Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: esv8bRD3xsvUHsFDOJ0Tj2oOJesVo/fUqa+Sk6L0YWY=
Subject key identifier: DA:F8:2D:1D:1A:CB:73:C4:0E:FF:95:A5:2E:D1:0F:0B:40:48:53:80
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 0194BD17CE87D865D9B4950CB4A1358D7D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 070A
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: 7MVDdilS4sTK8l6cHeizA9ZA21BKFYRX/lrL59e9GyE=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:87:d8:65:d9:b4:95:0c:b4:a1:35:8d:7d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=daf82d1d1acb73c40eff95a52ed10f0b40485380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:f5:7b:03:d3:f4:db:65:22:42:c5:8d:1e:
4f:cd:4f:ef:3d:7a:30:6a:1d:94:16:2a:d6:5e:36:
b4:92:3a:90:ff:ce:6f:a3:24:b8:6f:2c:37:56:ef:
e5:7f:be:a1:3f:5d:96:c2:a3:73:92:cc:cf:55:25:
d5:04:08:4e:90:c1:0d:cf:f4:d9:9d:67:bb:0a:5d:
4e:f3:c9:06:9e:75:27:e9:25:f7:76:a4:a3:4d:8e:
59:55:33:98:cf:ff:fb:41:18:e3:c2:9c:81:43:cc:
cc:09:fe:2d:22:84:90:f8:ae:f9:14:15:f3:92:34:
ae:0e:62:be:97:29:2c:e7:0d:85:3d:70:54:65:36:
0f:bf:57:5d:b1:8d:68:ef:2f:db:fe:61:19:28:20:
7f:26:cb:2a:67:72:c2:ae:9a:98:d8:9d:ed:59:3e:
d0:e6:0c:31:8b:19:cc:d6:2d:d1:28:3b:0a:0e:87:
11:a1:3e:6c:c5:6f:14:0b:c3:04:69:13:f4:25:18:
09:f2:38:5b:be:64:6d:4f:d5:11:8d:6f:e7:a0:cd:
7e:bf:36:8a:13:0a:4a:24:15:b1:0d:86:f0:3f:ec:
bf:46:77:56:13:59:48:8e:8d:aa:22:ed:2b:f1:34:
7a:ed:96:cf:bf:48:55:fe:ce:ee:c1:c4:15:33:d4:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:2D:1D:1A:CB:73:C4:0E:FF:95:A5:2E:D1:0F:0B:40:48:53:80
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:e0:cf:cc:04:64:91:7f:dd:39:89:da:ef:ac:45:8e:ec:
72:29:12:bd:a4:3a:d0:9d:b6:cd:d7:86:7a:5f:46:17:15:c1:
b9:d5:9f:44:5f:9d:76:c4:1f:0f:fc:73:a7:34:c2:d9:b2:d3:
59:0a:5e:3a:d3:5a:28:a6:de:83:a1:7e:4e:a3:54:aa:e0:a7:
2e:27:97:4e:25:3f:12:52:5a:ae:b8:d6:ae:b7:ca:cd:73:c4:
11:1e:f8:2f:16:b2:ec:7c:c4:00:c6:e9:3a:b3:35:d8:33:5e:
47:1d:e5:c1:b3:17:0a:32:db:8a:f6:ca:64:f6:b9:e7:fa:f1:
32:92:08:2f:f2:08:19:49:97:f4:1d:37:e7:57:8a:ae:28:35:
b4:14:96:b6:ad:54:13:43:9c:83:0f:8b:f4:56:16:27:87:ad:
f6:a0:fd:29:a9:ca:ad:83:0d:dd:6b:b0:50:bb:6d:df:4b:a7:
27:89:fc:d8:a2:97:56:d3:ca:fb:e7:3d:48:f3:0b:73:33:05:
e7:de:b7:48:76:95:7d:70:ca:ef:01:ef:b5:3e:7a:0d:3c:91:
10:b4:1a:cc:ae:42:fe:36:4d:b4:1d:bf:dc:5a:a6:93:4c:69:
03:d4:1d:bc:f5:5d:3c:dc:9d:eb:bf:98:7a:51:b6:a1:9a:b1:
db:de:b7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F86H2GXZtJUMtKE1jX2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EyhkYWY4MmQxZDFhY2I3M2M0MGVmZjk1YTUyZWQxMGYwYjQwNDg1MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf/1ewPT9NtlIkLFjR5PzU/vPXow
ah2UFirWXja0kjqQ/85voyS4byw3Vu/lf76hP12WwqNzkszPVSXVBAhOkMENz/TZ
nWe7Cl1O88kGnnUn6SX3dqSjTY5ZVTOYz//7QRjjwpyBQ8zMCf4tIoSQ+K75FBXz
kjSuDmK+lyks5w2FPXBUZTYPv1ddsY1o7y/b/mEZKCB/JssqZ3LCrpqY2J3tWT7Q
5gwxixnM1i3RKDsKDocRoT5sxW8UC8MEaRP0JRgJ8jhbvmRtT9URjW/noM1+vzaK
EwpKJBWxDYbwP+y/RndWE1lIjo2qIu0r8TR67ZbPv0hV/s7uwcQVM9QfMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr4LR0ay3PEDv+VpS7RDwtASFOAMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4zgz8wE
ZJF/3TmJ2u+sRY7scikSvaQ60J22zdeGel9GFxXBudWfRF+ddsQfD/xzpzTC2bLT
WQpeOtNaKKbeg6F+TqNUquCnLieXTiU/ElJarrjWrrfKzXPEER74Lxay7HzEAMbp
OrM12DNeRx3lwbMXCjLbivbKZPa55/rxMpIIL/IIGUmX9B0351eKrig1tBSWtq1U
E0Ocgw+L9FYWJ4et9qD9KanKrYMN3WuwULtt30unJ4n82KKXVtPK++c9SPMLczMF
5963SHaVfXDK7wHvtT56DTyRELQazK5C/jZNtB2/3Fqmk0xpA9QdvPVdPNyd67+Y
elG2oZqx2963Pw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:58 2025 by rpki-client