Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: O7ND7t82emGv5bLUQZVyKigIik+7Nv5iQhDohUf4av8=
Subject key identifier: F7:7B:28:68:12:B4:A0:37:54:68:D4:E5:65:07:A4:6D:30:1A:F8:C7
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 0194BC04B71E7FD9DC160984B4CDF9DFF9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: k7hCReqix+/SSr/SwWDNEztbU/TSWDFbafr8YxIRXGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:1e:7f:d9:dc:16:09:84:b4:cd:f9:df:f9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=f77b286812b4a0375468d4e56507a46d301af8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:d5:68:86:bc:90:67:9c:fe:5d:cc:13:89:
61:6e:4e:b1:58:18:d6:82:98:62:4d:d4:14:7c:af:
5d:74:aa:70:60:42:66:f7:40:95:84:a0:39:44:d1:
a8:2b:8e:0e:79:42:b9:74:d9:66:13:25:5b:ab:cf:
f2:cd:0e:4e:a5:0b:de:40:72:b2:bb:e0:d8:40:76:
3b:b0:c5:19:cf:49:e9:2f:8a:a0:9f:d6:34:57:aa:
1c:31:4b:9f:ce:83:e3:88:45:e2:e7:2e:de:2a:e0:
29:0c:b6:c6:70:17:0f:2d:37:c2:5f:43:be:75:76:
50:30:3e:9b:c3:92:b1:9a:4e:8c:2a:44:b4:b3:e0:
8d:cd:d2:ae:4f:74:f2:a5:86:d1:ef:83:7d:38:97:
36:57:29:f3:26:a4:a8:76:2e:59:63:8a:ef:6e:5c:
a7:0c:ad:7e:5a:76:3f:6f:19:4e:70:fb:0a:54:04:
82:7f:4a:c1:87:2e:41:2a:49:74:4e:58:78:b3:b6:
da:cc:63:9b:ad:e0:31:b9:86:be:4c:12:56:6a:1f:
8b:82:6c:b5:3f:86:67:ed:03:45:2b:f6:90:06:ab:
8b:9d:ae:88:91:a4:e7:91:e0:80:6c:19:05:5a:ad:
72:5d:b1:1f:76:e3:5c:10:5a:44:2b:7d:02:71:bd:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:28:68:12:B4:A0:37:54:68:D4:E5:65:07:A4:6D:30:1A:F8:C7
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0d:11:8d:00:a3:d3:e4:b1:9b:c7:f5:1c:c3:db:4d:83:6f:
e8:2c:2a:ba:ac:ea:a3:5f:ea:15:c0:66:38:7b:17:38:8d:4d:
32:28:0a:16:57:a4:d8:1d:0b:9b:c8:31:7c:a9:74:35:06:ac:
5b:41:99:61:df:0e:5a:fa:48:61:2a:24:6a:55:fe:d1:cf:f5:
1a:d1:46:e4:bd:07:f8:76:08:54:57:21:df:c3:83:81:f5:10:
3d:03:b6:07:96:be:b2:bb:01:d4:39:fd:be:7d:1a:43:9c:95:
98:14:bc:cf:eb:5d:79:1e:7e:57:93:c4:55:eb:bb:5d:8f:b4:
e2:0e:14:bd:2a:98:7e:5c:61:3a:25:4d:3a:d9:53:36:2b:33:
7d:71:26:95:5a:db:6a:1a:26:d0:d3:e0:f9:31:23:14:87:67:
e1:9b:a1:c1:de:b7:db:b9:e4:7e:9d:f7:f0:af:3d:c8:f9:7c:
69:8f:81:51:b7:72:65:30:c7:90:f0:22:76:08:84:2c:6e:c2:
7c:9b:71:b9:44:6e:a6:29:f3:04:c5:c6:1f:3d:77:fd:54:1c:
7c:09:3e:11:04:66:e4:67:62:a6:dc:b5:bb:bf:73:d4:7c:e2:
11:d6:76:b9:43:b8:51:fa:b5:0e:3f:d1:20:d0:20:55:3c:d9:
89:dc:c0:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLcef9ncFgmEtM353/nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx
YzY5N2YwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EyhmNzdiMjg2ODEyYjRhMDM3NTQ2OGQ0ZTU2NTA3YTQ2ZDMwMWFmOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlynVaIa8kGec/l3ME4lhbk6xWBjW
gphiTdQUfK9ddKpwYEJm90CVhKA5RNGoK44OeUK5dNlmEyVbq8/yzQ5OpQveQHKy
u+DYQHY7sMUZz0npL4qgn9Y0V6ocMUufzoPjiEXi5y7eKuApDLbGcBcPLTfCX0O+
dXZQMD6bw5Kxmk6MKkS0s+CNzdKuT3TypYbR74N9OJc2VynzJqSodi5ZY4rvblyn
DK1+WnY/bxlOcPsKVASCf0rBhy5BKkl0Tlh4s7bazGObreAxuYa+TBJWah+Lgmy1
P4Zn7QNFK/aQBquLna6IkaTnkeCAbBkFWq1yXbEfduNcEFpEK30Ccb247wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd7KGgStKA3VGjU5WUHpG0wGvjHMB8GA1UdIwQY
MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt
NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk
LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzA0RjQCj
0+Sxm8f1HMPbTYNv6Cwquqzqo1/qFcBmOHsXOI1NMigKFlek2B0Lm8gxfKl0NQas
W0GZYd8OWvpIYSokalX+0c/1GtFG5L0H+HYIVFch38ODgfUQPQO2B5a+srsB1Dn9
vn0aQ5yVmBS8z+tdeR5+V5PEVeu7XY+04g4UvSqYflxhOiVNOtlTNiszfXEmlVrb
ahom0NPg+TEjFIdn4Zuhwd6327nkfp338K89yPl8aY+BUbdyZTDHkPAidgiELG7C
fJtxuURupinzBMXGHz13/VQcfAk+EQRm5Gdipty1u79z1HziEdZ2uUO4Ufq1Dj/R
INAgVTzZidzAFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:01 2025 by rpki-client