Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: Y+NkxoHOHShQYU19KKadC+B10j+68HLeMrw38XPzhd8=
Subject key identifier: 63:1F:44:E9:93:2D:B5:AD:8C:EB:32:9B:9F:2B:64:14:95:8C:46:86
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 0194BD4E6C751BC0A6FFDD89F3D0FE1EA1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: daBtCCXV1dWrVP45ISEEWCGhUSNnjj1HOAxseBV/7a4=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:75:1b:c0:a6:ff:dd:89:f3:d0:fe:1e:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=631f44e9932db5ad8ceb329b9f2b6414958c4686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:ba:29:51:32:f2:2a:76:09:c7:60:41:90:
63:f6:61:5a:22:ef:8e:35:4b:67:31:62:a2:5a:41:
75:a1:86:6e:e6:a3:f4:29:73:59:23:d0:d4:93:ba:
9c:23:79:7d:6b:26:fe:ac:24:07:ec:43:b5:d8:09:
30:35:23:51:d8:b6:2f:13:b0:d6:61:db:d7:00:a1:
2f:0b:d7:de:63:b7:99:4f:2a:63:82:5f:0a:65:03:
5d:06:c2:ae:6c:5a:48:95:0a:4a:cd:f3:64:8e:fc:
10:ff:f1:08:e4:64:e4:22:f3:ad:e5:0c:dd:9a:3d:
17:25:e0:40:9e:aa:c3:44:e8:d4:b7:25:46:ee:c9:
9f:94:97:e5:fe:f9:f6:d9:91:f7:26:f9:0a:1d:7f:
c6:14:7e:90:31:f9:c5:45:5d:c8:8f:50:1d:0f:5b:
40:38:b8:0a:49:8c:b8:c8:32:83:02:18:47:4e:71:
cc:b4:21:5b:84:25:b8:90:fb:0f:b2:c1:98:94:3d:
d7:95:42:0d:8a:9a:e9:ca:8d:29:a7:e8:c8:6f:03:
46:c5:bc:de:d6:d2:75:d5:ec:b9:f9:f0:ca:17:49:
f2:37:91:0c:79:8b:e0:fd:50:31:3e:d2:1c:7d:4f:
13:5e:70:67:1c:cd:e4:c4:00:87:27:d5:c2:d0:cb:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:44:E9:93:2D:B5:AD:8C:EB:32:9B:9F:2B:64:14:95:8C:46:86
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:95:06:94:4e:90:6c:0d:9d:53:de:3f:de:8a:8d:0a:6b:
48:e3:0c:7c:b6:47:42:b5:0f:1d:23:ca:d9:ed:b0:1a:a6:d2:
f0:ba:68:65:0b:89:d8:2c:78:ed:6b:cf:15:bb:2e:1a:a5:d6:
b9:36:b3:f5:f9:95:8a:13:32:d7:ab:93:1b:cb:0d:f9:a2:a8:
f4:a8:92:19:e6:3d:f8:36:bb:5a:6f:97:05:0a:28:81:bd:6e:
bb:90:e6:ee:e0:7e:6d:35:93:3a:97:fc:44:33:a5:5d:7f:9a:
68:a9:91:0e:34:1e:c1:bb:a8:b0:8e:20:c2:2c:cf:1a:1a:92:
54:f6:f5:4b:d4:8c:fd:d6:12:fa:a3:49:36:f1:89:16:23:fe:
bc:3a:d5:b8:c3:03:0e:c8:8d:cc:72:51:fe:f9:a1:d1:43:e7:
2e:63:8f:47:fd:9a:b5:3f:b7:d2:a1:34:7e:35:40:3d:81:3d:
7f:6f:54:de:6a:be:9c:79:0a:98:b3:7b:20:3e:74:27:93:7b:
66:6d:59:ab:1f:e9:f9:17:7f:46:fe:9a:c6:d1:c6:88:2b:14:
da:ef:2f:0a:e4:19:c7:99:6a:69:a4:e0:1a:6d:61:93:12:7c:
c7:52:57:db:d4:4b:8e:5a:ca:37:39:6d:ea:0f:96:d1:d2:ff:
47:d1:c5:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tmx1G8Cm/92J89D+HqG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjFmZmI2OGVhYjk3ZTI0YTkwNjI2ZDkwNDk4YmU3ZWQ3
MDY2ZjAwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
Eyg2MzFmNDRlOTkzMmRiNWFkOGNlYjMyOWI5ZjJiNjQxNDk1OGM0Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj26KVEy8ip2CcdgQZBj9mFaIu+O
NUtnMWKiWkF1oYZu5qP0KXNZI9DUk7qcI3l9ayb+rCQH7EO12AkwNSNR2LYvE7DW
YdvXAKEvC9feY7eZTypjgl8KZQNdBsKubFpIlQpKzfNkjvwQ//EI5GTkIvOt5Qzd
mj0XJeBAnqrDROjUtyVG7smflJfl/vn22ZH3JvkKHX/GFH6QMfnFRV3Ij1AdD1tA
OLgKSYy4yDKDAhhHTnHMtCFbhCW4kPsPssGYlD3XlUINiprpyo0pp+jIbwNGxbze
1tJ11ey5+fDKF0nyN5EMeYvg/VAxPtIcfU8TXnBnHM3kxACHJ9XC0MuCpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMfROmTLbWtjOsym58rZBSVjEaGMB8GA1UdIwQY
MBaAFCQh/7aOq5fiSpBibZBJi+ftcGbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUt
ZDkwOGZhZjM0ZWY4LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUtZDkwOGZhZjM0ZWY4
LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVqVBpRO
kGwNnVPeP96KjQprSOMMfLZHQrUPHSPK2e2wGqbS8LpoZQuJ2Cx47WvPFbsuGqXW
uTaz9fmVihMy16uTG8sN+aKo9KiSGeY9+Da7Wm+XBQoogb1uu5Dm7uB+bTWTOpf8
RDOlXX+aaKmRDjQewbuosI4gwizPGhqSVPb1S9SM/dYS+qNJNvGJFiP+vDrVuMMD
DsiNzHJR/vmh0UPnLmOPR/2atT+30qE0fjVAPYE9f29U3mq+nHkKmLN7ID50J5N7
Zm1Zqx/p+Rd/Rv6axtHGiCsU2u8vCuQZx5lqaaTgGm1hkxJ8x1JX29RLjlrKNzlt
6g+W0dL/R9HFKA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:54:18 2025 by rpki-client