Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
File: JPQQpKDnIUOITahEO-gpaoGimQg.mft (raw, json)
Hash identifier: Ncup4J5nDUvZ/dmTMNWmk3GWXW7yLU0GRDR5mioRdaQ=
Subject key identifier: 38:70:75:68:4A:31:C9:21:5C:A6:69:4C:46:A8:33:62:C2:C7:78:A5
Authority key identifier: 24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
Certificate issuer: /CN=24f410a4a0e72143884da8443be8296a81a29908
Certificate serial: 0194BD17E75D6DFE58B73F13CB87B9144BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
Manifest number: 0F02
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: JPQQpKDnIUOITahEO-gpaoGimQg.crl (hash: eRXG4hgY8qwVsE2lhw1uCfCN2SS0aVEktxkYoWavqAQ=)
2: uDKDJ-KhWIllpM_YJUIJwqB3-SE.roa (hash: 07nZ52JsoTkxnrx0gPpEgvGTugWc7J6ivdthOMCtzGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:5d:6d:fe:58:b7:3f:13:cb:87:b9:14:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f410a4a0e72143884da8443be8296a81a29908
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=387075684a31c9215ca6694c46a83362c2c778a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:ad:a9:d5:25:51:01:7e:97:7f:c1:16:61:
40:41:c3:d6:62:ee:fa:c6:41:37:a4:7b:1e:bc:7f:
04:2e:db:cc:be:ce:8f:d9:05:ac:ce:2d:b5:31:44:
d1:a2:41:23:03:d4:65:28:cc:32:18:d5:07:59:e4:
e4:89:7e:e4:c1:fa:94:9d:98:55:23:9f:74:a5:aa:
10:7f:ab:99:e2:99:22:f7:d7:10:0e:60:e7:ff:6b:
eb:4e:5b:7a:62:04:6a:da:8d:82:51:3b:eb:68:d1:
06:98:89:b1:51:b7:e1:13:81:b2:e3:4e:7e:f7:0f:
bd:5a:7e:c0:0e:60:19:f0:1e:2b:e6:cb:24:2a:3b:
8f:cb:fc:ab:12:fa:8a:77:2b:4a:1c:4e:cd:c1:40:
12:3e:12:d3:b8:09:9e:a4:96:c9:69:1a:f7:46:f0:
1f:92:a8:5d:ce:ce:61:df:b2:bc:cc:23:55:e5:1e:
27:e1:32:65:d1:f2:26:d2:56:00:6a:58:26:03:2f:
eb:97:a1:69:1e:a3:47:34:a7:40:32:7a:75:4d:76:
9c:c9:31:d5:cb:e6:47:4e:2d:2b:47:af:96:b6:fd:
2f:c3:83:9b:ee:a0:0c:86:7a:f3:3a:b0:d2:89:2a:
02:a8:c1:ac:53:27:cb:f4:4e:27:02:33:74:13:89:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:75:68:4A:31:C9:21:5C:A6:69:4C:46:A8:33:62:C2:C7:78:A5
X509v3 Authority Key Identifier:
keyid:24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:21:8b:f6:4a:c3:97:06:19:4b:59:80:09:36:b6:23:52:4e:
04:94:7a:7e:07:46:c0:0b:12:88:24:bf:e6:47:71:28:24:d0:
99:95:dc:48:eb:42:34:26:97:b8:1f:6d:a4:aa:17:ec:2c:d4:
aa:bf:5a:9f:ed:f8:59:69:53:b6:aa:ec:f4:a4:1c:91:e1:72:
72:11:cd:0e:c0:31:98:e8:17:44:d4:92:f8:8e:0d:63:42:71:
b7:07:c4:5c:8a:d9:d3:da:af:e5:0c:d7:17:5a:44:5e:54:08:
69:da:90:75:48:e8:70:04:a7:a5:80:1b:f0:5f:cd:cc:36:6d:
3c:ed:60:1b:6f:7a:db:34:86:4d:22:ec:f6:bc:21:53:17:93:
0f:80:36:41:b6:d3:1b:56:00:1c:54:f3:6d:51:34:c7:11:37:
4b:eb:1a:4c:3b:87:e7:7a:0d:21:d1:64:28:81:b7:04:2e:6d:
30:d8:2e:23:e7:0b:e2:5a:d7:d0:56:b9:17:0d:d1:6b:6c:f9:
10:65:db:61:64:cd:19:0c:e0:a8:2e:10:cd:b0:33:8b:ff:3f:
3b:aa:16:ed:4e:67:3b:bc:69:0a:c8:71:47:a8:d2:83:2c:0e:
22:8b:08:98:39:6c:66:65:3d:e7:8e:11:fb:10:58:b5:3b:40:
a7:68:6f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+ddbf5Ytz8Ty4e5FEvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjQxMGE0YTBlNzIxNDM4ODRkYTg0NDNiZTgyOTZhODFh
Mjk5MDgwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
EygzODcwNzU2ODRhMzFjOTIxNWNhNjY5NGM0NmE4MzM2MmMyYzc3OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6WtqdUlUQF+l3/BFmFAQcPWYu76
xkE3pHsevH8ELtvMvs6P2QWszi21MUTRokEjA9RlKMwyGNUHWeTkiX7kwfqUnZhV
I590paoQf6uZ4pki99cQDmDn/2vrTlt6YgRq2o2CUTvraNEGmImxUbfhE4Gy405+
9w+9Wn7ADmAZ8B4r5sskKjuPy/yrEvqKdytKHE7NwUASPhLTuAmepJbJaRr3RvAf
kqhdzs5h37K8zCNV5R4n4TJl0fIm0lYAalgmAy/rl6FpHqNHNKdAMnp1TXacyTHV
y+ZHTi0rR6+Wtv0vw4Ob7qAMhnrzOrDSiSoCqMGsUyfL9E4nAjN0E4kWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhwdWhKMckhXKZpTEaoM2LCx3ilMB8GA1UdIwQY
MBaAFCT0EKSg5yFDiE2oRDvoKWqBopkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBRUXBLRG5JVU9JVGFoRU8tZ3Bhb0dpbVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZWI2ODEtMDVjMS00YjE3LWI3Nzgt
MjQyZTM5NjA5ZmUzLzEvSlBRUXBLRG5JVU9JVGFoRU8tZ3Bhb0dpbVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZWI2ODEtMDVjMS00YjE3LWI3NzgtMjQyZTM5NjA5ZmUz
LzEvSlBRUXBLRG5JVU9JVGFoRU8tZ3Bhb0dpbVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSGL9krD
lwYZS1mACTa2I1JOBJR6fgdGwAsSiCS/5kdxKCTQmZXcSOtCNCaXuB9tpKoX7CzU
qr9an+34WWlTtqrs9KQckeFychHNDsAxmOgXRNSS+I4NY0JxtwfEXIrZ09qv5QzX
F1pEXlQIadqQdUjocASnpYAb8F/NzDZtPO1gG2962zSGTSLs9rwhUxeTD4A2QbbT
G1YAHFTzbVE0xxE3S+saTDuH53oNIdFkKIG3BC5tMNguI+cL4lrX0Fa5Fw3Ra2z5
EGXbYWTNGQzgqC4QzbAzi/8/O6oW7U5nO7xpCshxR6jSgywOIosImDlsZmU9544R
+xBYtTtAp2hvuw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:34 2025 by rpki-client