Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: P0dxc9bPbP+39Ix/utq7D7Am75SVVU5afzAMIQQhW/U=
Subject key identifier: 74:7B:2E:6D:43:27:0D:17:04:32:8A:30:E0:D4:97:8D:A5:46:93:3E
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0194BBCE4FCD86E33FD135C5B80B8B10A663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 128A
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: HYjGbhWBeRRzi8Ff3k32EtuxA0DS/L3ng90liaOdLFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:cd:86:e3:3f:d1:35:c5:b8:0b:8b:10:a6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=747b2e6d43270d1704328a30e0d4978da546933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:24:06:28:6b:66:c8:9c:62:81:49:ef:5b:
c0:d9:34:c6:ca:3c:df:1c:27:bc:fe:de:c4:79:5d:
ca:91:d3:47:2a:4d:5e:e8:57:0c:3c:6f:92:b6:61:
08:46:07:52:de:5a:2a:04:59:98:ef:26:a3:25:9b:
e3:c8:60:f9:1d:bd:10:6c:12:78:6a:4e:19:b8:9f:
9e:7a:21:18:78:4c:a0:0c:1a:2a:b1:8e:38:3a:37:
94:79:4f:df:44:38:36:ed:d8:08:10:c9:61:fe:49:
55:ec:e6:2c:91:b4:02:4e:48:45:d0:f7:30:6f:67:
a1:11:cf:43:82:b9:e3:ba:01:5f:86:af:69:0a:65:
e9:7d:f5:99:09:9e:ae:39:03:1a:79:86:c8:d6:5f:
17:c9:0f:ea:f5:8a:33:da:9c:b9:21:a7:94:e7:4e:
cd:8c:be:54:1f:5f:4d:1d:b7:a9:21:9f:65:49:0d:
03:96:ba:83:fe:0f:fa:49:21:49:a8:e1:9e:46:b9:
22:55:2f:e7:e7:6a:5c:23:c6:7b:41:70:e2:e6:a5:
ca:0b:d6:3f:5d:26:36:37:f8:e8:b9:eb:ba:1b:95:
69:d3:a4:3d:d3:09:f4:a6:be:77:c5:5c:24:bb:cd:
b9:93:93:b7:fb:02:76:1c:c2:14:46:69:f3:2c:be:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:2E:6D:43:27:0D:17:04:32:8A:30:E0:D4:97:8D:A5:46:93:3E
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:03:37:30:d0:53:d0:3e:72:fd:b6:96:5e:b3:8a:31:47:aa:
0a:e2:94:c3:31:05:22:e4:55:7e:0a:52:80:08:a0:2d:b7:bd:
39:f5:8f:c8:e4:fd:93:25:06:e0:44:a5:8f:d5:38:c7:a3:9e:
fd:bc:cc:dc:c4:fd:25:2f:05:81:b1:7f:c5:45:4a:27:44:d6:
17:aa:53:63:ea:c3:b0:ac:c2:3d:e2:5f:46:81:fc:38:19:34:
bd:8c:ac:02:0f:63:6d:a5:48:69:13:f7:35:44:ec:bd:9f:17:
05:1c:29:cb:5e:1f:98:b9:f7:f1:a1:bf:a6:47:e5:6d:a9:e3:
e8:0b:90:4e:bb:e3:9c:3f:1d:c5:d4:89:7e:02:24:f7:82:ed:
31:9d:43:89:8c:63:e5:ef:15:77:a3:ae:f0:25:e1:50:de:aa:
11:c7:ee:ea:04:a8:54:b7:b6:17:6d:58:22:e5:65:2d:81:aa:
66:92:a3:27:19:53:58:f1:07:69:da:46:2f:00:ba:04:6b:aa:
55:8b:29:d2:3b:83:9a:72:90:b4:f1:3c:85:79:a5:f7:d2:5b:
89:b0:44:51:84:b7:e8:46:79:e6:f1:1b:b5:e1:50:50:99:96:
9f:6c:5e:0d:de:ad:44:2e:7c:5a:44:34:61:b8:5e:a5:39:65:
8e:5f:7e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk/NhuM/0TXFuAuLEKZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg3NDdiMmU2ZDQzMjcwZDE3MDQzMjhhMzBlMGQ0OTc4ZGE1NDY5MzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uwkBihrZsicYoFJ71vA2TTGyjzf
HCe8/t7EeV3KkdNHKk1e6FcMPG+StmEIRgdS3loqBFmY7yajJZvjyGD5Hb0QbBJ4
ak4ZuJ+eeiEYeEygDBoqsY44OjeUeU/fRDg27dgIEMlh/klV7OYskbQCTkhF0Pcw
b2ehEc9DgrnjugFfhq9pCmXpffWZCZ6uOQMaeYbI1l8XyQ/q9Yoz2py5IaeU507N
jL5UH19NHbepIZ9lSQ0DlrqD/g/6SSFJqOGeRrkiVS/n52pcI8Z7QXDi5qXKC9Y/
XSY2N/joueu6G5Vp06Q90wn0pr53xVwku825k5O3+wJ2HMIURmnzLL7NlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR7Lm1DJw0XBDKKMODUl42lRpM+MB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAM3MNBT
0D5y/baWXrOKMUeqCuKUwzEFIuRVfgpSgAigLbe9OfWPyOT9kyUG4ESlj9U4x6Oe
/bzM3MT9JS8FgbF/xUVKJ0TWF6pTY+rDsKzCPeJfRoH8OBk0vYysAg9jbaVIaRP3
NUTsvZ8XBRwpy14fmLn38aG/pkflbanj6AuQTrvjnD8dxdSJfgIk94LtMZ1DiYxj
5e8Vd6Ou8CXhUN6qEcfu6gSoVLe2F21YIuVlLYGqZpKjJxlTWPEHadpGLwC6BGuq
VYsp0juDmnKQtPE8hXml99JbibBEUYS36EZ55vEbteFQUJmWn2xeDd6tRC58WkQ0
YbhepTlljl9+6g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:49 2025 by rpki-client