Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: FNVVLAgtcNqa73qRQyxWaBqShwdCxQ3NM3cXd+/AXII=
Subject key identifier: 8E:DC:29:45:CE:4A:79:C3:46:10:21:DC:35:86:2D:99:B8:82:91:E7
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 0194BCA9C11363D2DE3EA219784A056E6EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: etWRrfMHGhr/O4MgHeYC+xhl1vmi47E5L2E5+YVTslc=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:13:63:d2:de:3e:a2:19:78:4a:05:6e:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=8edc2945ce4a79c3461021dc35862d99b88291e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:5e:7b:e2:71:e8:0a:d5:1b:55:e8:3e:ec:
f2:27:65:5d:a7:d6:a4:0f:38:a7:88:65:11:91:ea:
58:37:5f:bf:86:06:31:2c:95:63:91:e7:c5:40:fa:
ae:44:31:84:1e:44:aa:32:83:79:ff:34:ee:88:83:
d4:f9:0b:af:91:98:ee:97:46:34:bd:88:b0:f3:ed:
f5:b1:37:5a:4d:91:4d:62:81:02:17:cf:a0:5e:b3:
d4:ea:c6:ad:0f:a3:9d:aa:82:e6:6e:e7:66:78:9b:
8d:ab:7d:eb:c8:82:0c:dc:ca:c8:a3:03:a5:e3:6e:
06:d6:b8:0f:31:23:a2:a2:34:82:01:d0:0d:b8:65:
cb:87:27:7c:ab:d1:9f:5a:1d:61:c1:0f:7d:f2:fa:
4c:6c:64:33:98:33:fd:6c:50:26:c3:68:b1:ed:d2:
28:7c:f1:4c:45:ef:d3:b9:cb:5f:0f:3b:01:53:3f:
3b:d7:d7:5b:18:ba:22:7b:27:ab:28:e3:54:02:54:
bb:f7:cf:f9:13:1f:0b:44:e3:4d:e4:c2:2a:ea:86:
16:80:ff:74:9f:e7:79:09:a5:1a:ca:03:e7:9a:56:
8b:12:dd:19:a6:a7:77:3b:48:86:f2:a9:6e:a8:f3:
98:bf:d5:ad:51:2a:04:2f:c4:df:de:42:d9:df:44:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DC:29:45:CE:4A:79:C3:46:10:21:DC:35:86:2D:99:B8:82:91:E7
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:a0:79:df:17:bf:0e:cd:41:6e:cf:16:e2:4b:52:86:50:
35:b6:7b:45:2b:ab:0e:72:b2:4d:6d:76:26:69:55:36:d4:83:
ef:0e:76:8c:01:ad:4f:71:32:e3:f3:4d:cd:f9:10:be:c9:f2:
4a:a4:4f:27:61:85:c4:65:8f:2a:d5:dd:27:19:99:2f:45:f0:
fb:e5:e4:4b:5c:7d:e8:38:3e:da:ba:8d:cd:56:6a:68:c5:03:
58:e4:93:ea:4d:a3:b3:aa:ae:41:d4:52:07:fb:65:e8:8b:96:
c7:39:ca:d5:19:32:fa:0f:54:c3:bb:2c:74:0e:91:43:c7:72:
f1:8d:12:f8:55:da:91:67:08:a3:09:92:80:72:e1:5b:54:c5:
25:12:38:39:cf:cc:30:04:5f:8b:1e:c4:4d:28:51:ca:90:31:
76:ca:9c:e0:b1:d6:01:66:ee:d5:f6:67:ac:40:14:1f:9d:a1:
65:9c:11:56:50:c8:02:46:34:d2:e5:43:72:ac:37:b1:55:00:
71:b3:11:df:eb:25:fc:5e:d1:0b:4e:23:c1:95:35:10:4c:17:
79:64:16:97:be:6e:89:ad:28:4e:ab:14:c9:65:42:37:91:fc:
84:d4:66:63:1a:c8:95:40:eb:e7:3a:16:60:72:72:58:c7:cf:
ab:a4:8d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcETY9LePqIZeEoFbm60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx
MWYxZjkwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
Eyg4ZWRjMjk0NWNlNGE3OWMzNDYxMDIxZGMzNTg2MmQ5OWI4ODI5MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gVee+Jx6ArVG1XoPuzyJ2Vdp9ak
DziniGURkepYN1+/hgYxLJVjkefFQPquRDGEHkSqMoN5/zTuiIPU+QuvkZjul0Y0
vYiw8+31sTdaTZFNYoECF8+gXrPU6satD6OdqoLmbudmeJuNq33ryIIM3MrIowOl
424G1rgPMSOiojSCAdANuGXLhyd8q9GfWh1hwQ998vpMbGQzmDP9bFAmw2ix7dIo
fPFMRe/TuctfDzsBUz8719dbGLoieyerKONUAlS798/5Ex8LRONN5MIq6oYWgP90
n+d5CaUaygPnmlaLEt0Zpqd3O0iG8qluqPOYv9WtUSoEL8Tf3kLZ30RSnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7cKUXOSnnDRhAh3DWGLZm4gpHnMB8GA1UdIwQY
MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt
NDQwMjNjM2I3ODRlLzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl
LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP2ged8X
vw7NQW7PFuJLUoZQNbZ7RSurDnKyTW12JmlVNtSD7w52jAGtT3Ey4/NNzfkQvsny
SqRPJ2GFxGWPKtXdJxmZL0Xw++XkS1x96Dg+2rqNzVZqaMUDWOST6k2js6quQdRS
B/tl6IuWxznK1Rky+g9Uw7ssdA6RQ8dy8Y0S+FXakWcIowmSgHLhW1TFJRI4Oc/M
MARfix7ETShRypAxdsqc4LHWAWbu1fZnrEAUH52hZZwRVlDIAkY00uVDcqw3sVUA
cbMR3+sl/F7RC04jwZU1EEwXeWQWl75uia0oTqsUyWVCN5H8hNRmYxrIlUDr5zoW
YHJyWMfPq6SNbA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:42 2025 by rpki-client