Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: ms7JN09cuv1p52JXfaXVH6G6CuGP4ROucPL90bSmBsc=
Subject key identifier: 23:2E:6E:2B:34:F0:77:CC:27:75:24:53:9D:06:14:2D:AD:8B:9F:A1
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 0194BD17729ECE58A3C75181A455BBB680EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: U8z5LwM+2OuB/6+dRCF7cC3BiuEMN2AfqBRrgoNfDms=)
2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:9e:ce:58:a3:c7:51:81:a4:55:bb:b6:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=232e6e2b34f077cc277524539d06142dad8b9fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:e8:63:79:d7:65:2a:d8:dd:5e:46:4e:be:
75:48:45:96:24:06:00:76:ca:27:04:b0:b5:5b:32:
a2:65:b7:2a:62:bc:ef:c0:e0:a6:77:bb:7c:b7:cf:
09:3a:13:63:5e:e1:8a:02:b7:5b:96:8e:46:63:0f:
b7:d7:16:b2:3b:54:c2:08:d8:dc:bc:5c:9d:de:1c:
8f:9a:5b:d7:c5:c4:a0:2c:27:33:53:d8:8d:6b:ec:
df:c1:1a:ec:97:e6:b9:78:94:bc:0c:80:01:89:3a:
c2:d0:9f:38:6e:fb:0d:db:8a:12:56:0c:3c:fa:10:
75:6f:af:43:63:8c:28:11:74:26:f5:af:47:f7:cc:
58:5d:ee:7b:71:cb:24:b4:fd:96:df:c2:2d:be:36:
a9:5a:cc:c6:09:49:15:99:4a:c2:1f:ca:95:39:13:
d6:99:67:26:70:32:6e:4a:78:80:63:d6:a1:6f:90:
63:2e:9b:f0:ac:90:53:53:fd:1f:6d:8e:2e:51:47:
4e:ea:e8:e2:43:8c:c1:34:b2:16:25:ab:0f:f5:54:
c3:3e:2c:92:17:67:7e:29:e5:a4:07:71:53:0f:7f:
ec:e4:7c:5e:34:20:7a:41:ad:c5:01:5b:09:17:d0:
7c:b3:c6:89:f1:59:1c:49:62:ce:c5:aa:bf:3f:71:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2E:6E:2B:34:F0:77:CC:27:75:24:53:9D:06:14:2D:AD:8B:9F:A1
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8e:b9:ed:dc:59:eb:4c:50:8d:92:9e:b2:40:0d:61:9b:4e:
b9:2f:43:4e:0a:d2:62:63:30:06:0e:c1:26:21:40:ee:80:9d:
6f:ed:24:e6:a0:17:4d:d6:64:58:8c:49:27:d9:4e:4a:34:61:
63:ff:a5:70:59:9f:a8:58:2a:5b:b0:36:cd:93:47:57:90:12:
aa:b9:8a:7e:fa:f6:3b:0b:4f:74:c1:9d:73:b3:bd:e8:5d:a2:
5a:24:31:6c:41:d5:eb:6e:c5:d1:91:e6:3c:58:ec:53:d9:67:
49:3e:c8:ca:28:29:b4:c0:fa:ea:20:39:df:fc:33:63:b7:ec:
e5:19:ad:81:d7:82:87:30:08:fb:b5:f4:fd:20:bf:5d:d6:a3:
48:bf:3c:e4:03:fe:12:0a:22:8f:dd:e5:97:38:65:4b:d5:fc:
74:1d:cf:92:34:42:af:90:5b:d2:17:22:ac:f4:50:82:d4:40:
62:c3:64:fb:cc:51:1b:89:1a:04:f0:69:44:74:de:b6:b7:dd:
06:69:5a:a7:7e:c0:61:d1:ec:26:af:4f:de:09:2f:49:31:ec:
c0:9c:b9:e2:af:60:39:88:73:a3:44:4b:2a:f3:9f:19:c5:8e:
07:8d:bf:af:52:e2:ae:d2:ca:4c:f1:92:76:38:fb:c0:37:4f:
b7:2e:ed:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3Kezlijx1GBpFW7toDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx
MWY5N2UwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EygyMzJlNmUyYjM0ZjA3N2NjMjc3NTI0NTM5ZDA2MTQyZGFkOGI5ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17roY3nXZSrY3V5GTr51SEWWJAYA
dsonBLC1WzKiZbcqYrzvwOCmd7t8t88JOhNjXuGKArdblo5GYw+31xayO1TCCNjc
vFyd3hyPmlvXxcSgLCczU9iNa+zfwRrsl+a5eJS8DIABiTrC0J84bvsN24oSVgw8
+hB1b69DY4woEXQm9a9H98xYXe57ccsktP2W38ItvjapWszGCUkVmUrCH8qVORPW
mWcmcDJuSniAY9ahb5BjLpvwrJBTU/0fbY4uUUdO6ujiQ4zBNLIWJasP9VTDPiyS
F2d+KeWkB3FTD3/s5HxeNCB6Qa3FAVsJF9B8s8aJ8VkcSWLOxaq/P3FpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMubis08HfMJ3UkU50GFC2ti5+hMB8GA1UdIwQY
MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt
MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2
LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo657dxZ
60xQjZKeskANYZtOuS9DTgrSYmMwBg7BJiFA7oCdb+0k5qAXTdZkWIxJJ9lOSjRh
Y/+lcFmfqFgqW7A2zZNHV5ASqrmKfvr2OwtPdMGdc7O96F2iWiQxbEHV627F0ZHm
PFjsU9lnST7IyigptMD66iA53/wzY7fs5RmtgdeChzAI+7X0/SC/XdajSL885AP+
Egoij93llzhlS9X8dB3PkjRCr5Bb0hcirPRQgtRAYsNk+8xRG4kaBPBpRHTetrfd
Bmlap37AYdHsJq9P3gkvSTHswJy54q9gOYhzo0RLKvOfGcWOB42/r1LirtLKTPGS
djj7wDdPty7tUg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:59 2025 by rpki-client