Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft
File: JchJyqV3LJi4E8E7TzD85PSNLa4.mft (raw, json)
Hash identifier: 9NBjIlcEitkeTuqqvtzvO9d4AiEYt+rv9aHb3xGToTo=
Subject key identifier: 80:2A:1F:67:74:E2:E0:7F:26:14:AA:33:5F:BB:B4:1B:85:F3:DF:91
Authority key identifier: 25:C8:49:CA:A5:77:2C:98:B8:13:C1:3B:4F:30:FC:E4:F4:8D:2D:AE
Certificate issuer: /CN=25c849caa5772c98b813c13b4f30fce4f48d2dae
Certificate serial: 0194BC72D053D7595F57612B95A9D118908E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JchJyqV3LJi4E8E7TzD85PSNLa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft
Manifest number: 07FF
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: JchJyqV3LJi4E8E7TzD85PSNLa4.crl (hash: 3fUdv8c6PgTnq2o+l2H8xv+7UI0ksfIErUcCKkUj75U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:53:d7:59:5f:57:61:2b:95:a9:d1:18:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c849caa5772c98b813c13b4f30fce4f48d2dae
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=802a1f6774e2e07f2614aa335fbbb41b85f3df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:60:04:76:04:bb:49:df:97:2c:a8:11:b1:
9c:b0:2c:a6:0d:e0:da:73:f9:59:3b:c8:f4:af:74:
c8:a7:59:b5:8e:1e:47:e1:d6:b2:0f:09:0e:b2:84:
92:b6:9a:d5:1b:6e:27:22:9c:9b:91:76:64:05:db:
46:93:d3:8d:4e:86:d4:de:df:5b:8a:79:9c:e6:de:
12:1d:42:2e:6d:0d:9e:39:fd:f1:b9:65:fb:e6:c5:
6e:d6:29:f3:41:29:b1:6f:fa:25:39:e1:cc:d3:fe:
53:79:9c:d9:34:a2:5a:81:e3:a9:12:a4:65:45:e9:
d3:1c:fc:1c:5d:5c:df:b7:ee:f0:df:8b:92:5a:84:
21:46:e2:8c:9e:ea:ae:44:69:a5:13:d3:2d:cd:81:
6c:97:69:d2:64:0f:03:5b:c2:07:66:96:a0:44:96:
eb:00:da:93:02:76:3f:dc:3b:ae:0f:44:2c:e3:ca:
42:b0:39:3e:d9:30:6c:49:4f:17:7a:f5:c0:38:07:
ba:58:fb:38:b5:de:1e:ef:a1:ba:34:06:93:43:71:
3e:25:20:30:de:f3:d4:47:14:53:a6:b6:09:8c:5e:
56:c5:9f:a7:41:d2:6a:9b:85:db:04:b1:ed:ba:72:
76:aa:3e:73:9d:ff:67:ad:bc:3c:ad:f5:01:2d:8d:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:1F:67:74:E2:E0:7F:26:14:AA:33:5F:BB:B4:1B:85:F3:DF:91
X509v3 Authority Key Identifier:
keyid:25:C8:49:CA:A5:77:2C:98:B8:13:C1:3B:4F:30:FC:E4:F4:8D:2D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchJyqV3LJi4E8E7TzD85PSNLa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:f1:ea:3f:a7:55:1a:c3:ab:25:f9:1c:e9:dd:fd:f0:2d:
24:67:1d:f0:fb:0d:24:5b:3d:8d:7f:ff:3b:02:1a:f8:96:8a:
92:d4:51:5c:1b:a3:9b:c2:7c:dd:82:b9:1f:e5:33:9d:c5:bf:
87:28:e3:cc:72:3d:47:4f:9c:de:57:1e:89:dd:91:d1:dd:05:
03:e8:be:5c:69:7f:5d:5f:e2:e3:31:99:ff:00:2f:d6:37:ef:
78:be:cf:b5:a8:c4:77:b9:43:b4:7f:4a:ee:65:f1:ae:f3:37:
e8:d0:a8:74:92:4b:80:22:05:ec:fc:21:d7:4b:42:7b:24:11:
c3:20:76:56:dd:8e:16:59:66:6f:8d:62:e5:f7:d6:42:e8:c7:
f0:84:6e:ab:e4:5d:cb:2a:24:4d:46:15:54:38:4b:5b:ab:5f:
fa:53:a0:ae:48:83:03:22:49:fd:48:72:56:14:f7:50:be:4e:
70:18:fb:c6:04:55:f0:7f:3b:7f:09:30:de:37:59:3e:2f:36:
64:62:57:b9:cb:e8:ec:4f:9c:21:f6:80:08:69:88:68:98:36:
37:24:25:d5:10:c4:fa:99:c1:80:09:67:17:40:89:9b:dd:72:
fd:b8:10:b8:5d:dd:f1:51:29:19:80:fd:c9:25:ce:cb:ed:e6:
90:72:2b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctBT11lfV2ErlanRGJCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Yzg0OWNhYTU3NzJjOThiODEzYzEzYjRmMzBmY2U0ZjQ4
ZDJkYWUwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
Eyg4MDJhMWY2Nzc0ZTJlMDdmMjYxNGFhMzM1ZmJiYjQxYjg1ZjNkZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxexgBHYEu0nflyyoEbGcsCymDeDa
c/lZO8j0r3TIp1m1jh5H4dayDwkOsoSStprVG24nIpybkXZkBdtGk9ONTobU3t9b
inmc5t4SHUIubQ2eOf3xuWX75sVu1inzQSmxb/olOeHM0/5TeZzZNKJageOpEqRl
RenTHPwcXVzft+7w34uSWoQhRuKMnuquRGmlE9MtzYFsl2nSZA8DW8IHZpagRJbr
ANqTAnY/3DuuD0Qs48pCsDk+2TBsSU8XevXAOAe6WPs4td4e76G6NAaTQ3E+JSAw
3vPURxRTprYJjF5WxZ+nQdJqm4XbBLHtunJ2qj5znf9nrbw8rfUBLY34QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAqH2d04uB/JhSqM1+7tBuF89+RMB8GA1UdIwQY
MBaAFCXIScqldyyYuBPBO08w/OT0jS2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNoSnlxVjNMSmk0RThFN1R6RDg1UFNOTGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NTQ0YTAtYWU0Ni00ZGEyLWFkMmQt
ZTg5M2IxM2IyYzlmLzEvSmNoSnlxVjNMSmk0RThFN1R6RDg1UFNOTGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NTQ0YTAtYWU0Ni00ZGEyLWFkMmQtZTg5M2IxM2IyYzlm
LzEvSmNoSnlxVjNMSmk0RThFN1R6RDg1UFNOTGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOHx6j+n
VRrDqyX5HOnd/fAtJGcd8PsNJFs9jX//OwIa+JaKktRRXBujm8J83YK5H+UzncW/
hyjjzHI9R0+c3lceid2R0d0FA+i+XGl/XV/i4zGZ/wAv1jfveL7PtajEd7lDtH9K
7mXxrvM36NCodJJLgCIF7Pwh10tCeyQRwyB2Vt2OFllmb41i5ffWQujH8IRuq+Rd
yyokTUYVVDhLW6tf+lOgrkiDAyJJ/UhyVhT3UL5OcBj7xgRV8H87fwkw3jdZPi82
ZGJXucvo7E+cIfaACGmIaJg2NyQl1RDE+pnBgAlnF0CJm91y/bgQuF3d8VEpGYD9
ySXOy+3mkHIrQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client