Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: HYGCc6MsefPMiBltLJ6nwAck4vjIBy7Xoae+43bbG3Y=
Subject key identifier: 6F:96:52:B0:B3:6D:31:8E:CD:68:E3:CE:D1:29:02:35:D4:83:4E:A1
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 0194BD8591B786FA96F6CE5C4585CC7EC7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0726
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: MtKNLkcPGUaU+CBy8CnAWD0M0E4lBtbhGGPg6smvGg0=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:b7:86:fa:96:f6:ce:5c:45:85:cc:7e:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=6f9652b0b36d318ecd68e3ced1290235d4834ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:6c:7b:84:1d:b1:9c:72:0f:d1:00:c4:50:
ce:8a:e4:61:6f:7a:fd:24:32:c6:2b:72:0f:f0:01:
39:d9:32:ae:7a:79:1d:91:cf:5c:b6:b5:30:06:f9:
14:0c:6f:65:9c:af:dd:55:dc:c7:30:ac:4a:ee:1a:
35:30:69:94:87:17:5d:51:75:86:c0:bd:46:27:70:
8e:b5:1b:ee:6d:66:9d:f0:72:04:bc:45:08:92:28:
6e:4e:fd:9f:08:87:3b:16:af:fd:4e:e7:75:59:db:
7e:e3:df:6d:97:9b:ac:54:fd:7d:fe:bc:3d:d5:82:
fd:e1:51:0a:2f:e9:9e:cd:28:21:f1:82:08:33:06:
e5:80:5b:4d:0e:e4:db:1f:ec:0c:1c:f7:02:57:90:
58:5f:6b:e4:1b:30:0a:5a:85:f2:b2:28:42:36:eb:
a6:13:55:c8:35:78:f5:66:d0:0b:b5:c3:0f:6c:63:
13:ed:d4:41:c6:37:64:c8:5a:ce:7a:bb:1b:97:93:
2f:4f:0a:e1:5c:63:13:59:c9:8c:d1:4a:e4:2e:b9:
25:d2:cf:65:0b:a5:1c:b8:5d:08:fa:dc:db:43:eb:
0f:d9:e5:44:95:56:1a:84:3f:1a:82:0f:d5:fe:3c:
d1:a0:6a:a3:41:c5:23:b2:f1:00:0b:14:56:93:33:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:96:52:B0:B3:6D:31:8E:CD:68:E3:CE:D1:29:02:35:D4:83:4E:A1
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:fc:8b:91:87:e3:10:85:db:29:eb:ad:ef:04:22:83:8c:
c3:eb:bb:e6:16:75:9e:21:f5:20:44:53:18:cc:9b:f9:07:bb:
55:6b:35:fa:66:37:4f:29:08:25:09:2a:b3:5c:ba:10:61:2f:
0c:1c:82:dd:79:1e:83:ae:27:19:e1:a2:16:72:5c:c3:00:0e:
1e:dd:9c:69:e1:7d:61:ed:9f:86:7e:95:eb:c2:3b:4e:0b:65:
c8:0f:1d:a1:31:9c:17:d9:20:11:da:ef:56:5d:f9:de:ee:eb:
db:a0:0f:9d:a9:a6:b9:18:2b:0a:51:ec:2f:34:7a:58:39:16:
ea:09:a7:34:35:c0:a6:36:48:f3:18:ec:5b:6f:57:60:17:cb:
d5:bd:2b:91:c7:4a:2c:56:ea:ae:fc:6f:b5:dd:00:29:34:65:
e0:7c:9a:69:c2:8a:8a:e1:24:51:51:b4:7d:6b:4c:90:0a:ab:
8a:1d:86:f4:a1:62:66:5d:b6:8c:12:4d:66:27:7f:67:00:a6:
22:53:98:7c:d7:e4:58:73:e6:76:5d:21:a5:f5:9c:fe:bf:e0:
da:f1:07:77:d7:38:e7:07:fb:62:d1:bb:b6:2e:23:5a:62:76:
85:e1:d8:b7:4f:72:ed:52:d7:37:78:c1:44:69:c3:aa:8d:bb:
91:e8:e2:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZG3hvqW9s5cRYXMfsekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
Eyg2Zjk2NTJiMGIzNmQzMThlY2Q2OGUzY2VkMTI5MDIzNWQ0ODM0ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQJse4QdsZxyD9EAxFDOiuRhb3r9
JDLGK3IP8AE52TKuenkdkc9ctrUwBvkUDG9lnK/dVdzHMKxK7ho1MGmUhxddUXWG
wL1GJ3COtRvubWad8HIEvEUIkihuTv2fCIc7Fq/9Tud1Wdt+499tl5usVP19/rw9
1YL94VEKL+mezSgh8YIIMwblgFtNDuTbH+wMHPcCV5BYX2vkGzAKWoXysihCNuum
E1XINXj1ZtALtcMPbGMT7dRBxjdkyFrOersbl5MvTwrhXGMTWcmM0UrkLrkl0s9l
C6UcuF0I+tzbQ+sP2eVElVYahD8agg/V/jzRoGqjQcUjsvEACxRWkzMS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+WUrCzbTGOzWjjztEpAjXUg06hMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXz8i5GH
4xCF2ynrre8EIoOMw+u75hZ1niH1IERTGMyb+Qe7VWs1+mY3TykIJQkqs1y6EGEv
DByC3Xkeg64nGeGiFnJcwwAOHt2caeF9Ye2fhn6V68I7TgtlyA8doTGcF9kgEdrv
Vl353u7r26APnammuRgrClHsLzR6WDkW6gmnNDXApjZI8xjsW29XYBfL1b0rkcdK
LFbqrvxvtd0AKTRl4HyaacKKiuEkUVG0fWtMkAqrih2G9KFiZl22jBJNZid/ZwCm
IlOYfNfkWHPmdl0hpfWc/r/g2vEHd9c45wf7YtG7ti4jWmJ2heHYt09y7VLXN3jB
RGnDqo27kejiNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:32 2025 by rpki-client