5:5c:
43:7f:9c:3f:83:73:de:c4:11:15:5d:a3:94:0a:fb:
75:81:e7:bb:d9:fa:e9:41:30:a2:a4:16:64:3b:db:
9a:2d:9f:7e:ad:8a:e9:f1:45:e8:58:d5:f7:b0:26:
0f:00:2d:4c:4a:9d:3c:db:ab:87:1c:47:48:a8:22:
90:4e:fb:db:77:49:c9:8d:fa:d5:23:ce:73:df:08:
6d:40:e7:e9:ee:d4:56:bd:9f:96:b8:fa:63:12:8f:
25:d9:e7:0d:2f:f5:bf:8b:ab:b5:e7:a9:1a:6d:0d:
10:8c:f2:62:c8:aa:27:00:5a:86:97:90:2b:13:1b:
d9:eb:11:80:29:9d:f2:6e:63:19:81:37:78:98:0e:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:17:5D:C2:94:0C:7F:A1:44:A3:66:F2:BB:FE:0F:9C:80:F9:EC
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dc:93:a7:c0:f0:43:60:64:1e:fa:17:70:4e:f1:e0:d4:ff:
ad:1f:fe:55:97:52:06:b2:94:42:af:20:76:c4:75:b2:8d:b9:
1a:38:d0:2b:43:ff:13:6d:1b:7e:bc:cb:2c:51:10:d5:03:3e:
7c:26:12:04:5f:fa:4c:59:70:55:1e:b7:61:21:6a:b5:44:0f:
8a:68:a4:15:83:2a:65:03:10:e5:c4:09:ab:51:62:fe:d0:6a:
98:e6:5c:3a:7c:1f:f1:0a:f6:8c:82:20:f4:92:e0:58:84:7f:
bf:56:54:f1:29:1c:b6:ef:de:b2:b7:c8:9f:be:57:dd:54:fe:
5d:1d:35:4f:d0:a8:f2:fc:78:eb:85:b3:1f:d7:3c:87:55:fb:
d9:4c:69:6a:2d:3b:00:ab:bb:9f:68:a1:47:1d:95:9d:44:aa:
68:0b:c0:95:cd:81:23:ac:2c:1c:19:1e:b3:ae:db:ad:53:2f:
a7:7c:aa:8e:ba:79:de:13:ab:56:d2:fc:05:89:31:91:e7:45:
03:80:29:a3:82:7a:45:d2:97:32:63:47:a6:f4:b6:50:3e:7f:
c7:da:6e:12:8e:b1:b2:2e:fb:b2:d7:61:ad:5e:2b:14:67:f3:
a6:a7:13:ec:91:f8:4e:c6:f1:29:90:24:94:3f:cf:ac:78:cf:
d7:5a:44:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0fVR6rhHHrWwYwQ82yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjUwMTMxMTYwMDA2WhcNMjUwMjAxMTYwMDA2WjAzMTEwLwYDVQQD
EyhkMjUxMTc1ZGMyOTQwYzdmYTE0NGEzNjZmMmJiZmUwZjljODBmOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JKAYc3NEb16uUrCNR+/Um7W3YEY
f9I3SRJOArUutLgfjZ3v2IqE7uvHGrnVJMU9yAjRcF2pAvyKlDy7PYWXzx1IP9qK
JgUyLf+8LfW7ZlOF8nHLgWyq7Ziv4SilgJZUoQFFrXyYMR1PvHIJMtNunbCGrKUu
5VxDf5w/g3PexBEVXaOUCvt1gee72frpQTCipBZkO9uaLZ9+rYrp8UXoWNX3sCYP
AC1MSp0826uHHEdIqCKQTvvbd0nJjfrVI85z3whtQOfp7tRWvZ+WuPpjEo8l2ecN
L/W/i6u156kabQ0QjPJiyKonAFqGl5ArExvZ6xGAKZ3ybmMZgTd4mA4nLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJRF13ClAx/oUSjZvK7/g+cgPnsMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdyTp8Dw
Q2BkHvoXcE7x4NT/rR/+VZdSBrKUQq8gdsR1so25GjjQK0P/E20bfrzLLFEQ1QM+
fCYSBF/6TFlwVR63YSFqtUQPimikFYMqZQMQ5cQJq1Fi/tBqmOZcOnwf8Qr2jIIg
9JLgWIR/v1ZU8Skctu/esrfIn75X3VT+XR01T9Co8vx464WzH9c8h1X72Uxpai07
AKu7n2ihRx2VnUSqaAvAlc2BI6wsHBkes67brVMvp3yqjrp53hOrVtL8BYkxkedF
A4Apo4J6RdKXMmNHpvS2UD5/x9puEo6xsi77stdhrV4rFGfzpqcT7JH4TsbxKZAk
lD/PrHjP11pEBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:57 2025 by rpki-client