Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: ST+C53Fi7QjPvdEbkaqNq3j7owY2Cw2dJZbOZc82GlY=
Subject key identifier: 44:36:D1:3D:0E:22:31:38:98:7D:4B:78:90:6E:CB:EE:6A:F7:5B:DF
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 0194BC3C734DC8746E77E5492DE9B8F618A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: kA/swgf34/YM4tZnDVdv+D14rk1BEdeDnHBLESyJJv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:4d:c8:74:6e:77:e5:49:2d:e9:b8:f6:18:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=4436d13d0e223138987d4b78906ecbee6af75bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:8c:d9:4e:f5:c7:f1:9d:0a:86:1c:cc:f0:
ac:e5:04:c0:d7:ca:43:da:18:59:4b:1e:2f:06:7a:
6b:ac:53:89:4e:20:74:98:af:e6:54:dd:6f:c3:37:
42:79:de:46:e3:3f:1d:a2:53:4f:4b:34:8d:ac:1f:
46:c3:32:02:c3:47:bc:37:85:1c:42:fa:1c:c4:e3:
e4:1e:ab:28:91:ec:fc:c1:86:f2:0e:d0:46:d0:57:
74:a7:90:87:79:78:3d:4f:39:87:73:57:38:ba:13:
8d:83:97:ef:6c:42:af:42:f6:a8:5c:48:31:9c:2b:
df:92:30:33:00:eb:fa:49:f9:04:6b:e1:c2:ea:d8:
2f:fc:69:9e:03:b5:b3:b3:51:99:69:a2:c6:db:80:
c3:eb:10:eb:73:d7:fb:e1:3d:90:10:f9:38:6b:6f:
10:73:8e:fc:77:47:46:60:43:64:13:fa:d5:41:6b:
04:95:c4:0b:f7:6d:0b:b4:22:34:6a:bb:84:5c:b7:
7c:74:67:6c:4b:d7:2e:df:7e:2d:38:3f:f5:09:53:
55:3a:7f:1c:63:06:fc:23:4d:1f:1e:dd:a9:73:4f:
5c:9c:c9:1e:a3:5a:1b:43:60:b7:0b:33:6f:99:11:
bc:68:41:2d:bf:fa:06:9a:33:7c:ea:07:10:2c:6e:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:D1:3D:0E:22:31:38:98:7D:4B:78:90:6E:CB:EE:6A:F7:5B:DF
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:df:7a:25:b4:6e:7c:fc:91:48:9c:1e:41:ea:8c:b7:1c:02:
c5:5b:42:f3:96:63:a4:e7:17:ef:82:df:61:39:db:bc:6d:fd:
a1:d0:fa:9f:c0:e7:9e:4e:d1:69:32:73:da:54:0a:fa:1a:24:
16:66:1c:06:7a:42:dc:21:9b:10:2e:1f:a0:b8:05:4c:b5:f3:
5c:c2:a3:0f:ac:6b:c3:bd:54:b8:1e:2c:34:83:05:5f:a6:06:
e2:6f:f9:86:60:2c:51:3c:26:86:af:ec:79:77:bf:dc:38:97:
16:58:d0:ef:ec:4e:8e:c5:db:f7:c4:47:d5:37:d0:08:42:dd:
77:8a:a2:d9:e0:d2:64:ce:c7:55:59:28:ae:37:eb:31:44:f3:
2e:60:57:df:94:e5:5e:f1:15:18:f4:90:e1:9d:25:12:82:26:
10:65:9f:4c:0d:61:62:b9:b0:fc:b3:77:c5:e9:84:ec:8f:c4:
36:40:1c:31:d4:9d:42:b1:2b:0b:c2:2c:1b:a5:80:3c:71:55:
a0:53:f6:71:7d:63:f5:cb:11:78:02:57:03:98:b7:3b:0f:96:
5c:bc:25:f4:a7:56:53:80:68:08:58:1e:3d:2e:5c:2b:20:07:
ca:e8:12:5c:99:58:a4:25:3b:7f:d0:e0:0c:3a:10:cf:9b:23:
15:7f:65:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHNNyHRud+VJLem49hilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl
NDRlMjcwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
Eyg0NDM2ZDEzZDBlMjIzMTM4OTg3ZDRiNzg5MDZlY2JlZTZhZjc1YmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP6M2U71x/GdCoYczPCs5QTA18pD
2hhZSx4vBnprrFOJTiB0mK/mVN1vwzdCed5G4z8dolNPSzSNrB9GwzICw0e8N4Uc
QvocxOPkHqsokez8wYbyDtBG0Fd0p5CHeXg9TzmHc1c4uhONg5fvbEKvQvaoXEgx
nCvfkjAzAOv6SfkEa+HC6tgv/GmeA7Wzs1GZaaLG24DD6xDrc9f74T2QEPk4a28Q
c478d0dGYENkE/rVQWsElcQL920LtCI0aruEXLd8dGdsS9cu334tOD/1CVNVOn8c
Ywb8I00fHt2pc09cnMkeo1obQ2C3CzNvmRG8aEEtv/oGmjN86gcQLG7pYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ20T0OIjE4mH1LeJBuy+5q91vfMB8GA1UdIwQY
MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt
N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj
LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2N96JbRu
fPyRSJweQeqMtxwCxVtC85ZjpOcX74LfYTnbvG39odD6n8Dnnk7RaTJz2lQK+hok
FmYcBnpC3CGbEC4foLgFTLXzXMKjD6xrw71UuB4sNIMFX6YG4m/5hmAsUTwmhq/s
eXe/3DiXFljQ7+xOjsXb98RH1TfQCELdd4qi2eDSZM7HVVkorjfrMUTzLmBX35Tl
XvEVGPSQ4Z0lEoImEGWfTA1hYrmw/LN3xemE7I/ENkAcMdSdQrErC8IsG6WAPHFV
oFP2cX1j9csReAJXA5i3Ow+WXLwl9KdWU4BoCFgePS5cKyAHyugSXJlYpCU7f9Dg
DDoQz5sjFX9lVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:59 2025 by rpki-client